Installing Red Hat Cert Manager

• Docker or Podman is installed.
• The OpenShift CLI (oc command) is installed.
• The oc-mirror plugin is installed. For more information, see Installing the oc-mirror OpenShift CLI plugin.
• Access to the Red Hat registry.redhat.io container image registry.

If you are installing OpenShift in a disconnected environment, you must mirror the Red Hat Cert Manager image set to a local registry. The following steps describe how to mirror the Red Hat Cert Manager image set to a local registry.

1. Set up local registry and registry namespaces. For more information, see Creating registry namespaces.

2. Configure credentials that allow images to be mirrored. Download the Red Hat pull secret from Red Hat® OpenShift® Cluster Manager. For more information about the config credential, see Configuring credentials that allow images to be mirrored.

3. Mirror an image set to a mirror registry.

   1. Create an ImageSetConfiguration definition to mirror Red Hat Cert Manager. Create the following ImageSetConfiguration API in the local file system based on the following example. Replace the <OCP-version> value with the Red Hat OpenShift Container Platform (OCP) version, for example, v4.18 or v4.16.

      kind: ImageSetConfiguration
      apiVersion: mirror.openshift.io/v2alpha1
      mirror:
        operators:
          - catalog: registry.redhat.io/redhat/redhat-operator-index:<OCP-version>
            packages: 
            - name: openshift-cert-manager-operator
       

      Note: For OpenShift operators, the CatalogSource images are specific to the OCP version. For example, a CatalogSource that is named redhat-operators has a different image location for different OCP versions. To determine which images correspond to which versions, see the following list of redhat-operators CatalogSource images. Red Hat calls these images as operator index images:

      OCP v4.12: registry.redhat.io/redhat/redhat-operator-index:v4.12
      OCP v4.14: registry.redhat.io/redhat/redhat-operator-index:v4.14
      OCP v4.16: registry.redhat.io/redhat/redhat-operator-index:v4.16
      OCP v4.18: registry.redhat.io/redhat/redhat-operator-index:v4.18
       

      For more information, see Creating the image set configuration.

   2. Mirror the images from the specified image set configuration to a specified registry by running the following command.

      • The <image_set_configuration> value specifies the name of the image set configuration file that you created in the previous step.
      • The <file_path> value specifies the directory where cluster resources are generated.
      • The <mirror_registry_url> value specifies the URL or address of the mirror registry where the images are stored and from which they need to be deleted.

      oc mirror -c <image-set-configuration> --workspace file://<file-path> docker://<mirror-registry-URL> --v2
       

   3. Verify the installation. Go to the working-dir/cluster-resources directory that was generated in the <file_path> directory. Verify that the YAML files are present for the ImageDigestMirrorSet and CatalogSourceresources resources. For more information, see Creating the image set configuration.

   For more information, see Mirroring an image set to a mirror registry.

4. Configure your cluster to use the resources that were generated by the oc-mirror plugin v2.

   1. Log in to the OpenShift CLI as a user with the cluster-admin role.
   2. Apply the YAML files from the results directory to the cluster by running the following command. Replace the <path_to_oc_mirror_workspace> value with the path of your OpenShift mirror workspace.

      oc apply -f <path_to_oc_mirror_workspace>/working-dir/cluster-resources
       

   3. Verify that the ImageDigestMirrorSet resource is installed by running the following command:

      oc get imagedigestmirrorset
       

   4. Verify that the CatalogSource resources are installed by running the following command:

      oc get catalogsource -n openshift-marketplace
       

   For more information, see Configuring your cluster to use the resources generated by oc-mirror plugin v2.

Install the Red Hat Cert Manager operator by using the OpenShift CLI or the OpenShift console. For more information, see Installing the cert-manager Operator for Red Hat OpenShift .