https://github.com/kogito-ops/cert-manager-webhook-maas
cert-manager webhook for the Canonical MAAS API.
https://github.com/kogito-ops/cert-manager-webhook-maas
cert-manager-webhook kubernetes-service maas-api
Last synced: 2 months ago
JSON representation
cert-manager webhook for the Canonical MAAS API.
- Host: GitHub
- URL: https://github.com/kogito-ops/cert-manager-webhook-maas
- Owner: kogito-ops
- License: apache-2.0
- Created: 2025-07-23T07:50:46.000Z (11 months ago)
- Default Branch: main
- Last Pushed: 2026-02-01T16:16:30.000Z (4 months ago)
- Last Synced: 2026-02-02T01:20:36.800Z (4 months ago)
- Topics: cert-manager-webhook, kubernetes-service, maas-api
- Language: Go
- Homepage: https://maas.io/docs/api
- Size: 72.3 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE.md
Awesome Lists containing this project
README
# cert-manager-webhook-maas
A cert-manager ACME DNS01 solver webhook for Canonical MAAS (Metal as a Service).
[](LICENSE.md)
## Overview
This webhook implements an ACME DNS01 challenge solver for cert-manager that
integrates with MAAS DNS. This allows you to use cert-manager with Let's Encrypt
(or other ACME CAs) to automatically provision TLS certificates for domains
managed by MAAS.
## Features
- Integrates with MAAS DNS API for DNS-01 challenges
- Supports wildcard certificates
- Configurable per-issuer with different MAAS instances
- Uses official Canonical gomaasclient library
## Prerequisites
- Kubernetes cluster with cert-manager installed (>= v1.18.0)
- MAAS instance with DNS enabled
- MAAS API credentials
## Installation
### Using Helm (Recommended)
1. Add the Helm repository:
```bash
helm repo add maas-webhook https://kogito-ops.github.io/cert-manager-webhook-maas
helm repo update
```
2. Create a secret containing your MAAS API credentials:
```yaml
apiVersion: v1
kind: Secret
metadata:
name: maas-secret
namespace: cert-manager
type: Opaque
stringData:
api-key: "your-consumer-key:your-token-key:your-token-secret"
```
```bash
kubectl apply -f - <