deyaeddin/cert-manager-webhook-hetzner

cert-manager webhook for Hetzner DNS Public API (1.1.1)

Hi there 👋

• 🔭 I’m currently working on: so many things
• 🌱 I’m currently learning: how to go
• 👯 I’m looking to collaborate on: any project
• 🤔 I’m looking for help with: hmmm many things
• 💬 Ask me about: anything
• 📫 How to reach me: mostly email
• 😄 Pronouns: he/him
• ⚡ Fun fact: loves animals more than humans

cert-manager-webhook-hetzner's Issues

Error presenting challenge - Forbidden

Hi,
I'm getting this error on the Challenge object

Error presenting challenge: hetzner.acme.example.com is forbidden: User "system:serviceaccount:cert-manager:cert-manager" cannot create resource "hetzner" in API group "acme.example.com" at the cluster scope

Am I missing something about permissions?

The configuration is this below:

apiVersion: v1
kind: Secret
metadata:
  name: hetzner-secret-app
type: Opaque
data:
  api-key: XXXXXXXBASE64XXXXX=
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging-app
spec:
  acme:
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    email: [email protected]
    privateKeySecretRef:
      name: letsencrypt-staging-app
    solvers:
      - dns01:
          webhook:
            groupName: acme.example.com
            solverName: hetzner
            config:
              secretName: hetzner-secret-app
              zoneName: example.com.
              apiUrl: https://dns.hetzner.com/api/v1
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: cert-staging
  namespace: cert-manager
spec:
  commonName: example.com
  dnsNames:
    - example.com
  issuerRef:
    name: letsencrypt-staging-app
    kind: ClusterIssuer
  secretName: cert-staging

Errors due to outdated k8s go library

Can you please consider releasing a new version with updated dependencies?
The error are probably only an annoyance, but an update can't hurt.

E1230 10:53:38.975249       1 reflector.go:138] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *v1beta1.PriorityLevelConfiguration: failed to list *v1beta1.PriorityLevelConfiguration: the server could not find the requested resource
E1230 10:53:39.024762       1 reflector.go:138] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *v1beta1.FlowSchema: failed to list *v1beta1.FlowSchema: the server could not find the requested resource
E1230 10:53:40.732625       1 reflector.go:138] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *v1beta1.FlowSchema: failed to list *v1beta1.FlowSchema: the server could not find the requested resource