ClusterIssuer integration

[Ali]

Hi Everyone,

I hope you all are doing great.

I have a scenario where i would like to automate the installation of the ClusterIssuer with the helm chart it-self. I understand the surrounding circumstances of actually doing that but in my case i need to.

Can anyone guide me on how to take a copy of the repo and just add the cluster isser resource inside the templates files pelase?

Regards,

Ali

[Richard Wall]

You can create your own Helm chart with the ClusterIssuer and configure it to *depend* on the published cert-manager chart.

 * https://helm.sh/docs/helm/helm_dependency/

The trouble is that Helm might try installing the ClusterIssuer before the cert-manager webhook TLS is configured:

 * https://cert-manager.io/docs/concepts/webhook/#webhook-connection-problems-shortly-after-cert-manager-installation

I have not tried it myself, but perhaps you could use a Helm pre-install hook in *your* chart which blocks until the cert-manager API is usable, by performing `kubectl apply -f test-resources.yaml --dry-run` in a loop until it succeeds:

 * https://helm.sh/docs/topics/charts_hooks/

If you succeed in getting this working, please consider documenting it for the benefit of other cert-manager users:

 * https://github.com/cert-manager/website/pulls

We've been discussing this problem in Slack today, in case you'd like to weigh in:

 * https://kubernetes.slack.com/archives/CDEQJ0Q8M/p1624361195003400

Thanks and good luck

-RichardW.

[Ali]

Thanks Richar. This was pretty useful. i will let you know of the results of my work.