Dns issuer

CHANGELOG

@@ -1,3 +1,7 @@
+Version 0.1.91 (2025-06-03)
+---------------------------
+charts/cert-manager-issuer: Add support for Route53 DNS challenge (#241)
+
 Version 0.1.90 (2025-05-30)
 ---------------------------
 charts/cron-job: Add ability to have multiple schedules with shared resources (#239)

charts/cert-manager-issuer/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: cert-manager-issuer
 description: A helm chart that creates an Issuer or ClusterIssuer for cert-manager
-version: 0.2.0
+version: 0.2.1
 type: application
 home: https://github.com/snowplow-devops/helm-charts
 icon: https://raw.githubusercontent.com/snowplow-devops/helm-charts/master/docs/logo/snowplow.png

charts/cert-manager-issuer/README.md

@@ -1,6 +1,6 @@
 # cert-manager-issuer
 
-![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 0.2.1](https://img.shields.io/badge/Version-0.2.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 A helm chart that creates an Issuer or ClusterIssuer for cert-manager
 
@@ -16,11 +16,20 @@ A helm chart that creates an Issuer or ClusterIssuer for cert-manager
 
 * <https://github.com/snowplow-devops/helm-charts>
 
+## Requirements
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://snowplow-devops.github.io/helm-charts | cert-manager-crds | 0.1.0 |
+
 ## Values
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| acme.EABHmacKey | string | `""` | External Account Binding (EAB) HMAC Key, used to cryptographically sign requests during ACME registration. |
+| acme.EABKeyId | string | `""` | External Account Binding (EAB) Key ID, required for ACME registration with providers like ZeroSSL. |
 | acme.accountPrivateKeyData | string | `""` | A private key to use for registration (if not provided, one will be generated) |
+| acme.dnsSolver.type | string | `""` | The type of DNS solver to use (options: route53) |
 | acme.email | string | `"[email protected]"` | The email address to use for registration |
 | acme.enabled | bool | `true` | Whether to enable the ACME protocol |
 | acme.environment | string | `"letsencrypt-staging"` | The ACME server to use (options: letsencrypt, letsencrypt-staging, external-zerossl) |
@@ -30,4 +39,4 @@ A helm chart that creates an Issuer or ClusterIssuer for cert-manager
 | issuerType | string | `"cluster"` | The type of issuer to create (options: cluster, namespace) |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)
+Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)

charts/cert-manager-issuer/templates/issuer.yaml

@@ -27,4 +27,8 @@ spec:
         ingress:
           class: {{ $.Values.acme.httpSolverIngressClass }}
     {{- end}}
+    {{- if eq .Values.acme.dnsSolver.type "route53"}}
+    - dns01:
+        route53: {}
+    {{- end}}
   {{- end}}

charts/cert-manager-issuer/values.yaml

@@ -22,3 +22,7 @@
   solver: "http01"
   # -- The name of the ingress class to setup the HTTP-01 challenge solver on
   httpSolverIngressClass: "traefik"
+
+  dnsSolver:
+    # -- The type of DNS solver to use (options: route53)
+    type: ""