How to use cert-manager in Truecharts for apps?

[jasonhui]

Hi, all
I found the lastest version of traefik doesn't offer using TrueNAS SCALE Certificate option.
Does it means we could use cert-manager for ACME cert?
If so, how to get it done?


B.R.

 

[LarsR]

It's unlikely that you will get an answer from this Forum. Truecharts is a Community Project with their own Support Channels, mostly GitHub and their discord Server.
The truecharts Team only visits this Forum unregularly and they are the ones who most likely can answer your question.

 

[FrostyCat]

I think Truecharts will soon have documentation about this.

But, if you want to play around, you can create the ClusterIssuer and then the Certificate resources by following cert-manager documentation:

• https://cert-manager.io/docs/configuration/acme/ -> for Let's Encrypt
• https://cert-manager.io/docs/configuration/selfsigned/ -> self signed
• https://cert-manager.io/docs/usage/certificate/ -> certificate, needs an issuer first

It's all YAML and very logical so it should be easy to use even for people not familiar with cert-manager. Basically you need a ClusterIssuer (because it's not namespaced so available from everywhere, an Issuer would be local to a namespace) and then a Certificate (can be a wildcard certificate so you only create one for all your apps).

I also think if you want an UI, there is a chart poorly named cert-manager that will give you some graphical options. I haven't used it yet so not sure what it does, but it seems that's its purpose.

 

[jasonhui]

Thanks for your replies.
I found apps in Truecharts now can get ACME certs with the latest version of cert-manager(1.0.9).

 

[ulises31]

Thanks for your replies.
I found apps in Truecharts now can get ACME certs with the latest version of cert-manager(1.0.9).

hi bro how you do it i had problems with my nextcloud app certificate, can you help me?

 

[jasonhui]

hi bro how you do it i had problems with my nextcloud app certificate, can you help me?

I made a mistake before. In fact, not all apps can use cert-manager. Only the latest version of traefix can use cert-manager, which removes support using built-in cert of truenas. Other apps that have not been updated cannot use cert-manager.

 

[Lucius]

I made a mistake before. In fact, not all apps can use cert-manager. Only the latest version of traefix can use cert-manager, which removes support using built-in cert of truenas. Other apps that have not been updated cannot use cert-manager.

Hi, I'm also trying to get cert-manager to work because TrueNAS Scale's certificates don't seem to work, but as you described only traefik works.
I tried to get TLS on "homer" or other simple dashboard/homepage apps but the certificate was never applied.
Are you sure this is a problem with the apps not being updated yet or could it also be something regarding a wildcard certificate?
Because what I want is a certificate for local.mydomain.com and *.local.mydomain.com and I don't really see an option for this in cert-manager. Because of that the certificate that is used by treafik is for "traefik.local.mydomain.com". I don't know if I can change the domain for that to include the wildcard domain.

 

[JacobS1]

Hi, I'm also trying to get cert-manager to work because TrueNAS Scale's certificates don't seem to work, but as you described only traefik works.
I tried to get TLS on "homer" or other simple dashboard/homepage apps but the certificate was never applied.
Are you sure this is a problem with the apps not being updated yet or could it also be something regarding a wildcard certificate?
Because what I want is a certificate for local.mydomain.com and *.local.mydomain.com and I don't really see an option for this in cert-manager. Because of that the certificate that is used by treafik is for "traefik.local.mydomain.com". I don't know if I can change the domain for that to include the wildcard domain.

 

[JacobS1]

Hi, I'm also trying to get cert-manager to work because TrueNAS Scale's certificates don't seem to work, but as you described only traefik works.
I tried to get TLS on "homer" or other simple dashboard/homepage apps but the certificate was never applied.
Are you sure this is a problem with the apps not being updated yet or could it also be something regarding a wildcard certificate?
Because what I want is a certificate for local.mydomain.com and *.local.mydomain.com and I don't really see an option for this in cert-manager. Because of that the certificate that is used by treafik is for "traefik.local.mydomain.com". I don't know if I can change the domain for that to include the wildcard domain.

As mentioned, there is currently a breaking change going on. Currently, only the apps in the Enterprise chain are updated (including traefik, cert-manager, and others). Everything in the stable or incubator trains are not currently compatible. If you try your cert-manager configuration on the traefik dashboard, it should work if set up properly. For anything on the stable train, you'll have to wait until the update this month.

 

[jasonhui]

Hi, I'm also trying to get cert-manager to work because TrueNAS Scale's certificates don't seem to work, but as you described only traefik works.
I tried to get TLS on "homer" or other simple dashboard/homepage apps but the certificate was never applied.
Are you sure this is a problem with the apps not being updated yet or could it also be something regarding a wildcard certificate?
Because what I want is a certificate for local.mydomain.com and *.local.mydomain.com and I don't really see an option for this in cert-manager. Because of that the certificate that is used by treafik is for "traefik.local.mydomain.com". I don't know if I can change the domain for that to include the wildcard domain.

Sorry I forgot to reply.
I found some apps can use cert-manager. Maybe the reason is that I access those apps with traefik.
Like ddns-go, qbittorrent, ariang etc.

 

[flmmartins]

Hello,

I am looking for cert-manager. Were some of you able to find it in Truecharts? Which train?

Tks

 

[LarsR]

It's in the truecharts operator train

 

[flmmartins]

YEYY! Found it! Thanks!