cert-manager-webhook-hetzner

August 19, 2026 ยท View on GitHub

cert-manager ACME webhook for Hetzner

Values

KeyTypeDefaultDescription
affinityobject{}Kubernetes affinities for the webhook.
annotationsobject{}Kubernetes annotations added to the deployment metadata
certManager.namespacestring"cert-manager"Namespace of your cert-manager deployment.
certManager.serviceAccountNamestring"cert-manager"Name of the cert-managers service account.
containerSecurityContextobjectRestrictedKubernetes container security context for the webhook.
envobject{}Additional environment variables, where each key represents the name of the variable. The value follows standard Kubernetes environment variable formats.
extraVolumeMountslist[]Additional volume mounts to add to the container.
extraVolumeslist[]Additional volumes to add to the pod.
fullnameOverridestring""Override the full name of the chart.
groupNamestring"acme.hetzner.com"The GroupName here is used to identify your company or business unit that created this webhook. For example, this may be "acme.mycompany.com". This name will need to be referenced in each Issuer's webhook stanza to inform cert-manager of where to send ChallengePayload resources in order to solve the DNS01 challenge. This group name should be unique, hence using your own company's domain here is recommended.
image.pullPolicystring"IfNotPresent"Pull policy of the webhook image.
image.repositorystring"docker.io/hetzner/cert-manager-webhook-hetzner"Repository of the webhook image.
image.tagstringCurrent versionTag of the webhook image.
imagePullSecretslist[]Additional image pull secrets in the standard Kubernetes format
labelsobject{}Kubernetes labels added to the deployment metadata
livenessProbeobjectSee values.yamlKubernetes liveness probe. Set to null to disable the liveness probe.
metrics.serviceMonitor.enabledboolfalseDeploys a ServiceMonitor to scrape the metrics. Requires the ServiceMonitor CRD.
nameOverridestring""Override the name of the chart.
nodeSelectorobject{}Kubernetes node selector for the webhook.
podAnnotationsobject{}Kubernetes annotations added to the pod metadata
podDisruptionBudgetobject{"enabled":false}Kubernetes pod disruption budget
podLabelsobject{}Kubernetes labels added to the pod metadata
podSecurityContextobjectRestrictedKubernetes pod security context for the webhook.
priorityClassNamestring""PriorityClassName of the application pods
readinessProbeobjectSee values.yamlKubernetes readiness probe. Set to null to disable the readiness probe.
replicaCountint1Number of replicas.
resourcesobject{}Kubernetes resource management for the webhook
service.portint443Port of the webhook service.
service.typestring"ClusterIP"Kubernetes service type of the webhook service.
startupProbeobjectSee values.yamlKubernetes startup probe. Set to null to disable the startup probe.
strategyobject{"type":"RollingUpdate"}Kubernetes deployment strategy for the deployment.
tolerationslist[]Kubernetes tolerations for the webhook.