add ovh

helm/certificates/ops/templates/cluster-issuer-letsencrypt-dns01.yaml

@@ -9,18 +9,28 @@ spec:
     privateKeySecretRef:
       name: letsencrypt-dns01-prod-key
     solvers:
-    # Configuration DNS-01 pour OVH
+    # Configuration DNS-01 pour OVH via webhook
+    # IMPORTANT: Vous devez installer cert-manager-webhook-ovh avant d'utiliser cette configuration
+    # Installation: helm repo add cert-manager-webhook-ovh https://cert-manager.github.io/webhook-ovh
+    #              helm install cert-manager-webhook-ovh cert-manager-webhook-ovh/cert-manager-webhook-ovh -n cert-manager-ops
     - selector:
         dnsZones:
           - "dev.gkdomaine.fr"
       dns01:
-        ovh:
-          endpoint: ovh-eu  # ovh-eu pour l'Europe, ovh-us pour les USA, ovh-ca pour le Canada
-          applicationKey: "e598bb73ded17ee6"
-          applicationSecretRef:
-            name: ovh-credentials
-            key: application-secret
-          consumerKey: "372e273858204d972dbf7c50506d12a1"
+        webhook:
+          groupName: acme.gkdomaine.fr
+          solverName: ovh
+          config:
+            endpoint: ovh-eu
+            applicationKeyRef:
+              name: ovh-credentials
+              key: application-key
+            applicationSecretRef:
+              name: ovh-credentials
+              key: application-secret
+            consumerKeyRef:
+              name: ovh-credentials
+              key: consumer-key
     
     # Option 4 : Generic (webhook personnalisé)
     # - dns01:

helm/certificates/ops/templates/secret-ovh-credentials.yaml

@@ -18,7 +18,11 @@ metadata:
   namespace: certificates-ops
 type: Opaque
 data:
-  # Remplacez cette valeur par votre Application Secret encodé en base64
-  # Pour encoder : echo -n 'VOTRE_APPLICATION_SECRET' | base64
+  # Encodez vos credentials en base64 :
+  # echo -n 'VOTRE_APPLICATION_KEY' | base64
+  # echo -n 'VOTRE_APPLICATION_SECRET' | base64
+  # echo -n 'VOTRE_CONSUMER_KEY' | base64
+  application-key: ZTVhOGJiNzNkZWQxN2VlNg==  # e598bb73ded17ee6 en base64
   application-secret: NDYyMGM0ODI0OTlmOTcxZjRkMTgxNGY4MTU3ZjgyY2M=  # VOTRE_APPLICATION_SECRET en base64
+  consumer-key: MzcyZTI3Mzg1ODIwNGQ5NzJkYmY3YzUwNTA2ZDEyYTE=  # 372e273858204d972dbf7c50506d12a1 en base64