identitry/cert-manager-webhook-loopia repository overview

⁠Cert-Manager ACME webhook for Loopia (cert-manager-webhook-loopia)

Cert-Manager⁠ is a Kubernetes⁠ certificate management controller, it allows for issuing certifaces from a variety of sources. cert-manager-webhook-loopia that acts as an extension to cert-manager is targeted the use of certificates issued through the ACME-protocol⁠ and especially the DNS01 challenge targeting the Loopia⁠ hosting company DNS. Issued certificates are stored in Kubernetes as secrets⁠ for use within Kubernetes.

The main issuer of public certificates using the ACME-protocol is Let´s Encrypt⁠ that issues free public TLS-certificates. What´s special about Let´s Encrypt is that the lifetime of the certificates they issue are short and issuance is automated using the ACME-protocol, that means you need a way to automatically request new certificates and renew certificates when the old are about expire.

The ACME DNS-01 challenge⁠ is one of two diiferent challenges (the other is HTTP-01⁠) that you as a user of Let´s Encrypt certificates could use to prove you´re the owner of the domain the certificate is to be issued for. ACME DNS-01 challenge has an advantage over HTTP-01 in that it allows for issuance of wildcard certificates. ACME DNS-01 challenge requires you to be able to automatically add a DNS TXT record to your public DNS zone as a proof of ownership of the domain.

Loopia⁠ is a major hosting company based in Sweden but has subsidaries in Norway and Serbia but also offers services to companies and individuals in the rest of the world.

Loopia API⁠ that is used by cert-manager-webhook-loopia is an API based on XMLRPC that allows for reading and editing of your DNS domain(s) hosted at Loopia. This API becomes very handy when we need to request a lot of certificates automatically and also renew these when they expire.