Summary

The aim of this epic is to provide integration for Cert Manager into OpenShift.

The details are outlined in this presentation.

Motivation

etstack was acquired recently. If they make cert-manager closed source, we won't be able to use it any more. We need to check what their intentions are. We'll need to work with the CTO office/ partner team to see if they can find out.

link

Goals

• Provide a library-go based Operator
• Provide a way to install the Operator along with the Cert Manager operand in a convenient way.
• All the artifacts need to be productized by the Red Hat

Non-Goals

• We do not intend to migrate the existing installation nor existing CRDs. We may however reuse them.
• Provide a migration (from the upstream operator and hand-crafted solutions) path for customers

Deliverables

The Cert Manager will be provided as an OLM operator provisioned through the Red Hat productization pipeline. As the end results, the Cert Manager Operator could be installed using Red Hat Operator Marketplace. The Operator will be designed in such a way, to be a drop-in replacement for the upstream one.

The Operator itself will be hosted in openshift/cert-manager-operator repository and will be developed using library-go.

Dependencies

• Core platform needs to be operational
• OLM
• Red Hat Productization Team (CPaaS, productization on-boarding process etc)

Previous Work

• This epic relates to https://issues.redhat.com/browse/ACM-168
• Productization proposal: https://docs.google.com/presentation/d/1c9517HfnFdCwKq-KCmm3jb3ODmV7D9vOZAUyTB_qL9Y/edit#slide=id.gbd1de4aae3_0_0

Timeline

Alongside OpenShift 4.9 and 4.10.

Open questions:

None.

Done Checklist

• CI - CI is running, tests are automated and merged.
• Release Enablement <link to Feature Enablement Presentation>
• DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
• DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
• DEV - Downstream build attached to advisory: <link to errata>
• QE - Test plans in Polarion: <link or reference to Polarion>
• QE - Automated tests merged: <link or reference to automated tests>
• DOC - Downstream documentation merged: <link to meaningful PR>