certmanager v1.21.1

CertificateRequest.spec

Specification of the desired state of the CertificateRequest resource. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status

CertificateRequest.spec fields and descriptions
Field / Type	Description
duration `string`	Requested 'duration' (i.e. lifetime) of the Certificate. Note that the issuer may choose to ignore the requested duration, just like any other requested attribute.
extra `map[string]string[]`	Extra contains extra attributes of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable.
groups `string[]`	Groups contains group membership of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable. `x-kubernetes-list-type: "atomic"`
isCA `boolean`	Requested basic constraints isCA value. Note that the issuer may choose to ignore the requested isCA value, just like any other requested attribute. NOTE: If the CSR in the `Request` field has a BasicConstraints extension, it must have the same isCA value as specified here. If true, this will automatically add the `cert sign` usage to the list of requested `usages`.
issuerRef `object` required	Reference to the issuer responsible for issuing the certificate. If the issuer is namespace-scoped, it must be in the same namespace as the Certificate. If the issuer is cluster-scoped, it can be used from any namespace. The `name` field of the reference must always be specified.
request `string` required	The PEM-encoded X.509 certificate signing request to be submitted to the issuer for signing. If the CSR has a BasicConstraints extension, its isCA attribute must match the `isCA` value of this CertificateRequest. If the CSR has a KeyUsage extension, its key usages must match the key usages in the `usages` field of this CertificateRequest. If the CSR has a ExtKeyUsage extension, its extended key usages must match the extended key usages in the `usages` field of this CertificateRequest. `format: byte`
uid `string`	UID contains the uid of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable.
usages `string[]`	Requested key usages and extended key usages. NOTE: If the CSR in the `Request` field has uses the KeyUsage or ExtKeyUsage extension, these extensions must have the same values as specified here without any additional values. If unset, defaults to `digital signature` and `key encipherment`. `x-kubernetes-list-type: "atomic"`
username `string`	Username contains the name of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable.