Feature: configure zone-id in issuer.

[cschneemann]

What do you think about configuring a zone-id in additon to the projectId you can configure to the webhook.config?
At the moment we seem to face the problem that the domain for a certification is somehow "guessed" and no suitable hosted-zone is found in the configured project.
(See issue #123 )
Just like it is possible with the route53 issuer in cert-manager.

[PatrickKoss]

Hey @cschneemann ,

I am not sure if configuring the zoneId will help in any case. The webhook has a clear interface that it must implement and cert manager fills this interface. So in our case cert manager passes the zone name and fqdn (rrset name) to the webhook. See this code snippet:

func getZoneDnsNameAndRRSetName(ch *v1alpha1.ChallengeRequest) (string, string) {
	// Remove trailing . from domain
	domain := strings.TrimSuffix(ch.ResolvedZone, ".")

	return domain, ch.ResolvedFQDN
}

Matching the zone name or id leads to the same result.
For that reason I would not add the config. If you have some convincing arguments for it feel free to share it. We are open to hear it.

[cschneemann]

Hi @PatrickKoss,
I just thought about this change because we try to get a certificate for the domain "test.example.de" and have this domain configured in a hosted zone, but the cert-manager tries to configure the zone "example.de", which is not available in our project. If that problem can be fixed in another way we would also be happy.