Overview
- Full name
docker.io/pragkent/alidns-webhook- Registry
- docker.io
- Namespace
- pragkent
- Repository
- alidns-webhook
- Cached tags
- 2
- Last synced
- 07/05/2026, 10:41 PM
Introduction
cert-manager 阿里云 DNS Webhook 镜像，Let's Encrypt DNS-01 挑战自动解析，K8s TLS 证书签发辅助。
Details
pragkent/alidns-webhook 为 cert-manager 提供阿里云 DNS DNS-01 挑战 Webhook，自动创建/删除 TXT 记录完成 Let's Encrypt 证书签发。定位为 cert-manager Webhook 组件，在 K8s 集群内以 Deployment 运行并注册 Webhook；非 docker 独立业务服务。
快速启动
# 通过 cert-manager 安装，非独立 docker run
helm repo add pragkent https://pragkent.github.io/alidns-webhook/
helm install alidns-webhook pragkent/alidns-webhook
推荐实践
# ClusterIssuer 配置示例
kubectl apply -f - <<EOF
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-alidns
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: admin@example.com
privateKeySecretRef:
name: letsencrypt-alidns-key
solvers:
- dns01:
webhook:
groupName: acme.alidns.com
solverName: alidns
EOF
核心参数说明
- 角色 — cert-manager DNS-01 Webhook
- 配合 — cert-manager + ClusterIssuer
- 凭据 — 阿里云 AccessKey Secret
- 勿 — docker run 替代 Helm 安装
Kubernetes
apiVersion: apps/v1
kind: Deployment
metadata:
name: alidns-webhook
namespace: cert-manager
spec:
replicas: 1
selector:
matchLabels:
app: alidns-webhook
template:
metadata:
labels:
app: alidns-webhook
spec:
containers:
- name: webhook
image: docker.io/pragkent/alidns-webhook:v0.3.0
envFrom:
- secretRef:
name: alidns-credentials
---
apiVersion: v1
kind: Service
metadata:
name: alidns-webhook
namespace: cert-manager
spec:
selector:
app: alidns-webhook
ports:
- port: 443
targetPort: 8443
AccessKey 存 Secret；配合 cert-manager ClusterIssuer 使用。
Latest tags (20)
View all 2 tags →| Tag | Arch | Pushed At | Size | Digest | Sync | Wish | Action |
|---|---|---|---|---|---|---|---|
docker.io/pragkent/alidns-webhook :0.1.1 | linux/amd64 | 2022/01/27 11:41 | 18.2 MB | sha256:2a86e75ad186… | |||
docker.io/pragkent/alidns-webhook :0.1.0 | linux/amd64 | 2020/09/17 15:15 | 16.6 MB | sha256:8e9a7e4a1e66… |