guides: Update cert manager annotation to work with HTTPProxy

[Javlopez]

The guide to work cert-manager with HTTPProxy (https://projectcontour.io/guides/cert-manager/) in the section Making cert-manager work with HTTPProxy indicates that we should to create a dummy Ingress object like this

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    ingress.kubernetes.io/force-ssl-redirect: "true"
    kubernetes.io/tls-acme: "true"
  name: httpbinproxy
  namespace: default
spec:
  rules:
  - host: httpbinproxy.davecheney.com
    http:
      paths:
      - backend:
          serviceName: httpbin
          servicePort: 8080
  tls:
  - hosts:
    - httpbinproxy.davecheney.com
    secretName: httpbinproxy 

But this is wrong due the line 5 is incorrect, that annotation needs to be updated by the right one, which is certmanager.k8s.io/cluster-issuer

The code should be the following

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    certmanager.k8s.io/cluster-issuer: "letsencrypt-prod"
    ingress.kubernetes.io/force-ssl-redirect: "true"
    kubernetes.io/tls-acme: "true"
  name: httpbinproxy
  namespace: default
spec:
  rules:
  - host: httpbinproxy.davecheney.com
    http:
      paths:
      - backend:
          serviceName: httpbin
          servicePort: 8080
  tls:
  - hosts:
    - httpbinproxy.davecheney.com
    secretName: httpbinproxy 

[davecheney]

@Javlopez thank you for raising this issue. I double checked the upstream documentation

https://cert-manager.io/docs/usage/ingress/#supported-annotations

And they use cert-manager.io/cluster-issuer.

Which version of cert manager are you using?

[Javlopez]

Hi, thanks for the answer, I'm using, cert-manager-controller:v0.10.0

quay.io/jetstack/cert-manager-controller:v0.10.0

[youngnick]

Ah, this tutorial was written targetting v0.11.0 of cert-manager, which changed the namespace of the labels. I guess we should make that clear at the top.

[skriss]

This issue is obsolete as the guide for cert-manager with HTTPProxy now uses a Certificate object instead of a dummy Ingress, closing.