Merge pull request #1274 from SgtCoDFish/trust-manager-0.6.0

Add docs for trust-manager v0.6.0

.spelling

@@ -622,6 +622,8 @@ ssl
 cert.pem
 Rollout
 rollout
+JKS-formatted
+changeit
 
 # TEMPORARY
 # these are temporarily ignored because the spellchecker

content/docs/projects/trust-manager/README.md

@@ -132,6 +132,20 @@ helm upgrade -i -n cert-manager cert-manager jetstack/cert-manager --set install
 helm upgrade -i -n cert-manager trust-manager jetstack/trust-manager --wait
 ```
 
+### approver-policy Integration
+
+If you're running [approver-policy](../approver-policy/README.md) then cert-manager's default approver will be disabled which will mean that
+trust-manager's webhook certificate will - by default - block when you install the Helm chart until it's manually approved.
+
+As of trust-manager v0.6.0 you can choose to automatically add an approver-policy `CertificateRequestPolicy` which
+will approve the trust-manager webhook certificate:
+
+```bash
+helm upgrade -i -n cert-manager trust-manager jetstack/trust-manager --set app.webhook.tls.approverPolicy.enabled=true --set app.webhook.tls.approverPolicy.certManagerNamespace=cert-manager --wait
+```
+
+Note that if you've installed cert-manager to a different namespace, you'll need to pass that namespace in `app.webhook.tls.approverPolicy.certManagerNamespace`!
+
 ### Manual Installation
 
 We strongly recommend that you install trust-manager using Helm and we don't currently support manually installed

content/docs/projects/trust-manager/api-reference.md

@@ -268,7 +268,7 @@ AdditionalFormats specifies any additional formats to write to the target
         <td><b><a href="#bundlespectargetadditionalformatsjks">jks</a></b></td>
         <td>object</td>
         <td>
-          KeySelector is a reference to a key for some map data object.<br/>
+          JKS requests a JKS-formatted binary trust bundle to be written to the target. The bundle is created with the hardcoded password "changeit".<br/>
         </td>
         <td>false</td>
       </tr></tbody>
@@ -278,7 +278,7 @@ AdditionalFormats specifies any additional formats to write to the target
 ### `Bundle.spec.target.additionalFormats.jks`
 
 
-KeySelector is a reference to a key for some map data object.
+JKS requests a JKS-formatted binary trust bundle to be written to the target. The bundle is created with the hardcoded password "changeit".
 
 <table>
     <thead>
@@ -510,7 +510,7 @@ AdditionalFormats specifies any additional formats to write to the target
         <td><b><a href="#bundlestatustargetadditionalformatsjks">jks</a></b></td>
         <td>object</td>
         <td>
-          KeySelector is a reference to a key for some map data object.<br/>
+          JKS requests a JKS-formatted binary trust bundle to be written to the target. The bundle is created with the hardcoded password "changeit".<br/>
         </td>
         <td>false</td>
       </tr></tbody>
@@ -520,7 +520,7 @@ AdditionalFormats specifies any additional formats to write to the target
 ### `Bundle.status.target.additionalFormats.jks`
 
 
-KeySelector is a reference to a key for some map data object.
+JKS requests a JKS-formatted binary trust bundle to be written to the target. The bundle is created with the hardcoded password "changeit".
 
 <table>
     <thead>

scripts/gendocs/generate-trust-manager

@@ -59,6 +59,6 @@ gendocs() {
 echo "+++ Cloning trust-manager repository..."
 git clone "https://github.com/cert-manager/trust-manager.git" "$tmpdir"
 
-checkout "v0.5.0"
+checkout "v0.6.0"
 
 gendocs "$REPO_ROOT/content/docs/projects/trust-manager/api-reference.md"