Adding option for Certissuer cabundle with custom ACME Server. (#15279)

2023-11-23 09:06:45 -05:00
parent d09e70f4db
commit 722e47cbe9
2 changed files with 9 additions and 0 deletions
@@ -73,6 +73,12 @@ questions:
                        type: string
                        show_if: [["server", "=", "custom"]]
                        default: 'https://acme-staging-v02.api.letsencrypt.org/directory'
+                    - variable: caBundle
+                      label: Trusted CABundle for private ACME server
+                      description: "Trusted CABundle for private ACME server, encoded in base64"
+                      schema:
+                        type: string
+                        show_if: [["server", "=", "custom"]]
                    - variable: email
                      label: Email
                      description: "Email adress to use for certificate issuing must match your DNS provider email when required"
@@ -35,6 +35,9 @@ spec:
  acme:
    email: {{ .email }}
    server: {{ if eq .server "custom" }}{{ .customServer }}{{ else }}{{ .server }}{{ end }}
+    {{- if .caBundle }}
+    caBundle: {{ .caBundle }}
+    {{- end }}
    privateKeySecretRef:
      name: {{ .name }}-acme-clusterissuer-account-key
    solvers: