{"id":19482330,"url":"https://github.com/cnfatal/cert-manager-webhook-alidns","last_synced_at":"2025-04-15T11:19:49.259Z","repository":{"id":65149737,"uuid":"453361190","full_name":"cnfatal/cert-manager-webhook-alidns","owner":"cnfatal","description":"Cert manager ACME DNS01 webhook impletion on alidns","archived":false,"fork":false,"pushed_at":"2023-08-15T04:05:43.000Z","size":280,"stargazers_count":4,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-04-15T11:19:43.728Z","etag":null,"topics":["acme","alidns","cert-manager","cert-manager-webhook"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cnfatal.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-01-29T10:07:52.000Z","updated_at":"2024-09-24T03:40:18.000Z","dependencies_parsed_at":"2024-06-20T16:32:03.296Z","dependency_job_id":"e8685b63-9f0c-4c21-9190-cd2bcf57d1dc","html_url":"https://github.com/cnfatal/cert-manager-webhook-alidns","commit_stats":null,"previous_names":["fatalc/cert-manager-webhook-alidns"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cnfatal%2Fcert-manager-webhook-alidns","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cnfatal%2Fcert-manager-webhook-alidns/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cnfatal%2Fcert-manager-webhook-alidns/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cnfatal%2Fcert-manager-webhook-alidns/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cnfatal","download_url":"https://codeload.github.com/cnfatal/cert-manager-webhook-alidns/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":249058388,"owners_count":21205911,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["acme","alidns","cert-manager","cert-manager-webhook"],"created_at":"2024-11-10T20:09:45.298Z","updated_at":"2025-04-15T11:19:49.240Z","avatar_url":"https://github.com/cnfatal.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# ACME webhook for Alibaba Cloud DNS\n\nThe ACME issuer type supports an optional 'webhook' solver, which can be used\nfor Alibaba Cloud DNS.\n\nmore details: https://cert-manager.io/docs/configuration/acme/dns01/webhook/\n\n## Usage\n\nInstall webhook from allinone bundle or using helm chart under [deploy/cert-manager-webhook-alidns](deploy/cert-manager-webhook-alidns).\n\n```sh\n# install cert-manager webhook\nkubectl apply -f https://raw.githubusercontent.com/cnfatal/cert-manager-webhook-alidns/main/deploy/rendered-manifest.yaml\n```\n\n[Obtain an AccessKey pair](https://www.alibabacloud.com/help/en/doc-detail/107708.htm) and create the AccessKey Secret.\n\n```sh\n# create alidns aksk secret\nkubectl -n cert-manager create secret generic alidns-secret --from-literal=\"access-key=\u003cAccessKey ID\u003e\" --from-literal=\"secret-key=\u003cAccessKey Secret\u003e\"\n```\n\nCreate the ACME issuer. for more information see \u003chttps://cert-manager.io/docs/configuration/acme/\u003e\n\n```sh\ncat \u003c\u003cEOF | kubectl create --edit -f -\napiVersion: cert-manager.io/v1\nkind: ClusterIssuer\nmetadata:\n  name: letsencrypt\nspec:\n  acme:\n    # You must replace this email address with your own.\n    # Let's Encrypt will use this to contact you about expiring\n    # certificates, and issues related to your account.\n    email: contact@example.com\n    server: https://acme-v02.api.letsencrypt.org/directory\n    privateKeySecretRef:\n      # Secret resource that will be used to store the account's private key.\n      name: letsencrypt-issuer-account-key\n    solvers:\n    - dns01:\n        webhook:\n            groupName: dns.aliyun.com\n            solverName: alidns-solver\n            config:\n              regionId: \"\"                 # optional\n              apiKeySecretRef:\n                name: alidns-secret\nEOF\n```\n\n\u003e Note: The [acme-staging-v02](https://letsencrypt.org/docs/staging-environment/#) api: \u003chttps://acme-staging-v02.api.letsencrypt.org/directory\u003e is only for testing purposes now.\n\nor you can set AccsessKey in webhook configuration directly (**use as your own risk**):\n\n```diff\n-              apiKeySecretRef:\n-                name: alidns-secret\n+              accessKeyID: \"\u003caccessKeyID\u003e\"\n+              accessKeySecret: \"\u003caccessKeySecret\u003e\"\n```\n\nIssue a certificate(optional)\n\n```sh\ncat \u003c\u003cEOF | kubectl create --edit -f -\napiVersion: cert-manager.io/v1\nkind: Certificate\nmetadata:\n  name: example-tls\nspec:\n  secretName: example-com-tls\n  commonName: example.com\n  dnsNames:\n  - example.com\n  - \"*.example.com\"\n  issuerRef:\n    name: letsencrypt\n    kind: ClusterIssuer\nEOF\n```\n\n## Build\n\nrequired: `golang 1.17` `buildah` `helm`\n\n```sh\nmake build\nmake rendered-manifest.yaml\n```\n\n## Running the test suite\n\nupdate [alidns-secret](testdata/alidns-solver/alidns-secret.yaml) to your own secret\n\n```bash\n$ TEST_ZONE_NAME=example.com. make test\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcnfatal%2Fcert-manager-webhook-alidns","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcnfatal%2Fcert-manager-webhook-alidns","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcnfatal%2Fcert-manager-webhook-alidns/lists"}