cert-manager-webhook-hetzner
August 19, 2026 ยท View on GitHub
cert-manager ACME webhook for Hetzner
Values
| Key | Type | Default | Description |
|---|---|---|---|
| affinity | object | {} | Kubernetes affinities for the webhook. |
| annotations | object | {} | Kubernetes annotations added to the deployment metadata |
| certManager.namespace | string | "cert-manager" | Namespace of your cert-manager deployment. |
| certManager.serviceAccountName | string | "cert-manager" | Name of the cert-managers service account. |
| containerSecurityContext | object | Restricted | Kubernetes container security context for the webhook. |
| env | object | {} | Additional environment variables, where each key represents the name of the variable. The value follows standard Kubernetes environment variable formats. |
| extraVolumeMounts | list | [] | Additional volume mounts to add to the container. |
| extraVolumes | list | [] | Additional volumes to add to the pod. |
| fullnameOverride | string | "" | Override the full name of the chart. |
| groupName | string | "acme.hetzner.com" | The GroupName here is used to identify your company or business unit that created this webhook. For example, this may be "acme.mycompany.com". This name will need to be referenced in each Issuer's webhook stanza to inform cert-manager of where to send ChallengePayload resources in order to solve the DNS01 challenge. This group name should be unique, hence using your own company's domain here is recommended. |
| image.pullPolicy | string | "IfNotPresent" | Pull policy of the webhook image. |
| image.repository | string | "docker.io/hetzner/cert-manager-webhook-hetzner" | Repository of the webhook image. |
| image.tag | string | Current version | Tag of the webhook image. |
| imagePullSecrets | list | [] | Additional image pull secrets in the standard Kubernetes format |
| labels | object | {} | Kubernetes labels added to the deployment metadata |
| livenessProbe | object | See values.yaml | Kubernetes liveness probe. Set to null to disable the liveness probe. |
| metrics.serviceMonitor.enabled | bool | false | Deploys a ServiceMonitor to scrape the metrics. Requires the ServiceMonitor CRD. |
| nameOverride | string | "" | Override the name of the chart. |
| nodeSelector | object | {} | Kubernetes node selector for the webhook. |
| podAnnotations | object | {} | Kubernetes annotations added to the pod metadata |
| podDisruptionBudget | object | {"enabled":false} | Kubernetes pod disruption budget |
| podLabels | object | {} | Kubernetes labels added to the pod metadata |
| podSecurityContext | object | Restricted | Kubernetes pod security context for the webhook. |
| priorityClassName | string | "" | PriorityClassName of the application pods |
| readinessProbe | object | See values.yaml | Kubernetes readiness probe. Set to null to disable the readiness probe. |
| replicaCount | int | 1 | Number of replicas. |
| resources | object | {} | Kubernetes resource management for the webhook |
| service.port | int | 443 | Port of the webhook service. |
| service.type | string | "ClusterIP" | Kubernetes service type of the webhook service. |
| startupProbe | object | See values.yaml | Kubernetes startup probe. Set to null to disable the startup probe. |
| strategy | object | {"type":"RollingUpdate"} | Kubernetes deployment strategy for the deployment. |
| tolerations | list | [] | Kubernetes tolerations for the webhook. |