cleanup cert-manager installation for kops-registry

Currently we install cert-manager manually with helm install.

As magnum includes an automatic release of this component with the label --labels cert_manager_io_enabled=true we can add this to the deployment labels.

• Drop the ClusterIssuer install from the templates
• Create a job to overwrite the ClusterIssuer definitions as appropriate
• Change the ingress annotations to select the correct ClusterIssuer as appropriate

added A-gitops A-registry p2 labels

assigned to @dtomasgu

mentioned in issue #44 (closed)

changed title from Move cert-manager install to cluster label to cleanup cert-manager installation for kops-registry

Current status:

• cert-manager is now an addon in kops (https://gitlab.cern.ch/kubernetes/automation/releases/kops/-/tree/master/addons/cert-manager?ref_type=heads)
• we need to figure out the issuer config (https://gitlab.cern.ch/kubernetes/automation/releases/kops-registry/-/blob/staging/templates/cert-manager-issuer.yaml?ref_type=heads)

assigned to @rbritoda and unassigned @dtomasgu

changed iteration to Kubernetes Sprints Dec 13, 2023 - Dec 26, 2023

changed iteration to Kubernetes Sprints Jan 10, 2024 - Jan 23, 2024

changed iteration to Kubernetes Sprints Jan 24, 2024 - Feb 6, 2024

changed iteration to Kubernetes Sprints Feb 21, 2024 - Mar 5, 2024

changed iteration to Kubernetes Sprints Mar 6, 2024 - Mar 19, 2024

removed iteration Kubernetes Sprints Mar 6, 2024 - Mar 19, 2024

assigned to @akothiwa and unassigned @rbritoda

added to epic &3 (closed)

@dtomasgu: This issue has not been updated for a long time.

Is it still needed? In case it is, please reply here to reopen it.

In case of no reply, it will be automatically closed soon.

added triagestale label

removed triagestale label

@akothiwa let's review the state of this.

changed iteration to Kubernetes Sprints Jun 26, 2024 - Jul 9, 2024

mentioned in merge request cern-magnum!217 (closed)

mentioned in merge request !86 (closed)

Let's split MR and have one for registry and one for registry-staging.

1. remove manually installed cert-manager
2. install cert-manager with kops
3. test this MR

We will hold this update for now, as installing the cert-manager with add-ons will update it to newer version (1.7.1->1.14.4) and there doesn't seem to be any major update for doing that. The cert-manager update will be handled with the Harbor registry upgrade.

changed iteration to Kubernetes Sprints Jul 10, 2024 - Jul 23, 2024

removed iteration Kubernetes Sprints Jul 10, 2024 - Jul 23, 2024

@dtomasgu: This issue has not been updated for a long time.

Is it still needed? In case it is, please reply here to reopen it.

In case of no reply, it will be automatically closed soon.

added triagestale label

Waiting for the upgrade.

removed triagestale label

@strigazi this will come with the service upgrade?

changed iteration to Kubernetes Sprints Jan 8, 2025 - Jan 21, 2025

assigned to @strigazi and unassigned @akothiwa

backlog until moving the deployment to a new cluster

removed iteration Kubernetes Sprints Jan 8, 2025 - Jan 21, 2025

dones, with the deployment of in a new cluster https://cern.service-now.com/service-portal?id=outage&n=OTG0154380

closed

changed iteration to Kubernetes Sprints Feb 5, 2025 - Feb 18, 2025