No downtime upgrade of jetstack cert-manager in Kubernetes using Helm

9/24/2019

We need to upgrade our cert-manager (v 0.5.0) to the latest one (currently 0.10.0) because of the support end from Let's Encrypt on November 1st 2019.

I have found following answer by @bzumby on how to upgrade cert-manager, where he describe a no-downtime upgrade sequence for cert-manager: https://stackoverflow.com/a/57807983/12115618

From the answer, a new cert-manager chart is installed to the cluster in a separate namespace, in order for the new cert manager to start syncing all the certificates already in place.

But nothing is mentioned about what to do with the previous cert-manager installation.

Am I correct in assuming that the old cert-manager helm chart (including the associated namespace) needs to be deleted AFTER the steps described in the answer? Is there any additional actions that need to be taken?

Thanks

-- Louis L.
cert-manager
kubernetes
upgrade

0 Answers