https://github.com/cnfatal/cert-manager-webhook-alidns
Cert manager ACME DNS01 webhook impletion on alidns
https://github.com/cnfatal/cert-manager-webhook-alidns
acme alidns cert-manager cert-manager-webhook
Last synced: about 1 year ago
JSON representation
Cert manager ACME DNS01 webhook impletion on alidns
- Host: GitHub
- URL: https://github.com/cnfatal/cert-manager-webhook-alidns
- Owner: cnfatal
- License: apache-2.0
- Created: 2022-01-29T10:07:52.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2023-08-15T04:05:43.000Z (almost 3 years ago)
- Last Synced: 2025-04-15T11:19:43.728Z (about 1 year ago)
- Topics: acme, alidns, cert-manager, cert-manager-webhook
- Language: Go
- Homepage:
- Size: 273 KB
- Stars: 4
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ACME webhook for Alibaba Cloud DNS
The ACME issuer type supports an optional 'webhook' solver, which can be used
for Alibaba Cloud DNS.
more details: https://cert-manager.io/docs/configuration/acme/dns01/webhook/
## Usage
Install webhook from allinone bundle or using helm chart under [deploy/cert-manager-webhook-alidns](deploy/cert-manager-webhook-alidns).
```sh
# install cert-manager webhook
kubectl apply -f https://raw.githubusercontent.com/cnfatal/cert-manager-webhook-alidns/main/deploy/rendered-manifest.yaml
```
[Obtain an AccessKey pair](https://www.alibabacloud.com/help/en/doc-detail/107708.htm) and create the AccessKey Secret.
```sh
# create alidns aksk secret
kubectl -n cert-manager create secret generic alidns-secret --from-literal="access-key=" --from-literal="secret-key="
```
Create the ACME issuer. for more information see
```sh
cat < Note: The [acme-staging-v02](https://letsencrypt.org/docs/staging-environment/#) api: is only for testing purposes now.
or you can set AccsessKey in webhook configuration directly (**use as your own risk**):
```diff
- apiKeySecretRef:
- name: alidns-secret
+ accessKeyID: ""
+ accessKeySecret: ""
```
Issue a certificate(optional)
```sh
cat <