An open API service indexing awesome lists of open source software.

https://github.com/aellwein/cert-manager-webhook-netcup

cert-manager webhook implementation for use with Netcup provider
https://github.com/aellwein/cert-manager-webhook-netcup

cert-manager-webhook netcup

Last synced: about 2 months ago
JSON representation

cert-manager webhook implementation for use with Netcup provider

Awesome Lists containing this project

README

          

[![Artifact Hub](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cert-manager-webhook-netcup)](https://artifacthub.io/packages/helm/cert-manager-webhook-netcup/cert-manager-webhook-netcup)
[![Go Report Card](https://goreportcard.com/badge/github.com/aellwein/cert-manager-webhook-netcup)](https://goreportcard.com/report/github.com/aellwein/cert-manager-webhook-netcup)
[![License](https://img.shields.io/github/license/aellwein/cert-manager-webhook-netcup)](https://github.com/aellwein/cert-manager-webhook-netcup/blob/main/LICENSE)
![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/aellwein/cert-manager-webhook-netcup)

cert-manager-webhook-netcup
===========================

> ‼️ **Important Note:**
>
> beginning with the version `1.0.45`, all releases are available only via OCI registry:
>
> **[oci://ghcr.io/aellwein/cert-manager-webhook-netcup](https://github.com/aellwein/cert-manager-webhook-netcup/pkgs/container/cert-manager-webhook-netcup%2Fcert-manager-webhook-netcup)**
>
>

[cert-manager](https://cert-manager.io) webhook implementation for use
with [Netcup](https://www.netcup.eu) provider for solving [ACME DNS-01
challenges](https://cert-manager.io/docs/configuration/acme/dns01/).

Usage
-----

For the netcup-specific configuration, you will need to create a Kubernetes
secret, containing your customer number, API key and API password first.

You can do it like following, just place the correct values in the command:

```sh
kubectl create secret generic netcup-secret -n cert-manager --from-literal=customer-number= --from-literal=api-key= --from-literal=api-password=
```
After creating the secret, configure the ``Issuer``/``ClusterIssuer`` of
yours to have the following configuration (as assumed, secret is
called "netcup-secret" and located in namespace "cert-manager"):

```yml
apiVersion: cert-manager.io/v1
kind: Issuer # may also be a ClusterIssuer
...
spec:
solvers:
- dns01:
webhook:
groupName: com.netcup.webhook
solverName: netcup
config:
secretRef: netcup-secret
secretNamespace: cert-manager
```
For more details, please refer to https://cert-manager.io/docs/configuration/acme/dns01/#configuring-dns01-challenge-provider

Now, the actual webhook can be installed via Helm chart:
```
helm install webhook-netcup oci://ghcr.io/aellwein/cert-manager-webhook-netcup/cert-manager-webhook-netcup --namespace cert-manager
```
From that point, the issuer configured above should be able to solve
the DNS01 challenges using ``cert-manager-webhook-netcup``.

Disclaimer
----------

I am in no way affiliated or associated with Netcup and this project
is done in my spare time.

License
-------

[Apache 2 License](./LICENSE)