Terraform ACME Certificate

Acme Certificate Generation for different DNS providers using Terraform!

To generate certificates for different DNS providers using ACME, set the dns_provider variable and environment variables with credentials for your specific DNS provider. More information can be found here.

Next simply execute

terraform init
terraform plan
terraform apply

You can get your certificate components via

terraform output public_certificate_pem                         //Public Certificate
terraform output public_certificate_key                         //Private key of certificate
terraform output public_certificate_intermediate_pem            //Intermediate certificates
terraform output complete_public_certificate_pem                //Public Certifcate + Intermediate Certificates

Secret Generation

Scripts folder has useful scripts that can be used to generate Kubernetes secrets once terraform has generated the certificates.

• generate-secret.sh simply puts key, certificate and intermidate cert in separate keys
• generate-combined-secret.sh puts key in a separate key but combines certificate and intermidate key together.