certmanager v1.7

CertificateRequest.spec

Desired state of the CertificateRequest resource.

CertificateRequest.spec fields and descriptions
Field / Type	Description
duration `string`	The requested 'duration' (i.e. lifetime) of the Certificate. This option may be ignored/overridden by some issuer types.
extra `map[string]string[]`	Extra contains extra attributes of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable.
groups `string[]`	Groups contains group membership of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable. `x-kubernetes-list-type: "atomic"`
isCA `boolean`	IsCA will request to mark the certificate as valid for certificate signing when submitting to the issuer. This will automatically add the `cert sign` usage to the list of `usages`.
issuerRef `object` required	IssuerRef is a reference to the issuer for this CertificateRequest. If the `kind` field is not set, or set to `Issuer`, an Issuer resource with the given name in the same namespace as the CertificateRequest will be used. If the `kind` field is set to `ClusterIssuer`, a ClusterIssuer with the provided name will be used. The `name` field in this stanza is required at all times. The group field refers to the API group of the issuer which defaults to `cert-manager.io` if empty.
request `string` required	The PEM-encoded x509 certificate signing request to be submitted to the CA for signing. `format: byte`
uid `string`	UID contains the uid of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable.
usages `string[]`	Usages is the set of x509 usages that are requested for the certificate. If usages are set they SHOULD be encoded inside the CSR spec Defaults to `digital signature` and `key encipherment` if not specified.
username `string`	Username contains the name of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable.