cert-manager
Installation
SKILL.md
Cert-Manager CRDs
Chart from https://charts.jetstack.io or oci://quay.io/jetstack/charts/cert-manager
Latest chart: v1.20.2 (Apr 2026) | API: cert-manager.io/v1, acme.cert-manager.io/v1
CRDs: Certificate, Issuer, ClusterIssuer, CertificateRequest | ACME: Order, Challenge | Alpha: ListenerSet
Install CRDs: --set crds.enabled=true or installCRDs: true
CRD Reference
| CRD | API | Scope | Purpose | Key Fields |
|---|---|---|---|---|
| Issuer | cert-manager.io/v1 |
Namespaced | Certificate authority within a namespace. ACME, self-signed, CA, Vault, Venafi. | spec.acme, spec.ca, spec.selfSigned, spec.vault, spec.venafi |
| ClusterIssuer | cert-manager.io/v1 |
Cluster | Cluster-wide issuer — can issue certs in any namespace. Same spec as Issuer. | Same as Issuer |
| Certificate | cert-manager.io/v1 |
Namespaced | Request a TLS certificate from an issuer. Creates Secret with cert+key. | spec.secretName, spec.issuerRef, spec.dnsNames[], spec.commonName, spec.duration, spec.renewBefore, spec.privateKey (algorithm, size, rotationPolicy), spec.usages[], spec.subject |
| CertificateRequest | cert-manager.io/v1 |
Namespaced | Low-level CSR resource. Usually created automatically by Certificate. | spec.issuerRef, spec.request (base64 CSR), spec.duration, spec.isCA |