cert-manager

cert-manager controller and a Let’s Encrypt ClusterIssuer. Binds dns and solves DNS-01 through the ExternalDNS webhook.

Cluster example

apps.cert-manager.main = {
  email = "[email protected]";
  server = "https://acme-staging-v02.api.letsencrypt.org/directory";
};

Provides

None.

Needs

dns4 options

• domainnull or string

  Bound zone, such as example.dev. Written by the dns provider.

  Default

  null

• fqdnnull or string

  Bound fully qualified name. Written by the dns provider.

  Default

  null

• namenull or string

  Record label. Defaults to the consumer DNS label.

  Default

  null

• providernull or (podule provider reference (apps.<type>.<instance> or impl.<contract>.<name>))

  Overrides providers.dns for this need.

  Default

  null

Instance options

• accountKeySecretstring

  Secret cert-manager creates for the ACME account key.

  Default

  "acme-account-key"

• dns01RecursiveNameserversnull or string

  Resolver used for DNS-01 checks. Null omits the flag.

  Default

  "1.1.1.1:53"

• dns01RecursiveNameserversOnlyboolean

  Use only dns01RecursiveNameservers for DNS-01 checks.

  Default

  true

• emailstring

  ACME account email.

• issuerNamestring

  ClusterIssuer name that Traefik Ingresses reference.

  Default

  "default"

• serverstring

  ACME directory URL.

  Default

  "https://acme-v02.api.letsencrypt.org/directory"

• solvernull or anything

  Replaces the ClusterIssuer dns01 block. Null selects the ExternalDNS webhook.

  Default

  null

• versionstring

  cert-manager release. The bundled CRDs are vendored for this version.

  Default

  "v1.21.2"