WIP: Add optional Hosted Zone ID parameter to ClusterIssuer template (#…

…586) * Add optional Hosted Zone ID parameter to ClusterIssuer template * Update ClusterIssuer template in Cert-Manager operator
redhat-cop · Sep 14, 2022 · 32de881 · 32de881
1 parent 1347b80
commit 32de881
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/cert-manager-configs/.openshift/cert-manager.yml b/cert-manager-configs/.openshift/cert-manager.yml
@@ -33,6 +33,7 @@ objects:
               route53:
                 region: ${AWS_REGION}
                 accessKeyID: ${AWS_ACCESS_KEY_ID}
+                hostedZoneID: ${AWS_HOSTED_ZONE_ID}
                 secretAccessKeySecretRef:
                   name: "aws-secret-access-key-secret"
                   key: "aws-secret-access-key"
@@ -54,3 +55,5 @@ parameters:
     required: true
   - name: ACME_EMAIL
     required: true
+  - name: AWS_HOSTED_ZONE_ID
+    required: false
diff --git a/cert-manager-configs/templates/ClusterIssuer.yaml b/cert-manager-configs/templates/ClusterIssuer.yaml
@@ -28,6 +28,9 @@ spec:
           route53:
             region: {{ .Values.aws.region }}
             accessKeyID: {{ .Values.aws.accessKeyId }}
+      {{- if .Values.aws.hostedZoneId }}
+            hostedZoneID: {{ .Values.aws.hostedZoneId }}
+      {{- end }}
             secretAccessKeySecretRef:
               name: "aws-secret-access-key-secret"
               key: "aws-secret-access-key"