@@ -19,16 +19,16 @@ configuring different `Issuer` types can be found in the [respective configurati
1919guides] ( ../../configuration/ ) .
2020
2121
22+ > Note: From cert-manager ` v0.14.0 ` onward, the minimum supported version of
23+ > Kubernetes is ` v1.11.0 ` . Users still running Kubernetes ` v1.10 ` or below should
24+ > upgrade to a supported version before installing cert-manager.
25+
2226> ** Warning** : You should not install multiple instances of cert-manager on a single
2327> cluster. This will lead to undefined behavior and you may be banned from
2428> providers such as Let's Encrypt.
2529
2630## Installing with regular manifests
2731
28- > Note: From cert-manager ` v1.2.0 ` onward, the minimum supported version of
29- > Kubernetes is ` v1.16.0 ` . Users still running Kubernetes ` v1.15 ` or below should
30- > upgrade to a supported version before installing cert-manager or use cert-manager ` v1.1 ` .
31-
3232All resources (the ` CustomResourceDefinitions ` , cert-manager, namespace, and the webhook component)
3333are included in a single YAML manifest file:
3434
@@ -39,9 +39,24 @@ are included in a single YAML manifest file:
3939Install the ` CustomResourceDefinitions ` and cert-manager itself:
4040
4141``` bash
42- $ kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.2.0/cert-manager.yaml
42+ # Kubernetes 1.16+
43+ $ kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.1.0/cert-manager.yaml
44+
45+ # Kubernetes <1.16
46+ $ kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.1.0/cert-manager-legacy.yaml
4347```
4448
49+ > ** Note** : If you're using a Kubernetes version below ` v1.15 ` you will need to install the legacy version of the manifests.
50+ > This version does not have API version conversion and only supports ` cert-manager.io/v1 ` API resources.
51+
52+ > ** Note** : If you are running Kubernetes ` v1.15.4 ` or below, you will need to add the
53+ > ` --validate=false ` flag to your ` kubectl apply ` command above else you will
54+ > receive a validation error relating to the
55+ > ` x-kubernetes-preserve-unknown-fields ` field in cert-manager's
56+ > ` CustomResourceDefinition ` resources. This is a benign error and occurs due
57+ > to the way ` kubectl ` performs resource validation.
58+
59+
4560> ** Note** : When running on GKE (Google Kubernetes Engine), you may encounter a
4661> 'permission denied' error when creating some of these resources. This is a
4762> nuance of the way GKE handles RBAC and IAM permissions, and as such you should
@@ -65,10 +80,6 @@ Once you have deployed cert-manager, you can verify the installation
6580
6681## Installing with Helm
6782
68- > Note: From cert-manager ` v1.2.0 ` onward, the minimum supported version of
69- > Kubernetes is ` v1.16.0 ` . Users still running Kubernetes ` v1.15 ` or below should
70- > upgrade to a supported version before installing cert-manager or use cert-manager ` v1.1 ` .
71-
7283As an alternative to the YAML manifests referenced above, we also provide an
7384official Helm chart for installing cert-manager.
7485
@@ -118,9 +129,15 @@ option when installing the Helm chart.
118129Install the ` CustomResourceDefinition ` resources using ` kubectl ` :
119130
120131``` bash
121- $ kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.2.0/cert-manager.crds.yaml
132+ # Kubernetes 1.15+
133+ $ kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.1.0/cert-manager.crds.yaml
134+
135+ # Kubernetes <1.15
136+ $ kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.1.0/cert-manager-legacy.crds.yaml
122137```
123138
139+ > ** Note** : If you're using a Kubernetes version below ` v1.15 ` you will need to install the legacy version of the CRDs.
140+ > This version does not have API version conversion and only supports ` cert-manager.io/v1 ` API resources.
124141
125142** Option 2: install CRDs as part of the Helm release**
126143
@@ -137,7 +154,7 @@ To install the cert-manager Helm chart:
137154$ helm install \
138155 cert-manager jetstack/cert-manager \
139156 --namespace cert-manager \
140- --version v1.2 .0 \
157+ --version v1.1 .0 \
141158 # --set installCRDs=true
142159```
143160
0 commit comments