Allow configuration of precheck nameservers for shoot-cert-service ex…

…tension (#334)
metal-stack · Oct 15, 2024 · d285f2c · d285f2c
1 parent 90b2c4c
commit d285f2c
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/control-plane/roles/gardener/README.md b/control-plane/roles/gardener/README.md
@@ -116,6 +116,7 @@ This includes the metal-stack extension provider called [gardener-extension-prov
 | gardener_extension_networking_cilium_image_vector_overwrite  |           | Allows overriding the image vector for the networking cilium extension                                                                      |
 | gardener_cert_management_issuer_email                        |           | The issuer email used by the cert-management extension                                                                                      |
 | gardener_cert_management_issuer_server                       |           | The issuer server used by the cert-management extension                                                                                     |
+| gardener_cert_management_precheck_nameservers                |           | To provide special set of nameservers to be used for prechecking DNSChallenges for an issuer                                                |
 
 ### Certificates
 

diff --git a/control-plane/roles/gardener/defaults/main/extensions.yaml b/control-plane/roles/gardener/defaults/main/extensions.yaml
@@ -68,6 +68,7 @@ gardener_extension_provider_metal_image_pull_secret:
 gardener_cert_management_issuer_private_key: ""
 gardener_cert_management_issuer_server: https://acme-v02.api.letsencrypt.org/directory
 gardener_cert_management_issuer_email:
+gardener_cert_management_precheck_nameservers: []
 
 gardener_extension_dns_external_controller_registration_url:
 

diff --git a/control-plane/roles/gardener/templates/shoot-cert-service/controller-deployment.yaml b/control-plane/roles/gardener/templates/shoot-cert-service/controller-deployment.yaml
@@ -19,3 +19,6 @@ providerConfig:
           server: "{{ gardener_cert_management_issuer_server }}"
           privateKey: |
             {{ gardener_cert_management_issuer_private_key | indent(width=12, first=false) }}
+{% if gardener_cert_management_precheck_nameservers %}
+      precheckNameservers: "{{ gardener_cert_management_precheck_nameservers | join(',') }}"
+{% endif %}