cert-manager-webhook-hetzner

This webhook creates the necessary DNS entries in the Hetzner DNS API to solve a DNS01 challenge for a cert-manager Issuer of the ACME type.

Docs

• :rocket: See the quick start guide to get you started.
• :book: See the configuration reference for the available configuration.

Development

Start a development environment

• Configure a HETZNER_TOKEN in your shell session.
• Deploy the development cluster.

make -C dev up

• Load the generated configuration to access the development cluster:

source dev/files/env.sh

• Start developing cert-manager-webhook-hetzner in the development cluster:

skaffold dev

• Test your deployment by placing your zone name into commonName and dnsName of dev/example-cert.yaml:

kubectl apply -f dev/example-cert.yaml

• Wait for your certificate to be issued. This can take up to two minutes:

kubectl -n cert-manager get certificates example-cert -w

⚠️ Do not forget to clean up the development cluster once are finished:

make -C dev down

Run the unit tests

go test ./internal/... -v

Run the cert-manager conformance test suite

All DNS providers must run the DNS01 provider conformance testing suite, else they will have undetermined behaviour when used with cert-manager.

You can run the test suite by:

HETZNER_TOKEN="your-secret-token" make e2e-setup
make e2e