Upgrading from v0.4 to v0.5
Version 0.5 of cert-manager introduces a new ‘webhook’ component, which is used by the Kubernetes apiserver to validate our CRD resource types.
This should help in future to reduce errors caused by misconfigured Certificate and Issuer resources.
When upgrading from a previous release using Helm, it is essential that you perform one extra step before upgrading.
Disabling resource validation on the cert-manager namespace
Before upgrading, you should add the certmanager.k8s.io/disable-validation: "true"
label to the cert-manager
namespace.
This will allow the system resources that cert-manager requires to bootstrap TLS to be created in its own namespace.
Last modified March 13, 2020: Fix order of upgrade notes (3dca1e1)