带有证书管理器的 Istio Kubernetes 入口：版本“certmanager.k8s.io/v1alpha1”中的种类“证书”不匹配

Question

I'm trying to configure HTTPS for my K8s/Istio cluster. I'm following this official tutorial step by step multiple times from scratch and get the same error every time when try to create a Certificate resource.

no matches for kind "Certificate" in version "certmanager.k8s.io/v1alpha1"

I tried to install cert-manager and its CRD manually based on official docs and no help.

cert-manager-5ff755b6d5-9ncgr                               1/1       Running     0          6m55s
cert-manager-cainjector-576978ffc8-4db4l                    1/1       Running     0          6m55s
cert-manager-webhook-c67fbc858-wvtgs                        1/1       Running     0          6m55s

Can't find any piece of information regarding this error since it works foe everyone after installing out of the box or after installing cert-manager's CRD.

Answer 1

I suggest you to try this installation for cert-manager and thereafter you can follow this stackoverflow post , it will get the issue sorted, I guess. You just need to make few substitutions at places where ingress has to be replaced with istio.

Kindly use

apiVersion: cert-manager.io/v1alpha2

in clusterissuer, if the apiVersion for clusterIssuer present in that stackoverflow post is not acceptable

Answer 2

Use the "kubectl api-versions" to list all the supported api versions.

if the list contains the supported version then you should be able to generate kind certificates with the corresponding versions for eg: # kubectl api-versions |grep cert acme.cert-manager.io/v1 cert-manager.io/v1 certificates.k8s.io/v1 certificates.k8s.io/v1beta1`