Certificate management

Learn about managing certificates that are created by the installer.

If you are using the Certificate manager operator service as part of an IBM Cloud Pak®, see the documentation for that IBM Cloud Pak® to learn more about how to install and use the operator service. For more information about IBM Cloud Paks, see IBM Cloud Paks that use IBM Cloud Pak foundational services.

What's new for the Certificate manager service

Installer version 4.4.x

• Cert Manager operator is updated to support the spec.labels parameter in the custom resources of the CertManagerConfig. You can set the labels to the Cert Manager operand resources such as Deployments, StatefulSets, Pods, Secrets, ConfigMaps, and Routes.

Installer version 4.3.x

• The default size for cert-manager-operator is updated.

Installer version 4.1.x

• Certificate manager operator service is now synced with the open source cert-manager version (that is, foundational services cert-manager operands), to version 1.12.2.

Installer version 4.0.x

• You can now bring your own certificate (BYOC) in two ways:
  • By using the common-service custom resource
  • By creating your own certificate manager resources

How to check which service version you are using

You can check the installer version in the configmap by running the following command:

oc -n kube-public get ConfigMap ibmcloud-cluster-info -o jsonpath=’{.data.version}’

   3.6.0

You can check the Common service operator full version and deployed namespace by running the following command:

oc get csv --all-namespaces | grep common-service-

common-service        IBM Cloud Platform Common Services     3.6.3                   ibm-common-service-operator.v3.5.6             Succeeded
ibm-common-services  IBM Cloud Platform Common Services     3.6.3                   ibm-common-service-operator.v3.5.6             Succeeded