Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-49956

[enterprise-4.17] Documentation for cert-manager ACME issuer with Azure DNS should include CredentialRequest option for obtaining service principle credentials

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • 4.17
    • Documentation / CFE
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      Issue in file security/cert_manager_operator/cert-manager-operator-issuer-acme.adoc
      
      In the prerequisites we direct the user to follow upstream documentation for creating the service principle but we should also show an example of using the Cloud Credential Operator's CredentialRequest.

      Steps to Reproduce:

      The example cloud credential operator request would be:

       

      apiVersion: cloudcredential.openshift.io/v1
      kind: CredentialsRequest
      metadata:
        name: cert-manager-azure
        namespace: openshift-cloud-credential-operator
      spec:
        providerSpec:
          apiVersion: cloudcredential.openshift.io/v1
          kind: AzureProviderSpec
          roleBindings:
            - role: "DNS Zone Contributor"
              scope: example.com
        secretRef:
          name: cert-manager-azure
          namespace: cert-manager
        serviceAccountNames:
          - cert-manager 

       

      apiVersion: cert-manager.io/v1
      kind: ClusterIssuer
      metadata:
        name: letsencrypt
      spec:
        acme:
          email: user@example.com
          privateKeySecretRef:
            name: letsencrypt-account-key
          server: https://acme-v02.api.letsencrypt.org/directory
          solvers:
            - dns01:
                azureDNS:
                  clientID: <from cert-manager-azure secret key client_id>
                  clientSecretSecretRef:
                    name: cert-manager-azure
                    key: azure_client_secret
                  subscriptionID: <from cert-manager-azure secret key azure_subscription_id>
                  tenantID: <from cert-manager-azure secret key azure_tenant_id>
                  resourceGroupName: example-resourcegroup
                  hostedZoneName: example.com
                  # Azure Cloud Environment, default to AzurePublicCloud
                  environment: AzurePublicCloud 

       

       

       

              ocp-docs-bot OCP DocsBot
              jkincl@redhat.com Jason Kincl
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: