Cert-manager: Can I delete cert-manager deployment and re-install without data loss?

[shinebayar-g]

I've accidentally updated my cert-manager 0.5.2 deployment to 0.6.0 without reading update instructions. Looks like this new webhook things came up with this new version. Now cert-manager-webhook pod is not coming up and giving this outputs.

MountVolume.SetUp failed for volume "certs" : secrets "cert-manager-webhook-webhook-tls" not found

Unable to mount volumes for pod "cert-manager-webhook-d85fcf8cf-4lghp_cert-manager(e593f627-1feb-11e9-8b10-42010a94014f)": timeout expired waiting for volumes to attach or mount for pod "cert-manager"/"cert-manager-webhook-d85fcf8cf-4lghp". list of unmounted volumes=[certs]. list of unattached volumes=[certs cert-manager-webhook-token-fwzsh]

After I read update instructions I ran this command and tried to reschedule deployment. But still no luck.

Now i'm considering about delete cert-manager deployment entirely and install it again. In this case, do I lost all certificates too? I guess even I don't lose certificates, I'd lose its renewal tracking? I mean I afraid of current certs won't get renewed after new installation?

Or how can I fix my mess without breaking anything.

[munnerz]

Have you made sure the namespace cert-manager is running in has a label on it to disable resource validation?

## IMPORTANT: if you are deploying into a namespace that **already exists**,
## you MUST ensure the namespace has an additional label on it in order for
## the deployment to succeed
$ kubectl label namespace <deployment-namespace> certmanager.k8s.io/disable-validation="true"

[shinebayar-g]

Hi thanks for an answer. On this page, It said if you're updating from v0.5 or below ... I was updating from v0.5.2 and I thought this was not the case for me.

# If you are upgrading from v0.5 or below, you should manually add this
# label to your cert-manager namespace to ensure the `webhook component`_
# can provision correctly.
$ kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true

However this one did the trick for me

➜  ~ kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true
namespace/cert-manager labeled
➜  ~

Thank you very much! Much appreciated.