Setting the hardware profile for Cert Manager

You can set a different hardware profile for Cert Manager to achieve the best performance for your workload.

Editing the CertManagerConfig custom resource

Learn how to edit the CertManagerConfig custom resource to set the hardware profile for Cert Manager.

From the OpenShift console:

Log in to your OpenShift console.
Go to Operators > Installed Operators.
From the Project drop-down list, select All Projects
Select IBM Cert Manager.
Select the Cert Manager Config tab. The instance of Cert Manager Config custom resource is listed.
From the overflow action menu, select Edit CertManagerConfig.

Edit the YAML, to set the hardware profile for Cert Manager. For example:

apiVersion: operator.ibm.com/v1
kind: CertManagerConfig
metadata:
labels:
    app.kubernetes.io/instance: ibm-cert-manager-operator
    app.kubernetes.io/managed-by: ibm-cert-manager-operator
    app.kubernetes.io/name: cert-manager
name: default
spec:
    license:
        accept: true
    certManagerController:
        resources:
        limits:
            cpu: 80m
            memory: 530Mi
        requests:
            cpu: 20m
            memory: 230Mi
            ephemeral-storage: 256Mi
    certManagerWebhook:
        resources:
        limits:
            cpu: 60m
            memory: 100Mi
        requests:
            cpu: 30m
            memory: 40Mi
            ephemeral-storage: 256Mi
    certManagerCAInjector:
        resources:
        limits:
            cpu: 100m
            memory: 520Mi
        requests:
            cpu: 20m
            memory: 410Mi
            ephemeral-storage: 256Mi
    enableCertRefresh: true
    enableWebhook: true
    version: 4.2.18
    imageRegistry: icr.io/cpopen/cpfs
    disableHostNetwork: true

Click Save.

From the command line:
1. Run the following command:
```
oc edit CertManagerConfig default
```
2. Make your changes to the YAML.

certManagerCAInjector

Edit online

Table 1. Settings for certManagerCAInjector
Parameter	Description	Default value	Syntax
`certManagerCAInjector.resources.limits.cpu`	Sets the CPU limit for CAInjector container.	100m	Kubernetes CPU units (String)
`certManagerCAInjector.resources.limits.memory`	Sets the memory limit for CAInjector container.	520Mi	Bytes (String)
`certManagerCAInjector.resources.requests.cpu`	Sets the CPU request for CAInjector container.	20m	Kubernetes CPU units (String)
`certManagerCAInjector.resources.requests.memory`	Sets the memory request for CAInjector container.	410Mi	Bytes (String)
`certManagerCAInjector.resources.requests.ephemeral-storage`	Sets the ephemeral storage request for CAInjector container.	256Mi	Bytes (String)

certManagerController

Edit online

Table 2. Settings for certManagerController
Parameter	Description	Default value	Syntax
`certManagerController.resources.limits.cpu`	Sets the CPU limit for Controller container.	80m	Kubernetes CPU units (String)
`certManagerController.resources.limits.memory`	Sets the memory limit for Controller container.	530Mi	Bytes (String)
`certManagerController.resources.requests.cpu`	Sets the CPU request for Controller container.	20m	Kubernetes CPU units (String)
`certManagerController.resources.requests.memory`	Sets the memory request for Controller container.	230Mi	Bytes (String)
`certManagerController.resources.requests.ephemeral-storage`	Sets the ephemeral storage request for Controller container.	256Mi	Bytes (String)

certManagerWebhook

Edit online

Table 3. Settings for certManagerWebhook
Parameter	Description	Default value	Syntax
`certManagerWebhook.resources.limits.cpu`	Sets the CPU limit for webhook container.	60m	Kubernetes CPU units (String)
`certManagerWebhook.resources.limits.memory`	Sets the memory limit for webhook container.	100Mi	Bytes (String)
`certManagerWebhook.resources.requests.cpu`	Sets the CPU request for webhook container.	30m	Kubernetes CPU units (String)
`certManagerWebhook.resources.requests.memory`	Sets the memory request for webhook container.	40Mi	Bytes (String)
`certManagerWebhook.resources.requests.ephemeral-storage`	Sets the ephemeral storage request for webhook container.	256Mi	Bytes (String)