Cert-manager: Godaddy dns01 support

[ndemeshchenko]

/kind feature

Support Godaddy as a DNS provider. Godaddy already exist in https://github.com/xenolf/lego/tree/master/providers/dns so it would be nice to have support for it in cert-manager.

[yosbeleg89]

Does the PR that closes this issue have an stimated time to be merged? Thanks

[retest-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close.
Send feedback to jetstack.
/lifecycle stale

[agolomoodysaada]

/remove-lifecycle stale

[yosbeleg89]

So it seems like it will not be supported?

[mikepuglisi]

I too am looking for dns01 support on godaddy.

[yosbeleg89]

It seems like it will no be supported, it would be really nice to have. Is there any other alternative to generate wildcard certs when using Godaddy?

[mikepuglisi]

A webhook needs to be created for any dns provider not already supported by cert manager

https://github.com/jetstack/cert-manager/pull/1084#issuecomment-489060126

Surprisingly, I can’t find one already created for godaddy.

I did find the following guide for automating the dns challenge using the godaddy DNS API, but it would have to be converted to a webhook for Certmanager

https://pbxhacks.com/automating-lets-encrypt-ssl-certs-via-godaddy-dns-challenge/

I don’t have the time to overcome the learning curve for this right now, so I’m continuing to use the http challenge with a certificate for each sub domain.

[Danielperga97]

not support for dns01 yet?

[munnerz]

At this point, due to our inability to test all DNS01 providers that we currently have in our codebase, we are requiring all new DNS01 implementations to be implemented as external DNS01 webhooks, following the example here: https://github.com/jetstack/cert-manager-webhook-example/

We are currently not accepting new DNS01 providers into the core codebase as we don't have a good way to test them reliably - we've not determined an exact process for 'upstreaming' these DNS01 providers into the core codebase yet, but if a provider demonstrates it passes tests, and we are able to find a way to run these tests in our own environment, we'd definitely like to explore defining this process 😄

Hope that makes sense, and hopefully it'll allow for you to develop on your own provider with more confidence (as you can actually configure some end-to-end tests!)

[agolomoodysaada]

Is anyone interested in collaborating in implementing this webhook? Please DM on the kubernetes slack at saada