Updrade to cert-manager 0.11.0

We were pinned to cert-manager 0.10.0 before this update. There
has been a new release and we have upgraded to use 0.11.0 with its
new CRDs and new api namespace etc.
The 0.10.0 -> 0.11.0 update is a breaking change so the upgrade
instructions on the cert-manager website should be followed for
existing installs. New installs will use 0.11.0 by default

Signed-off-by: Alistair Hey <alistair@heyal.co.uk>

README.md

@@ -546,7 +546,7 @@ Flush out the staging certificates and orders
 
 ```sh
 kubectl delete certificates --all  -n openfaas
-kubectl delete secret -n openfaas -l="certmanager.k8s.io/certificate-name"
+kubectl delete secret -n openfaas -l="cert-manager.io/certificate-name"
 kubectl delete order -n openfaas --all
 ```
 

ROADMAP.md

@@ -72,6 +72,3 @@ Status:
 
 Add all remaining steps from [installation guide](https://github.com/openfaas/openfaas-cloud/tree/master/docs).
 
-Caveats:
-
-* JetStack's cert-manager is currently pinned to an earlier version due to issues with re-creating the CRD entries. 

pkg/tls/issuer_test.go

@@ -26,7 +26,7 @@ func Test_DigitalOcean_Issuer(t *testing.T) {
 
 	templateRes.Execute(&buf, &tlsTemplate)
 
-	wantTemplate := `apiVersion: certmanager.k8s.io/v1alpha1
+	wantTemplate := `apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod
@@ -83,7 +83,7 @@ func Test_Route53_Issuer(t *testing.T) {
 	buf := bytes.Buffer{}
 	templateRes.Execute(&buf, &tlsTemplate)
 
-	wantTemplate := `apiVersion: certmanager.k8s.io/v1alpha1
+	wantTemplate := `apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod
@@ -141,7 +141,7 @@ func Test_GoogleCloudDNS_Issuer(t *testing.T) {
 	buf := bytes.Buffer{}
 	templateRes.Execute(&buf, &tlsTemplate)
 
-	wantTemplate := `apiVersion: certmanager.k8s.io/v1alpha1
+	wantTemplate := `apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod

scripts/create-namespaces.sh

@@ -1,14 +1,11 @@
 #!/bin/bash
 
 # Install the CustomResourceDefinition resources separately
-kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml
+kubectl apply --validate=false -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.11/deploy/manifests/00-crds.yaml
 
 kubectl apply -f https://raw.githubusercontent.com/openfaas/faas-netes/master/namespaces.yml
 
 # Create the namespace for cert-manager
 kubectl create namespace cert-manager
 
-# Label the cert-manager namespace to disable resource validation
-kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true
-
 kubectl get namespaces

scripts/install-cert-manager.sh

@@ -8,5 +8,5 @@ helm repo update
 helm install \
   --name cert-manager \
   --namespace cert-manager \
-  --version v0.10.0 \
+  --version v0.11.0 \
   jetstack/cert-manager

scripts/reset.sh

@@ -9,8 +9,8 @@ kubectl delete ns openfaas openfaas-fn
 kubectl delete ns  cert-manager
 
 kubectl delete crd sealedsecrets.bitnami.com
-kubectl delete \
-    -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.6/deploy/manifests/00-crds.yaml
+kubectl delete -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.11/deploy/manifests/00-crds.yaml
+
 
 kubectl delete deploy/tiller-deploy -n kube-system
 kubectl delete sa/tiller -n kube-system

templates/issue-prod.yml

@@ -1,4 +1,4 @@
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod

templates/k8s/tls/auth-domain-cert.yml

@@ -1,5 +1,5 @@
 ---
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
 kind: Certificate
 metadata:
   name: auth-system-{{.RootDomain}}

templates/k8s/tls/issuer-prod.yml

@@ -1,4 +1,4 @@
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod

templates/k8s/tls/issuer-staging.yml

@@ -1,4 +1,4 @@
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-staging

templates/k8s/tls/wildcard-domain-cert.yml

@@ -1,5 +1,5 @@
 ---
-apiVersion: certmanager.k8s.io/v1alpha1
+apiVersion: cert-manager.io/v1alpha2
 kind: Certificate
 metadata:
   name: wildcard-{{.RootDomain}}