1. Registry
  2. Packages
  3. Kubernetes Cert Manager
  4. API Docs
  5. CertManager
Viewing docs for Kubernetes Cert Manager v0.2.0
published on Friday, Mar 14, 2025 by Pulumi
kubernetes-cert-manager logo
Viewing docs for Kubernetes Cert Manager v0.2.0
published on Friday, Mar 14, 2025 by Pulumi

    Automates the management and issuance of TLS certificates from various issuing sources within Kubernetes

    Create CertManager Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CertManager(name: string, args?: CertManagerArgs, opts?: ComponentResourceOptions);
    @overload
    def CertManager(resource_name: str,
                    args: Optional[CertManagerArgs] = None,
                    opts: Optional[ResourceOptions] = None)
    
    @overload
    def CertManager(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    affinity: Optional[pulumi_kubernetes.core.v1.AffinityArgs] = None,
                    cainjector: Optional[CertManagerCaInjectorArgs] = None,
                    cluster_resource_namespace: Optional[str] = None,
                    container_security_context: Optional[pulumi_kubernetes.core.v1.SecurityContextArgs] = None,
                    deployment_annotations: Optional[Mapping[str, str]] = None,
                    extra_args: Optional[Sequence[str]] = None,
                    extra_env: Optional[Sequence[pulumi_kubernetes.core.v1.EnvVarArgs]] = None,
                    extra_volume_mounts: Optional[Sequence[pulumi_kubernetes.core.v1.VolumeMountArgs]] = None,
                    extra_volumes: Optional[Sequence[pulumi_kubernetes.core.v1.VolumeArgs]] = None,
                    feature_gates: Optional[str] = None,
                    global_: Optional[CertManagerGlobalArgs] = None,
                    helm_options: Optional[ReleaseArgs] = None,
                    http_proxy: Optional[str] = None,
                    https_proxy: Optional[str] = None,
                    image: Optional[CertManagerImageArgs] = None,
                    ingress_shim: Optional[CertManagerIngressShimArgs] = None,
                    install_crds: Optional[bool] = None,
                    no_proxy: Optional[Sequence[str]] = None,
                    node_selector: Optional[pulumi_kubernetes.core.v1.NodeSelectorArgs] = None,
                    pod_annotations: Optional[Mapping[str, str]] = None,
                    pod_dns_config: Optional[pulumi_kubernetes.core.v1.PodDNSConfigArgs] = None,
                    pod_dns_policy: Optional[str] = None,
                    pod_labels: Optional[Mapping[str, str]] = None,
                    prometheus: Optional[CertManagerPrometheusArgs] = None,
                    replica_count: Optional[int] = None,
                    resources: Optional[pulumi_kubernetes.core.v1.ResourceRequirementsArgs] = None,
                    security_context: Optional[pulumi_kubernetes.core.v1.PodSecurityContextArgs] = None,
                    service_account: Optional[CertManagerServiceAccountArgs] = None,
                    service_annotations: Optional[Mapping[str, str]] = None,
                    service_labels: Optional[Mapping[str, str]] = None,
                    startupapicheck: Optional[CertManagerStartupAPICheckArgs] = None,
                    strategy: Optional[pulumi_kubernetes.apps.v1.DeploymentStrategyArgs] = None,
                    tolerations: Optional[Sequence[pulumi_kubernetes.core.v1.TolerationArgs]] = None,
                    webhook: Optional[CertManagerWebhookArgs] = None)
    func NewCertManager(ctx *Context, name string, args *CertManagerArgs, opts ...ResourceOption) (*CertManager, error)
    public CertManager(string name, CertManagerArgs? args = null, ComponentResourceOptions? opts = null)
    public CertManager(String name, CertManagerArgs args)
    public CertManager(String name, CertManagerArgs args, ComponentResourceOptions options)
    
    type: kubernetes-cert-manager:CertManager
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "kubernetes-cert-manager_cert_manager" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args CertManagerArgs
    The arguments to resource properties.
    opts ComponentResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CertManagerArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CertManagerArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CertManagerArgs
    The arguments to resource properties.
    opts ComponentResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CertManagerArgs
    The arguments to resource properties.
    options ComponentResourceOptions
    Bag of options to control resource's behavior.

    CertManager Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CertManager resource accepts the following input properties:

    Affinity Pulumi.Kubernetes.Types.Inputs.Core.V1.Affinity
    This type is defined in the Kubernetes package.
    Cainjector Pulumi.KubernetesCertManager.Inputs.CertManagerCaInjector
    ClusterResourceNamespace string
    Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources. By default, the same namespace as cert-manager is deployed within is used. This namespace will not be automatically created by the Helm chart.
    ContainerSecurityContext Pulumi.Kubernetes.Types.Inputs.Core.V1.SecurityContext
    Container Security Context to be set on the controller component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    DeploymentAnnotations Dictionary<string, string>
    Optional additional annotations to add to the controller Deployment
    ExtraArgs List<string>
    Optional additional arguments.
    ExtraEnv List<Pulumi.Kubernetes.Types.Inputs.Core.V1.EnvVar>
    ExtraVolumeMounts List<Pulumi.Kubernetes.Types.Inputs.Core.V1.VolumeMount>
    ExtraVolumes List<Pulumi.Kubernetes.Types.Inputs.Core.V1.Volume>
    FeatureGates string
    Comma separated list of feature gates that should be enabled on the controller pod.
    Global Pulumi.KubernetesCertManager.Inputs.CertManagerGlobal
    HelmOptions Pulumi.KubernetesCertManager.Inputs.Release
    HelmOptions is an escape hatch that lets the end user control any aspect of the Helm deployment. This exposes the entirety of the underlying Helm Release component args.
    Http_proxy string
    Https_proxy string
    Image Pulumi.KubernetesCertManager.Inputs.CertManagerImage
    IngressShim Pulumi.KubernetesCertManager.Inputs.CertManagerIngressShim
    InstallCRDs bool
    No_proxy List<string>
    NodeSelector Pulumi.Kubernetes.Types.Inputs.Core.V1.NodeSelector
    This type is defined in the Kubernetes package.
    PodAnnotations Dictionary<string, string>
    Optional additional annotations to add to the controller Pods
    PodDnsConfig Pulumi.Kubernetes.Types.Inputs.Core.V1.PodDNSConfig
    This type is defined in the Kubernetes package.
    PodDnsPolicy string
    Optional DNS settings, useful if you have a public and private DNS zone for the same domain on Route 53. What follows is an example of ensuring cert-manager can access an ingress or DNS TXT records at all times. NOTE: This requires Kubernetes 1.10 or CustomPodDNS feature gate enabled for the cluster to work.
    PodLabels Dictionary<string, string>
    Prometheus Pulumi.KubernetesCertManager.Inputs.CertManagerPrometheus
    ReplicaCount int
    Resources Pulumi.Kubernetes.Types.Inputs.Core.V1.ResourceRequirements
    This type is defined in the Kubernetes package.
    SecurityContext Pulumi.Kubernetes.Types.Inputs.Core.V1.PodSecurityContext
    Pod Security Context. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    ServiceAccount Pulumi.KubernetesCertManager.Inputs.CertManagerServiceAccount
    ServiceAnnotations Dictionary<string, string>
    Optional additional annotations to add to the controller service
    ServiceLabels Dictionary<string, string>
    Optional additional labels to add to the controller Service
    Startupapicheck Pulumi.KubernetesCertManager.Inputs.CertManagerStartupAPICheck
    Strategy Pulumi.Kubernetes.Types.Inputs.Apps.V1.DeploymentStrategy
    This type is defined in the Kubernetes package.
    Tolerations List<Pulumi.Kubernetes.Types.Inputs.Core.V1.Toleration>
    Webhook Pulumi.KubernetesCertManager.Inputs.CertManagerWebhook
    Affinity AffinityArgs
    This type is defined in the Kubernetes package.
    Cainjector CertManagerCaInjectorArgs
    ClusterResourceNamespace string
    Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources. By default, the same namespace as cert-manager is deployed within is used. This namespace will not be automatically created by the Helm chart.
    ContainerSecurityContext SecurityContextArgs
    Container Security Context to be set on the controller component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    DeploymentAnnotations map[string]string
    Optional additional annotations to add to the controller Deployment
    ExtraArgs []string
    Optional additional arguments.
    ExtraEnv EnvVarArgs
    ExtraVolumeMounts VolumeMountArgs
    ExtraVolumes VolumeArgs
    FeatureGates string
    Comma separated list of feature gates that should be enabled on the controller pod.
    Global CertManagerGlobalArgs
    HelmOptions ReleaseArgs
    HelmOptions is an escape hatch that lets the end user control any aspect of the Helm deployment. This exposes the entirety of the underlying Helm Release component args.
    Http_proxy string
    Https_proxy string
    Image CertManagerImageArgs
    IngressShim CertManagerIngressShimArgs
    InstallCRDs bool
    No_proxy []string
    NodeSelector NodeSelectorArgs
    This type is defined in the Kubernetes package.
    PodAnnotations map[string]string
    Optional additional annotations to add to the controller Pods
    PodDnsConfig PodDNSConfigArgs
    This type is defined in the Kubernetes package.
    PodDnsPolicy string
    Optional DNS settings, useful if you have a public and private DNS zone for the same domain on Route 53. What follows is an example of ensuring cert-manager can access an ingress or DNS TXT records at all times. NOTE: This requires Kubernetes 1.10 or CustomPodDNS feature gate enabled for the cluster to work.
    PodLabels map[string]string
    Prometheus CertManagerPrometheusArgs
    ReplicaCount int
    Resources ResourceRequirementsArgs
    This type is defined in the Kubernetes package.
    SecurityContext PodSecurityContextArgs
    Pod Security Context. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    ServiceAccount CertManagerServiceAccountArgs
    ServiceAnnotations map[string]string
    Optional additional annotations to add to the controller service
    ServiceLabels map[string]string
    Optional additional labels to add to the controller Service
    Startupapicheck CertManagerStartupAPICheckArgs
    Strategy DeploymentStrategyArgs
    This type is defined in the Kubernetes package.
    Tolerations TolerationArgs
    Webhook CertManagerWebhookArgs
    affinity object
    This type is defined in the Kubernetes package.
    cainjector object
    cluster_resource_namespace string
    Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources. By default, the same namespace as cert-manager is deployed within is used. This namespace will not be automatically created by the Helm chart.
    container_security_context object
    Container Security Context to be set on the controller component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deployment_annotations map(string)
    Optional additional annotations to add to the controller Deployment
    extra_args list(string)
    Optional additional arguments.
    extra_env list(object)
    extra_volume_mounts list(object)
    extra_volumes list(object)
    feature_gates string
    Comma separated list of feature gates that should be enabled on the controller pod.
    global object
    helm_options object
    HelmOptions is an escape hatch that lets the end user control any aspect of the Helm deployment. This exposes the entirety of the underlying Helm Release component args.
    http_proxy string
    https_proxy string
    image object
    ingress_shim object
    install_cr_ds bool
    no_proxy list(string)
    node_selector object
    This type is defined in the Kubernetes package.
    pod_annotations map(string)
    Optional additional annotations to add to the controller Pods
    pod_dns_config object
    This type is defined in the Kubernetes package.
    pod_dns_policy string
    Optional DNS settings, useful if you have a public and private DNS zone for the same domain on Route 53. What follows is an example of ensuring cert-manager can access an ingress or DNS TXT records at all times. NOTE: This requires Kubernetes 1.10 or CustomPodDNS feature gate enabled for the cluster to work.
    pod_labels map(string)
    prometheus object
    replica_count number
    resources object
    This type is defined in the Kubernetes package.
    security_context object
    Pod Security Context. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    service_account object
    service_annotations map(string)
    Optional additional annotations to add to the controller service
    service_labels map(string)
    Optional additional labels to add to the controller Service
    startupapicheck object
    strategy object
    This type is defined in the Kubernetes package.
    tolerations list(object)
    webhook object
    affinity Affinity
    This type is defined in the Kubernetes package.
    cainjector CertManagerCaInjector
    clusterResourceNamespace String
    Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources. By default, the same namespace as cert-manager is deployed within is used. This namespace will not be automatically created by the Helm chart.
    containerSecurityContext SecurityContext
    Container Security Context to be set on the controller component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations Map<String,String>
    Optional additional annotations to add to the controller Deployment
    extraArgs List<String>
    Optional additional arguments.
    extraEnv List<EnvVar>
    extraVolumeMounts List<VolumeMount>
    extraVolumes List<Volume>
    featureGates String
    Comma separated list of feature gates that should be enabled on the controller pod.
    global CertManagerGlobal
    helmOptions Release
    HelmOptions is an escape hatch that lets the end user control any aspect of the Helm deployment. This exposes the entirety of the underlying Helm Release component args.
    http_proxy String
    https_proxy String
    image CertManagerImage
    ingressShim CertManagerIngressShim
    installCRDs Boolean
    no_proxy List<String>
    nodeSelector NodeSelector
    This type is defined in the Kubernetes package.
    podAnnotations Map<String,String>
    Optional additional annotations to add to the controller Pods
    podDnsConfig PodDNSConfig
    This type is defined in the Kubernetes package.
    podDnsPolicy String
    Optional DNS settings, useful if you have a public and private DNS zone for the same domain on Route 53. What follows is an example of ensuring cert-manager can access an ingress or DNS TXT records at all times. NOTE: This requires Kubernetes 1.10 or CustomPodDNS feature gate enabled for the cluster to work.
    podLabels Map<String,String>
    prometheus CertManagerPrometheus
    replicaCount Integer
    resources ResourceRequirements
    This type is defined in the Kubernetes package.
    securityContext PodSecurityContext
    Pod Security Context. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount CertManagerServiceAccount
    serviceAnnotations Map<String,String>
    Optional additional annotations to add to the controller service
    serviceLabels Map<String,String>
    Optional additional labels to add to the controller Service
    startupapicheck CertManagerStartupAPICheck
    strategy DeploymentStrategy
    This type is defined in the Kubernetes package.
    tolerations List<Toleration>
    webhook CertManagerWebhook
    affinity pulumiKubernetestypesinputcorev1Affinity
    This type is defined in the Kubernetes package.
    cainjector CertManagerCaInjector
    clusterResourceNamespace string
    Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources. By default, the same namespace as cert-manager is deployed within is used. This namespace will not be automatically created by the Helm chart.
    containerSecurityContext pulumiKubernetestypesinputcorev1SecurityContext
    Container Security Context to be set on the controller component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations {[key: string]: string}
    Optional additional annotations to add to the controller Deployment
    extraArgs string[]
    Optional additional arguments.
    extraEnv pulumiKubernetestypesinputcorev1EnvVar[]
    extraVolumeMounts pulumiKubernetestypesinputcorev1VolumeMount[]
    extraVolumes pulumiKubernetestypesinputcorev1Volume[]
    featureGates string
    Comma separated list of feature gates that should be enabled on the controller pod.
    global CertManagerGlobal
    helmOptions Release
    HelmOptions is an escape hatch that lets the end user control any aspect of the Helm deployment. This exposes the entirety of the underlying Helm Release component args.
    http_proxy string
    https_proxy string
    image CertManagerImage
    ingressShim CertManagerIngressShim
    installCRDs boolean
    no_proxy string[]
    nodeSelector pulumiKubernetestypesinputcorev1NodeSelector
    This type is defined in the Kubernetes package.
    podAnnotations {[key: string]: string}
    Optional additional annotations to add to the controller Pods
    podDnsConfig pulumiKubernetestypesinputcorev1PodDNSConfig
    This type is defined in the Kubernetes package.
    podDnsPolicy string
    Optional DNS settings, useful if you have a public and private DNS zone for the same domain on Route 53. What follows is an example of ensuring cert-manager can access an ingress or DNS TXT records at all times. NOTE: This requires Kubernetes 1.10 or CustomPodDNS feature gate enabled for the cluster to work.
    podLabels {[key: string]: string}
    prometheus CertManagerPrometheus
    replicaCount number
    resources pulumiKubernetestypesinputcorev1ResourceRequirements
    This type is defined in the Kubernetes package.
    securityContext pulumiKubernetestypesinputcorev1PodSecurityContext
    Pod Security Context. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount CertManagerServiceAccount
    serviceAnnotations {[key: string]: string}
    Optional additional annotations to add to the controller service
    serviceLabels {[key: string]: string}
    Optional additional labels to add to the controller Service
    startupapicheck CertManagerStartupAPICheck
    strategy pulumiKubernetestypesinputappsv1DeploymentStrategy
    This type is defined in the Kubernetes package.
    tolerations pulumiKubernetestypesinputcorev1Toleration[]
    webhook CertManagerWebhook
    affinity pulumi_kubernetes.core.v1.AffinityArgs
    This type is defined in the Kubernetes package.
    cainjector CertManagerCaInjectorArgs
    cluster_resource_namespace str
    Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources. By default, the same namespace as cert-manager is deployed within is used. This namespace will not be automatically created by the Helm chart.
    container_security_context pulumi_kubernetes.core.v1.SecurityContextArgs
    Container Security Context to be set on the controller component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deployment_annotations Mapping[str, str]
    Optional additional annotations to add to the controller Deployment
    extra_args Sequence[str]
    Optional additional arguments.
    extra_env Sequence[pulumi_kubernetes.core.v1.EnvVarArgs]
    extra_volume_mounts Sequence[pulumi_kubernetes.core.v1.VolumeMountArgs]
    extra_volumes Sequence[pulumi_kubernetes.core.v1.VolumeArgs]
    feature_gates str
    Comma separated list of feature gates that should be enabled on the controller pod.
    global_ CertManagerGlobalArgs
    helm_options ReleaseArgs
    HelmOptions is an escape hatch that lets the end user control any aspect of the Helm deployment. This exposes the entirety of the underlying Helm Release component args.
    http_proxy str
    https_proxy str
    image CertManagerImageArgs
    ingress_shim CertManagerIngressShimArgs
    install_crds bool
    no_proxy Sequence[str]
    node_selector pulumi_kubernetes.core.v1.NodeSelectorArgs
    This type is defined in the Kubernetes package.
    pod_annotations Mapping[str, str]
    Optional additional annotations to add to the controller Pods
    pod_dns_config pulumi_kubernetes.core.v1.PodDNSConfigArgs
    This type is defined in the Kubernetes package.
    pod_dns_policy str
    Optional DNS settings, useful if you have a public and private DNS zone for the same domain on Route 53. What follows is an example of ensuring cert-manager can access an ingress or DNS TXT records at all times. NOTE: This requires Kubernetes 1.10 or CustomPodDNS feature gate enabled for the cluster to work.
    pod_labels Mapping[str, str]
    prometheus CertManagerPrometheusArgs
    replica_count int
    resources pulumi_kubernetes.core.v1.ResourceRequirementsArgs
    This type is defined in the Kubernetes package.
    security_context pulumi_kubernetes.core.v1.PodSecurityContextArgs
    Pod Security Context. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    service_account CertManagerServiceAccountArgs
    service_annotations Mapping[str, str]
    Optional additional annotations to add to the controller service
    service_labels Mapping[str, str]
    Optional additional labels to add to the controller Service
    startupapicheck CertManagerStartupAPICheckArgs
    strategy pulumi_kubernetes.apps.v1.DeploymentStrategyArgs
    This type is defined in the Kubernetes package.
    tolerations Sequence[pulumi_kubernetes.core.v1.TolerationArgs]
    webhook CertManagerWebhookArgs
    affinity Property Map
    This type is defined in the Kubernetes package.
    cainjector Property Map
    clusterResourceNamespace String
    Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources. By default, the same namespace as cert-manager is deployed within is used. This namespace will not be automatically created by the Helm chart.
    containerSecurityContext Property Map
    Container Security Context to be set on the controller component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations Map<String>
    Optional additional annotations to add to the controller Deployment
    extraArgs List<String>
    Optional additional arguments.
    extraEnv List<Property Map>
    extraVolumeMounts List<Property Map>
    extraVolumes List<Property Map>
    featureGates String
    Comma separated list of feature gates that should be enabled on the controller pod.
    global Property Map
    helmOptions Property Map
    HelmOptions is an escape hatch that lets the end user control any aspect of the Helm deployment. This exposes the entirety of the underlying Helm Release component args.
    http_proxy String
    https_proxy String
    image Property Map
    ingressShim Property Map
    installCRDs Boolean
    no_proxy List<String>
    nodeSelector Property Map
    This type is defined in the Kubernetes package.
    podAnnotations Map<String>
    Optional additional annotations to add to the controller Pods
    podDnsConfig Property Map
    This type is defined in the Kubernetes package.
    podDnsPolicy String
    Optional DNS settings, useful if you have a public and private DNS zone for the same domain on Route 53. What follows is an example of ensuring cert-manager can access an ingress or DNS TXT records at all times. NOTE: This requires Kubernetes 1.10 or CustomPodDNS feature gate enabled for the cluster to work.
    podLabels Map<String>
    prometheus Property Map
    replicaCount Number
    resources Property Map
    This type is defined in the Kubernetes package.
    securityContext Property Map
    Pod Security Context. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount Property Map
    serviceAnnotations Map<String>
    Optional additional annotations to add to the controller service
    serviceLabels Map<String>
    Optional additional labels to add to the controller Service
    startupapicheck Property Map
    strategy Property Map
    This type is defined in the Kubernetes package.
    tolerations List<Property Map>
    webhook Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CertManager resource produces the following output properties:

    Status Pulumi.KubernetesCertManager.Outputs.ReleaseStatus
    Detailed information about the status of the underlying Helm deployment.
    Status ReleaseStatus
    Detailed information about the status of the underlying Helm deployment.
    status object
    Detailed information about the status of the underlying Helm deployment.
    status ReleaseStatus
    Detailed information about the status of the underlying Helm deployment.
    status ReleaseStatus
    Detailed information about the status of the underlying Helm deployment.
    status ReleaseStatus
    Detailed information about the status of the underlying Helm deployment.
    status Property Map
    Detailed information about the status of the underlying Helm deployment.

    Supporting Types

    CertManagerCaInjector, CertManagerCaInjectorArgs

    Affinity Pulumi.Kubernetes.Types.Inputs.Core.V1.Affinity
    This type is defined in the Kubernetes package.
    ContainerSecurityContext Pulumi.Kubernetes.Types.Inputs.Core.V1.SecurityContext
    Container Security Context to be set on the cainjector component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    DeploymentAnnotations Dictionary<string, string>
    Optional additional annotations to add to the cainjector Deployment
    ExtraArgs List<string>
    Optional additional arguments for cainjector
    Image Pulumi.KubernetesCertManager.Inputs.CertManagerImage
    NodeSelector Dictionary<string, string>
    PodAnnotations Dictionary<string, string>
    Optional additional annotations to add to the cainjector Pods
    PodLabels Dictionary<string, string>
    Optional additional labels to add to the Webhook Pods
    PodSecurityContext Pulumi.Kubernetes.Types.Inputs.Core.V1.PodSecurityContext
    Pod Security Context to be set on the cainjector component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    ReplicaCount int
    Resources Pulumi.Kubernetes.Types.Inputs.Core.V1.ResourceRequirements
    This type is defined in the Kubernetes package.
    ServiceAccount Pulumi.KubernetesCertManager.Inputs.CertManagerServiceAccount
    Strategy Pulumi.Kubernetes.Types.Inputs.Apps.V1.DeploymentStrategy
    This type is defined in the Kubernetes package.
    TimeoutSeconds int
    Tolerations List<Pulumi.Kubernetes.Types.Inputs.Core.V1.Toleration>
    Affinity Affinity
    This type is defined in the Kubernetes package.
    ContainerSecurityContext SecurityContext
    Container Security Context to be set on the cainjector component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    DeploymentAnnotations map[string]string
    Optional additional annotations to add to the cainjector Deployment
    ExtraArgs []string
    Optional additional arguments for cainjector
    Image CertManagerImage
    NodeSelector map[string]string
    PodAnnotations map[string]string
    Optional additional annotations to add to the cainjector Pods
    PodLabels map[string]string
    Optional additional labels to add to the Webhook Pods
    PodSecurityContext PodSecurityContext
    Pod Security Context to be set on the cainjector component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    ReplicaCount int
    Resources ResourceRequirements
    This type is defined in the Kubernetes package.
    ServiceAccount CertManagerServiceAccount
    Strategy DeploymentStrategy
    This type is defined in the Kubernetes package.
    TimeoutSeconds int
    Tolerations Toleration
    affinity object
    This type is defined in the Kubernetes package.
    container_security_context object
    Container Security Context to be set on the cainjector component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deployment_annotations map(string)
    Optional additional annotations to add to the cainjector Deployment
    extra_args list(string)
    Optional additional arguments for cainjector
    image object
    node_selector map(string)
    pod_annotations map(string)
    Optional additional annotations to add to the cainjector Pods
    pod_labels map(string)
    Optional additional labels to add to the Webhook Pods
    pod_security_context object
    Pod Security Context to be set on the cainjector component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    replica_count number
    resources object
    This type is defined in the Kubernetes package.
    service_account object
    strategy object
    This type is defined in the Kubernetes package.
    timeout_seconds number
    tolerations list(object)
    affinity Affinity
    This type is defined in the Kubernetes package.
    containerSecurityContext SecurityContext
    Container Security Context to be set on the cainjector component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations Map<String,String>
    Optional additional annotations to add to the cainjector Deployment
    extraArgs List<String>
    Optional additional arguments for cainjector
    image CertManagerImage
    nodeSelector Map<String,String>
    podAnnotations Map<String,String>
    Optional additional annotations to add to the cainjector Pods
    podLabels Map<String,String>
    Optional additional labels to add to the Webhook Pods
    podSecurityContext PodSecurityContext
    Pod Security Context to be set on the cainjector component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    replicaCount Integer
    resources ResourceRequirements
    This type is defined in the Kubernetes package.
    serviceAccount CertManagerServiceAccount
    strategy DeploymentStrategy
    This type is defined in the Kubernetes package.
    timeoutSeconds Integer
    tolerations List<Toleration>
    affinity pulumiKubernetestypesinputcorev1Affinity
    This type is defined in the Kubernetes package.
    containerSecurityContext pulumiKubernetestypesinputcorev1SecurityContext
    Container Security Context to be set on the cainjector component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations {[key: string]: string}
    Optional additional annotations to add to the cainjector Deployment
    extraArgs string[]
    Optional additional arguments for cainjector
    image CertManagerImage
    nodeSelector {[key: string]: string}
    podAnnotations {[key: string]: string}
    Optional additional annotations to add to the cainjector Pods
    podLabels {[key: string]: string}
    Optional additional labels to add to the Webhook Pods
    podSecurityContext pulumiKubernetestypesinputcorev1PodSecurityContext
    Pod Security Context to be set on the cainjector component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    replicaCount number
    resources pulumiKubernetestypesinputcorev1ResourceRequirements
    This type is defined in the Kubernetes package.
    serviceAccount CertManagerServiceAccount
    strategy pulumiKubernetestypesinputappsv1DeploymentStrategy
    This type is defined in the Kubernetes package.
    timeoutSeconds number
    tolerations pulumiKubernetestypesinputcorev1Toleration[]
    affinity pulumi_kubernetes.core.v1.AffinityArgs
    This type is defined in the Kubernetes package.
    container_security_context pulumi_kubernetes.core.v1.SecurityContextArgs
    Container Security Context to be set on the cainjector component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deployment_annotations Mapping[str, str]
    Optional additional annotations to add to the cainjector Deployment
    extra_args Sequence[str]
    Optional additional arguments for cainjector
    image CertManagerImage
    node_selector Mapping[str, str]
    pod_annotations Mapping[str, str]
    Optional additional annotations to add to the cainjector Pods
    pod_labels Mapping[str, str]
    Optional additional labels to add to the Webhook Pods
    pod_security_context pulumi_kubernetes.core.v1.PodSecurityContextArgs
    Pod Security Context to be set on the cainjector component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    replica_count int
    resources pulumi_kubernetes.core.v1.ResourceRequirementsArgs
    This type is defined in the Kubernetes package.
    service_account CertManagerServiceAccount
    strategy pulumi_kubernetes.apps.v1.DeploymentStrategyArgs
    This type is defined in the Kubernetes package.
    timeout_seconds int
    tolerations Sequence[pulumi_kubernetes.core.v1.TolerationArgs]
    affinity Property Map
    This type is defined in the Kubernetes package.
    containerSecurityContext Property Map
    Container Security Context to be set on the cainjector component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations Map<String>
    Optional additional annotations to add to the cainjector Deployment
    extraArgs List<String>
    Optional additional arguments for cainjector
    image Property Map
    nodeSelector Map<String>
    podAnnotations Map<String>
    Optional additional annotations to add to the cainjector Pods
    podLabels Map<String>
    Optional additional labels to add to the Webhook Pods
    podSecurityContext Property Map
    Pod Security Context to be set on the cainjector component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    replicaCount Number
    resources Property Map
    This type is defined in the Kubernetes package.
    serviceAccount Property Map
    strategy Property Map
    This type is defined in the Kubernetes package.
    timeoutSeconds Number
    tolerations List<Property Map>

    CertManagerGlobal, CertManagerGlobalArgs

    ImagePullSecrets List<Pulumi.Kubernetes.Types.Inputs.Core.V1.LocalObjectReference>
    Reference to one or more secrets to be used when pulling images. ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
    LeaderElection Pulumi.KubernetesCertManager.Inputs.CertManagerGlobalLeaderElection
    LogLevel int
    Set the verbosity of cert-manager. Range of 0 - 6 with 6 being the most verbose.
    PodSecurityPolicy Pulumi.KubernetesCertManager.Inputs.CertManagerGlobalPodSecurityPolicy
    PriorityClassName string
    Optional priority class to be used for the cert-manager pods.
    Rbac Pulumi.KubernetesCertManager.Inputs.CertManagerGlobalRbac
    ImagePullSecrets LocalObjectReference
    Reference to one or more secrets to be used when pulling images. ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
    LeaderElection CertManagerGlobalLeaderElection
    LogLevel int
    Set the verbosity of cert-manager. Range of 0 - 6 with 6 being the most verbose.
    PodSecurityPolicy CertManagerGlobalPodSecurityPolicy
    PriorityClassName string
    Optional priority class to be used for the cert-manager pods.
    Rbac CertManagerGlobalRbac
    image_pull_secrets list(object)
    Reference to one or more secrets to be used when pulling images. ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
    leader_election object
    log_level number
    Set the verbosity of cert-manager. Range of 0 - 6 with 6 being the most verbose.
    pod_security_policy object
    priority_class_name string
    Optional priority class to be used for the cert-manager pods.
    rbac object
    imagePullSecrets List<LocalObjectReference>
    Reference to one or more secrets to be used when pulling images. ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
    leaderElection CertManagerGlobalLeaderElection
    logLevel Integer
    Set the verbosity of cert-manager. Range of 0 - 6 with 6 being the most verbose.
    podSecurityPolicy CertManagerGlobalPodSecurityPolicy
    priorityClassName String
    Optional priority class to be used for the cert-manager pods.
    rbac CertManagerGlobalRbac
    imagePullSecrets pulumiKubernetestypesinputcorev1LocalObjectReference[]
    Reference to one or more secrets to be used when pulling images. ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
    leaderElection CertManagerGlobalLeaderElection
    logLevel number
    Set the verbosity of cert-manager. Range of 0 - 6 with 6 being the most verbose.
    podSecurityPolicy CertManagerGlobalPodSecurityPolicy
    priorityClassName string
    Optional priority class to be used for the cert-manager pods.
    rbac CertManagerGlobalRbac
    image_pull_secrets Sequence[pulumi_kubernetes.core.v1.LocalObjectReferenceArgs]
    Reference to one or more secrets to be used when pulling images. ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
    leader_election CertManagerGlobalLeaderElection
    log_level int
    Set the verbosity of cert-manager. Range of 0 - 6 with 6 being the most verbose.
    pod_security_policy CertManagerGlobalPodSecurityPolicy
    priority_class_name str
    Optional priority class to be used for the cert-manager pods.
    rbac CertManagerGlobalRbac
    imagePullSecrets List<Property Map>
    Reference to one or more secrets to be used when pulling images. ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
    leaderElection Property Map
    logLevel Number
    Set the verbosity of cert-manager. Range of 0 - 6 with 6 being the most verbose.
    podSecurityPolicy Property Map
    priorityClassName String
    Optional priority class to be used for the cert-manager pods.
    rbac Property Map

    CertManagerGlobalLeaderElection, CertManagerGlobalLeaderElectionArgs

    LeaseDuration string
    The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate.
    Namespace string
    Override the namespace used to store the ConfigMap for leader election.
    RenewDeadline string
    The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration.
    LeaseDuration string
    The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate.
    Namespace string
    Override the namespace used to store the ConfigMap for leader election.
    RenewDeadline string
    The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration.
    lease_duration string
    The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate.
    namespace string
    Override the namespace used to store the ConfigMap for leader election.
    renew_deadline string
    The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration.
    leaseDuration String
    The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate.
    namespace String
    Override the namespace used to store the ConfigMap for leader election.
    renewDeadline String
    The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration.
    leaseDuration string
    The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate.
    namespace string
    Override the namespace used to store the ConfigMap for leader election.
    renewDeadline string
    The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration.
    lease_duration str
    The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate.
    namespace str
    Override the namespace used to store the ConfigMap for leader election.
    renew_deadline str
    The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration.
    leaseDuration String
    The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate.
    namespace String
    Override the namespace used to store the ConfigMap for leader election.
    renewDeadline String
    The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration.

    CertManagerGlobalPodSecurityPolicy, CertManagerGlobalPodSecurityPolicyArgs

    enabled Boolean
    useAppArmor Boolean
    enabled boolean
    useAppArmor boolean
    enabled Boolean
    useAppArmor Boolean

    CertManagerGlobalRbac, CertManagerGlobalRbacArgs

    Create bool
    Create bool
    create bool
    create Boolean
    create boolean
    create bool
    create Boolean

    CertManagerImage, CertManagerImageArgs

    Digest string
    Setting a digest will override any tag, e.g. digest: sha256:0e072dddd1f7f8fc8909a2ca6f65e76c5f0d2fcfb8be47935ae3457e8bbceb20.
    PullPolicy string
    Registry string
    You can manage a registry with registry: quay.io.
    Repository string
    You can manage a registry with repository: jetstack/cert-manager-controller.
    Tag string
    Override the image tag to deploy by setting this variable. If no value is set, the chart's appVersion will be used.
    Digest string
    Setting a digest will override any tag, e.g. digest: sha256:0e072dddd1f7f8fc8909a2ca6f65e76c5f0d2fcfb8be47935ae3457e8bbceb20.
    PullPolicy string
    Registry string
    You can manage a registry with registry: quay.io.
    Repository string
    You can manage a registry with repository: jetstack/cert-manager-controller.
    Tag string
    Override the image tag to deploy by setting this variable. If no value is set, the chart's appVersion will be used.
    digest string
    Setting a digest will override any tag, e.g. digest: sha256:0e072dddd1f7f8fc8909a2ca6f65e76c5f0d2fcfb8be47935ae3457e8bbceb20.
    pull_policy string
    registry string
    You can manage a registry with registry: quay.io.
    repository string
    You can manage a registry with repository: jetstack/cert-manager-controller.
    tag string
    Override the image tag to deploy by setting this variable. If no value is set, the chart's appVersion will be used.
    digest String
    Setting a digest will override any tag, e.g. digest: sha256:0e072dddd1f7f8fc8909a2ca6f65e76c5f0d2fcfb8be47935ae3457e8bbceb20.
    pullPolicy String
    registry String
    You can manage a registry with registry: quay.io.
    repository String
    You can manage a registry with repository: jetstack/cert-manager-controller.
    tag String
    Override the image tag to deploy by setting this variable. If no value is set, the chart's appVersion will be used.
    digest string
    Setting a digest will override any tag, e.g. digest: sha256:0e072dddd1f7f8fc8909a2ca6f65e76c5f0d2fcfb8be47935ae3457e8bbceb20.
    pullPolicy string
    registry string
    You can manage a registry with registry: quay.io.
    repository string
    You can manage a registry with repository: jetstack/cert-manager-controller.
    tag string
    Override the image tag to deploy by setting this variable. If no value is set, the chart's appVersion will be used.
    digest str
    Setting a digest will override any tag, e.g. digest: sha256:0e072dddd1f7f8fc8909a2ca6f65e76c5f0d2fcfb8be47935ae3457e8bbceb20.
    pull_policy str
    registry str
    You can manage a registry with registry: quay.io.
    repository str
    You can manage a registry with repository: jetstack/cert-manager-controller.
    tag str
    Override the image tag to deploy by setting this variable. If no value is set, the chart's appVersion will be used.
    digest String
    Setting a digest will override any tag, e.g. digest: sha256:0e072dddd1f7f8fc8909a2ca6f65e76c5f0d2fcfb8be47935ae3457e8bbceb20.
    pullPolicy String
    registry String
    You can manage a registry with registry: quay.io.
    repository String
    You can manage a registry with repository: jetstack/cert-manager-controller.
    tag String
    Override the image tag to deploy by setting this variable. If no value is set, the chart's appVersion will be used.

    CertManagerIngressShim, CertManagerIngressShimArgs

    CertManagerPrometheus, CertManagerPrometheusArgs

    CertManagerPrometheusServiceMonitor, CertManagerPrometheusServiceMonitorArgs

    Enabled bool
    Interval string
    Labels Dictionary<string, string>
    Path string
    PrometheusInstance string
    String string
    TargetPort int
    Enabled bool
    Interval string
    Labels map[string]string
    Path string
    PrometheusInstance string
    String string
    TargetPort int
    enabled bool
    interval string
    labels map(string)
    path string
    prometheus_instance string
    string string
    target_port number
    enabled Boolean
    interval String
    labels Map<String,String>
    path String
    prometheusInstance String
    string String
    targetPort Integer
    enabled boolean
    interval string
    labels {[key: string]: string}
    path string
    prometheusInstance string
    string string
    targetPort number
    enabled bool
    interval str
    labels Mapping[str, str]
    path str
    prometheus_instance str
    string str
    target_port int
    enabled Boolean
    interval String
    labels Map<String>
    path String
    prometheusInstance String
    string String
    targetPort Number

    CertManagerServiceAccount, CertManagerServiceAccountArgs

    Annotations Dictionary<string, string>
    Optional additional annotations to add to the controller's ServiceAccount.
    AutomountServiceAccountToken bool
    Automount API credentials for a Service Account.
    Create bool
    Specifies whether a service account should be created
    Name string
    The name of the service account to use. If not set and create is true, a name is generated using the fullname template.
    Annotations map[string]string
    Optional additional annotations to add to the controller's ServiceAccount.
    AutomountServiceAccountToken bool
    Automount API credentials for a Service Account.
    Create bool
    Specifies whether a service account should be created
    Name string
    The name of the service account to use. If not set and create is true, a name is generated using the fullname template.
    annotations map(string)
    Optional additional annotations to add to the controller's ServiceAccount.
    automount_service_account_token bool
    Automount API credentials for a Service Account.
    create bool
    Specifies whether a service account should be created
    name string
    The name of the service account to use. If not set and create is true, a name is generated using the fullname template.
    annotations Map<String,String>
    Optional additional annotations to add to the controller's ServiceAccount.
    automountServiceAccountToken Boolean
    Automount API credentials for a Service Account.
    create Boolean
    Specifies whether a service account should be created
    name String
    The name of the service account to use. If not set and create is true, a name is generated using the fullname template.
    annotations {[key: string]: string}
    Optional additional annotations to add to the controller's ServiceAccount.
    automountServiceAccountToken boolean
    Automount API credentials for a Service Account.
    create boolean
    Specifies whether a service account should be created
    name string
    The name of the service account to use. If not set and create is true, a name is generated using the fullname template.
    annotations Mapping[str, str]
    Optional additional annotations to add to the controller's ServiceAccount.
    automount_service_account_token bool
    Automount API credentials for a Service Account.
    create bool
    Specifies whether a service account should be created
    name str
    The name of the service account to use. If not set and create is true, a name is generated using the fullname template.
    annotations Map<String>
    Optional additional annotations to add to the controller's ServiceAccount.
    automountServiceAccountToken Boolean
    Automount API credentials for a Service Account.
    create Boolean
    Specifies whether a service account should be created
    name String
    The name of the service account to use. If not set and create is true, a name is generated using the fullname template.

    CertManagerStartupAPICheck, CertManagerStartupAPICheckArgs

    Affinity Pulumi.Kubernetes.Types.Inputs.Core.V1.Affinity
    This type is defined in the Kubernetes package.
    BackoffLimit int
    Job backoffLimit
    Enabled bool
    ExtraArgs List<string>
    Optional additional arguments for startupapicheck
    Image Pulumi.KubernetesCertManager.Inputs.CertManagerImage
    JobAnnotations Dictionary<string, string>
    Optional additional annotations to add to the startupapicheck Job
    NodeSelector Dictionary<string, string>
    PodAnnotations Dictionary<string, string>
    Optional additional annotations to add to the startupapicheck Pods
    PodLabels Dictionary<string, string>
    Optional additional labels to add to the startupapicheck Pods
    Rbac Pulumi.KubernetesCertManager.Inputs.CertManagerStartupAPICheckRBAC
    Resources Pulumi.Kubernetes.Types.Inputs.Core.V1.ResourceRequirements
    This type is defined in the Kubernetes package.
    SecurityContext Pulumi.Kubernetes.Types.Inputs.Core.V1.PodSecurityContext
    Pod Security Context to be set on the startupapicheck component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    ServiceAccount Pulumi.KubernetesCertManager.Inputs.CertManagerServiceAccount
    Timeout string
    Timeout for 'kubectl check api' command
    Tolerations List<Pulumi.Kubernetes.Types.Inputs.Core.V1.Toleration>
    Affinity Affinity
    This type is defined in the Kubernetes package.
    BackoffLimit int
    Job backoffLimit
    Enabled bool
    ExtraArgs []string
    Optional additional arguments for startupapicheck
    Image CertManagerImage
    JobAnnotations map[string]string
    Optional additional annotations to add to the startupapicheck Job
    NodeSelector map[string]string
    PodAnnotations map[string]string
    Optional additional annotations to add to the startupapicheck Pods
    PodLabels map[string]string
    Optional additional labels to add to the startupapicheck Pods
    Rbac CertManagerStartupAPICheckRBAC
    Resources ResourceRequirements
    This type is defined in the Kubernetes package.
    SecurityContext PodSecurityContext
    Pod Security Context to be set on the startupapicheck component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    ServiceAccount CertManagerServiceAccount
    Timeout string
    Timeout for 'kubectl check api' command
    Tolerations Toleration
    affinity object
    This type is defined in the Kubernetes package.
    backoff_limit number
    Job backoffLimit
    enabled bool
    extra_args list(string)
    Optional additional arguments for startupapicheck
    image object
    job_annotations map(string)
    Optional additional annotations to add to the startupapicheck Job
    node_selector map(string)
    pod_annotations map(string)
    Optional additional annotations to add to the startupapicheck Pods
    pod_labels map(string)
    Optional additional labels to add to the startupapicheck Pods
    rbac object
    resources object
    This type is defined in the Kubernetes package.
    security_context object
    Pod Security Context to be set on the startupapicheck component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    service_account object
    timeout string
    Timeout for 'kubectl check api' command
    tolerations list(object)
    affinity Affinity
    This type is defined in the Kubernetes package.
    backoffLimit Integer
    Job backoffLimit
    enabled Boolean
    extraArgs List<String>
    Optional additional arguments for startupapicheck
    image CertManagerImage
    jobAnnotations Map<String,String>
    Optional additional annotations to add to the startupapicheck Job
    nodeSelector Map<String,String>
    podAnnotations Map<String,String>
    Optional additional annotations to add to the startupapicheck Pods
    podLabels Map<String,String>
    Optional additional labels to add to the startupapicheck Pods
    rbac CertManagerStartupAPICheckRBAC
    resources ResourceRequirements
    This type is defined in the Kubernetes package.
    securityContext PodSecurityContext
    Pod Security Context to be set on the startupapicheck component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount CertManagerServiceAccount
    timeout String
    Timeout for 'kubectl check api' command
    tolerations List<Toleration>
    affinity pulumiKubernetestypesinputcorev1Affinity
    This type is defined in the Kubernetes package.
    backoffLimit number
    Job backoffLimit
    enabled boolean
    extraArgs string[]
    Optional additional arguments for startupapicheck
    image CertManagerImage
    jobAnnotations {[key: string]: string}
    Optional additional annotations to add to the startupapicheck Job
    nodeSelector {[key: string]: string}
    podAnnotations {[key: string]: string}
    Optional additional annotations to add to the startupapicheck Pods
    podLabels {[key: string]: string}
    Optional additional labels to add to the startupapicheck Pods
    rbac CertManagerStartupAPICheckRBAC
    resources pulumiKubernetestypesinputcorev1ResourceRequirements
    This type is defined in the Kubernetes package.
    securityContext pulumiKubernetestypesinputcorev1PodSecurityContext
    Pod Security Context to be set on the startupapicheck component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount CertManagerServiceAccount
    timeout string
    Timeout for 'kubectl check api' command
    tolerations pulumiKubernetestypesinputcorev1Toleration[]
    affinity pulumi_kubernetes.core.v1.AffinityArgs
    This type is defined in the Kubernetes package.
    backoff_limit int
    Job backoffLimit
    enabled bool
    extra_args Sequence[str]
    Optional additional arguments for startupapicheck
    image CertManagerImage
    job_annotations Mapping[str, str]
    Optional additional annotations to add to the startupapicheck Job
    node_selector Mapping[str, str]
    pod_annotations Mapping[str, str]
    Optional additional annotations to add to the startupapicheck Pods
    pod_labels Mapping[str, str]
    Optional additional labels to add to the startupapicheck Pods
    rbac CertManagerStartupAPICheckRBAC
    resources pulumi_kubernetes.core.v1.ResourceRequirementsArgs
    This type is defined in the Kubernetes package.
    security_context pulumi_kubernetes.core.v1.PodSecurityContextArgs
    Pod Security Context to be set on the startupapicheck component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    service_account CertManagerServiceAccount
    timeout str
    Timeout for 'kubectl check api' command
    tolerations Sequence[pulumi_kubernetes.core.v1.TolerationArgs]
    affinity Property Map
    This type is defined in the Kubernetes package.
    backoffLimit Number
    Job backoffLimit
    enabled Boolean
    extraArgs List<String>
    Optional additional arguments for startupapicheck
    image Property Map
    jobAnnotations Map<String>
    Optional additional annotations to add to the startupapicheck Job
    nodeSelector Map<String>
    podAnnotations Map<String>
    Optional additional annotations to add to the startupapicheck Pods
    podLabels Map<String>
    Optional additional labels to add to the startupapicheck Pods
    rbac Property Map
    resources Property Map
    This type is defined in the Kubernetes package.
    securityContext Property Map
    Pod Security Context to be set on the startupapicheck component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount Property Map
    timeout String
    Timeout for 'kubectl check api' command
    tolerations List<Property Map>

    CertManagerStartupAPICheckRBAC, CertManagerStartupAPICheckRBACArgs

    Annotations Dictionary<string, string>
    annotations for the startup API Check job RBAC and PSP resources
    Annotations map[string]string
    annotations for the startup API Check job RBAC and PSP resources
    annotations map(string)
    annotations for the startup API Check job RBAC and PSP resources
    annotations Map<String,String>
    annotations for the startup API Check job RBAC and PSP resources
    annotations {[key: string]: string}
    annotations for the startup API Check job RBAC and PSP resources
    annotations Mapping[str, str]
    annotations for the startup API Check job RBAC and PSP resources
    annotations Map<String>
    annotations for the startup API Check job RBAC and PSP resources

    CertManagerWebhook, CertManagerWebhookArgs

    Affinity Pulumi.Kubernetes.Types.Inputs.Core.V1.Affinity
    This type is defined in the Kubernetes package.
    ContainerSecurityContext Pulumi.Kubernetes.Types.Inputs.Core.V1.SecurityContext
    Container Security Context to be set on the webhook component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    DeploymentAnnotations Dictionary<string, string>
    Optional additional annotations to add to the webhook Deployment
    ExtraArgs List<string>
    Optional additional arguments for webhook
    HostNetwork bool
    Specifies if the webhook should be started in hostNetwork mode. Required for use in some managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico), because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working Since the default port for the webhook conflicts with kubelet on the host network, webhook.securePort should be changed to an available port if running in hostNetwork mode.
    Image Pulumi.KubernetesCertManager.Inputs.CertManagerImage
    LivenessProbe Pulumi.Kubernetes.Types.Inputs.Core.V1.Probe
    Liveness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    LoadBalancerIP string
    MutatingWebhookConfigurationAnnotations Dictionary<string, string>
    Optional additional annotations to add to the webhook MutatingWebhookConfiguration
    NodeSelector Dictionary<string, string>
    PodAnnotations Dictionary<string, string>
    Optional additional annotations to add to the webhook Pods
    PodLabels Dictionary<string, string>
    Optional additional labels to add to the Webhook Pods
    ReadinessProbe Pulumi.Kubernetes.Types.Inputs.Core.V1.Probe
    Readiness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    ReplicaCount int
    Resources Pulumi.Kubernetes.Types.Inputs.Core.V1.ResourceRequirements
    This type is defined in the Kubernetes package.
    SecurePort int
    The port that the webhook should listen on for requests. In GKE private clusters, by default kubernetes apiservers are allowed to talk to the cluster nodes only on 443 and 10250. so configuring securePort: 10250, will work out of the box without needing to add firewall rules or requiring NET_BIND_SERVICE capabilities to bind port numbers <1000
    SecurityContext Pulumi.Kubernetes.Types.Inputs.Core.V1.PodSecurityContext
    Pod Security Context to be set on the webhook component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    ServiceAccount Pulumi.KubernetesCertManager.Inputs.CertManagerServiceAccount
    ServiceAnnotations Dictionary<string, string>
    Optional additional annotations to add to the webhook service
    ServiceLabels Dictionary<string, string>
    Optional additional labels to add to the Webhook Service
    ServiceType string
    Specifies how the service should be handled. Useful if you want to expose the webhook to outside of the cluster. In some cases, the control plane cannot reach internal services.
    Strategy Pulumi.Kubernetes.Types.Inputs.Apps.V1.DeploymentStrategy
    This type is defined in the Kubernetes package.
    TimeoutSeconds int
    Tolerations List<Pulumi.Kubernetes.Types.Inputs.Core.V1.Toleration>
    Url Pulumi.KubernetesCertManager.Inputs.CertManagerWebhookURL
    Overrides the mutating webhook and validating webhook so they reach the webhook service using the url field instead of a service.
    ValidatingWebhookConfigurationAnnotations Dictionary<string, string>
    Optional additional annotations to add to the webhook ValidatingWebhookConfiguration
    Affinity Affinity
    This type is defined in the Kubernetes package.
    ContainerSecurityContext SecurityContext
    Container Security Context to be set on the webhook component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    DeploymentAnnotations map[string]string
    Optional additional annotations to add to the webhook Deployment
    ExtraArgs []string
    Optional additional arguments for webhook
    HostNetwork bool
    Specifies if the webhook should be started in hostNetwork mode. Required for use in some managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico), because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working Since the default port for the webhook conflicts with kubelet on the host network, webhook.securePort should be changed to an available port if running in hostNetwork mode.
    Image CertManagerImage
    LivenessProbe Probe
    Liveness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    LoadBalancerIP string
    MutatingWebhookConfigurationAnnotations map[string]string
    Optional additional annotations to add to the webhook MutatingWebhookConfiguration
    NodeSelector map[string]string
    PodAnnotations map[string]string
    Optional additional annotations to add to the webhook Pods
    PodLabels map[string]string
    Optional additional labels to add to the Webhook Pods
    ReadinessProbe Probe
    Readiness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    ReplicaCount int
    Resources ResourceRequirements
    This type is defined in the Kubernetes package.
    SecurePort int
    The port that the webhook should listen on for requests. In GKE private clusters, by default kubernetes apiservers are allowed to talk to the cluster nodes only on 443 and 10250. so configuring securePort: 10250, will work out of the box without needing to add firewall rules or requiring NET_BIND_SERVICE capabilities to bind port numbers <1000
    SecurityContext PodSecurityContext
    Pod Security Context to be set on the webhook component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    ServiceAccount CertManagerServiceAccount
    ServiceAnnotations map[string]string
    Optional additional annotations to add to the webhook service
    ServiceLabels map[string]string
    Optional additional labels to add to the Webhook Service
    ServiceType string
    Specifies how the service should be handled. Useful if you want to expose the webhook to outside of the cluster. In some cases, the control plane cannot reach internal services.
    Strategy DeploymentStrategy
    This type is defined in the Kubernetes package.
    TimeoutSeconds int
    Tolerations Toleration
    Url CertManagerWebhookURL
    Overrides the mutating webhook and validating webhook so they reach the webhook service using the url field instead of a service.
    ValidatingWebhookConfigurationAnnotations map[string]string
    Optional additional annotations to add to the webhook ValidatingWebhookConfiguration
    affinity object
    This type is defined in the Kubernetes package.
    container_security_context object
    Container Security Context to be set on the webhook component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deployment_annotations map(string)
    Optional additional annotations to add to the webhook Deployment
    extra_args list(string)
    Optional additional arguments for webhook
    host_network bool
    Specifies if the webhook should be started in hostNetwork mode. Required for use in some managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico), because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working Since the default port for the webhook conflicts with kubelet on the host network, webhook.securePort should be changed to an available port if running in hostNetwork mode.
    image object
    liveness_probe object
    Liveness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    load_balancer_ip string
    mutating_webhook_configuration_annotations map(string)
    Optional additional annotations to add to the webhook MutatingWebhookConfiguration
    node_selector map(string)
    pod_annotations map(string)
    Optional additional annotations to add to the webhook Pods
    pod_labels map(string)
    Optional additional labels to add to the Webhook Pods
    readiness_probe object
    Readiness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    replica_count number
    resources object
    This type is defined in the Kubernetes package.
    secure_port number
    The port that the webhook should listen on for requests. In GKE private clusters, by default kubernetes apiservers are allowed to talk to the cluster nodes only on 443 and 10250. so configuring securePort: 10250, will work out of the box without needing to add firewall rules or requiring NET_BIND_SERVICE capabilities to bind port numbers <1000
    security_context object
    Pod Security Context to be set on the webhook component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    service_account object
    service_annotations map(string)
    Optional additional annotations to add to the webhook service
    service_labels map(string)
    Optional additional labels to add to the Webhook Service
    service_type string
    Specifies how the service should be handled. Useful if you want to expose the webhook to outside of the cluster. In some cases, the control plane cannot reach internal services.
    strategy object
    This type is defined in the Kubernetes package.
    timeout_seconds number
    tolerations list(object)
    url object
    Overrides the mutating webhook and validating webhook so they reach the webhook service using the url field instead of a service.
    validating_webhook_configuration_annotations map(string)
    Optional additional annotations to add to the webhook ValidatingWebhookConfiguration
    affinity Affinity
    This type is defined in the Kubernetes package.
    containerSecurityContext SecurityContext
    Container Security Context to be set on the webhook component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations Map<String,String>
    Optional additional annotations to add to the webhook Deployment
    extraArgs List<String>
    Optional additional arguments for webhook
    hostNetwork Boolean
    Specifies if the webhook should be started in hostNetwork mode. Required for use in some managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico), because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working Since the default port for the webhook conflicts with kubelet on the host network, webhook.securePort should be changed to an available port if running in hostNetwork mode.
    image CertManagerImage
    livenessProbe Probe
    Liveness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    loadBalancerIP String
    mutatingWebhookConfigurationAnnotations Map<String,String>
    Optional additional annotations to add to the webhook MutatingWebhookConfiguration
    nodeSelector Map<String,String>
    podAnnotations Map<String,String>
    Optional additional annotations to add to the webhook Pods
    podLabels Map<String,String>
    Optional additional labels to add to the Webhook Pods
    readinessProbe Probe
    Readiness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    replicaCount Integer
    resources ResourceRequirements
    This type is defined in the Kubernetes package.
    securePort Integer
    The port that the webhook should listen on for requests. In GKE private clusters, by default kubernetes apiservers are allowed to talk to the cluster nodes only on 443 and 10250. so configuring securePort: 10250, will work out of the box without needing to add firewall rules or requiring NET_BIND_SERVICE capabilities to bind port numbers <1000
    securityContext PodSecurityContext
    Pod Security Context to be set on the webhook component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount CertManagerServiceAccount
    serviceAnnotations Map<String,String>
    Optional additional annotations to add to the webhook service
    serviceLabels Map<String,String>
    Optional additional labels to add to the Webhook Service
    serviceType String
    Specifies how the service should be handled. Useful if you want to expose the webhook to outside of the cluster. In some cases, the control plane cannot reach internal services.
    strategy DeploymentStrategy
    This type is defined in the Kubernetes package.
    timeoutSeconds Integer
    tolerations List<Toleration>
    url CertManagerWebhookURL
    Overrides the mutating webhook and validating webhook so they reach the webhook service using the url field instead of a service.
    validatingWebhookConfigurationAnnotations Map<String,String>
    Optional additional annotations to add to the webhook ValidatingWebhookConfiguration
    affinity pulumiKubernetestypesinputcorev1Affinity
    This type is defined in the Kubernetes package.
    containerSecurityContext pulumiKubernetestypesinputcorev1SecurityContext
    Container Security Context to be set on the webhook component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations {[key: string]: string}
    Optional additional annotations to add to the webhook Deployment
    extraArgs string[]
    Optional additional arguments for webhook
    hostNetwork boolean
    Specifies if the webhook should be started in hostNetwork mode. Required for use in some managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico), because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working Since the default port for the webhook conflicts with kubelet on the host network, webhook.securePort should be changed to an available port if running in hostNetwork mode.
    image CertManagerImage
    livenessProbe pulumiKubernetestypesinputcorev1Probe
    Liveness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    loadBalancerIP string
    mutatingWebhookConfigurationAnnotations {[key: string]: string}
    Optional additional annotations to add to the webhook MutatingWebhookConfiguration
    nodeSelector {[key: string]: string}
    podAnnotations {[key: string]: string}
    Optional additional annotations to add to the webhook Pods
    podLabels {[key: string]: string}
    Optional additional labels to add to the Webhook Pods
    readinessProbe pulumiKubernetestypesinputcorev1Probe
    Readiness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    replicaCount number
    resources pulumiKubernetestypesinputcorev1ResourceRequirements
    This type is defined in the Kubernetes package.
    securePort number
    The port that the webhook should listen on for requests. In GKE private clusters, by default kubernetes apiservers are allowed to talk to the cluster nodes only on 443 and 10250. so configuring securePort: 10250, will work out of the box without needing to add firewall rules or requiring NET_BIND_SERVICE capabilities to bind port numbers <1000
    securityContext pulumiKubernetestypesinputcorev1PodSecurityContext
    Pod Security Context to be set on the webhook component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount CertManagerServiceAccount
    serviceAnnotations {[key: string]: string}
    Optional additional annotations to add to the webhook service
    serviceLabels {[key: string]: string}
    Optional additional labels to add to the Webhook Service
    serviceType string
    Specifies how the service should be handled. Useful if you want to expose the webhook to outside of the cluster. In some cases, the control plane cannot reach internal services.
    strategy pulumiKubernetestypesinputappsv1DeploymentStrategy
    This type is defined in the Kubernetes package.
    timeoutSeconds number
    tolerations pulumiKubernetestypesinputcorev1Toleration[]
    url CertManagerWebhookURL
    Overrides the mutating webhook and validating webhook so they reach the webhook service using the url field instead of a service.
    validatingWebhookConfigurationAnnotations {[key: string]: string}
    Optional additional annotations to add to the webhook ValidatingWebhookConfiguration
    affinity pulumi_kubernetes.core.v1.AffinityArgs
    This type is defined in the Kubernetes package.
    container_security_context pulumi_kubernetes.core.v1.SecurityContextArgs
    Container Security Context to be set on the webhook component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deployment_annotations Mapping[str, str]
    Optional additional annotations to add to the webhook Deployment
    extra_args Sequence[str]
    Optional additional arguments for webhook
    host_network bool
    Specifies if the webhook should be started in hostNetwork mode. Required for use in some managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico), because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working Since the default port for the webhook conflicts with kubelet on the host network, webhook.securePort should be changed to an available port if running in hostNetwork mode.
    image CertManagerImage
    liveness_probe pulumi_kubernetes.core.v1.ProbeArgs
    Liveness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    load_balancer_ip str
    mutating_webhook_configuration_annotations Mapping[str, str]
    Optional additional annotations to add to the webhook MutatingWebhookConfiguration
    node_selector Mapping[str, str]
    pod_annotations Mapping[str, str]
    Optional additional annotations to add to the webhook Pods
    pod_labels Mapping[str, str]
    Optional additional labels to add to the Webhook Pods
    readiness_probe pulumi_kubernetes.core.v1.ProbeArgs
    Readiness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    replica_count int
    resources pulumi_kubernetes.core.v1.ResourceRequirementsArgs
    This type is defined in the Kubernetes package.
    secure_port int
    The port that the webhook should listen on for requests. In GKE private clusters, by default kubernetes apiservers are allowed to talk to the cluster nodes only on 443 and 10250. so configuring securePort: 10250, will work out of the box without needing to add firewall rules or requiring NET_BIND_SERVICE capabilities to bind port numbers <1000
    security_context pulumi_kubernetes.core.v1.PodSecurityContextArgs
    Pod Security Context to be set on the webhook component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    service_account CertManagerServiceAccount
    service_annotations Mapping[str, str]
    Optional additional annotations to add to the webhook service
    service_labels Mapping[str, str]
    Optional additional labels to add to the Webhook Service
    service_type str
    Specifies how the service should be handled. Useful if you want to expose the webhook to outside of the cluster. In some cases, the control plane cannot reach internal services.
    strategy pulumi_kubernetes.apps.v1.DeploymentStrategyArgs
    This type is defined in the Kubernetes package.
    timeout_seconds int
    tolerations Sequence[pulumi_kubernetes.core.v1.TolerationArgs]
    url CertManagerWebhookURL
    Overrides the mutating webhook and validating webhook so they reach the webhook service using the url field instead of a service.
    validating_webhook_configuration_annotations Mapping[str, str]
    Optional additional annotations to add to the webhook ValidatingWebhookConfiguration
    affinity Property Map
    This type is defined in the Kubernetes package.
    containerSecurityContext Property Map
    Container Security Context to be set on the webhook component container. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    deploymentAnnotations Map<String>
    Optional additional annotations to add to the webhook Deployment
    extraArgs List<String>
    Optional additional arguments for webhook
    hostNetwork Boolean
    Specifies if the webhook should be started in hostNetwork mode. Required for use in some managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico), because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working Since the default port for the webhook conflicts with kubelet on the host network, webhook.securePort should be changed to an available port if running in hostNetwork mode.
    image Property Map
    livenessProbe Property Map
    Liveness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    loadBalancerIP String
    mutatingWebhookConfigurationAnnotations Map<String>
    Optional additional annotations to add to the webhook MutatingWebhookConfiguration
    nodeSelector Map<String>
    podAnnotations Map<String>
    Optional additional annotations to add to the webhook Pods
    podLabels Map<String>
    Optional additional labels to add to the Webhook Pods
    readinessProbe Property Map
    Readiness probe values. Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes This type is defined in the Kubernetes package.
    replicaCount Number
    resources Property Map
    This type is defined in the Kubernetes package.
    securePort Number
    The port that the webhook should listen on for requests. In GKE private clusters, by default kubernetes apiservers are allowed to talk to the cluster nodes only on 443 and 10250. so configuring securePort: 10250, will work out of the box without needing to add firewall rules or requiring NET_BIND_SERVICE capabilities to bind port numbers <1000
    securityContext Property Map
    Pod Security Context to be set on the webhook component Pod. ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ This type is defined in the Kubernetes package.
    serviceAccount Property Map
    serviceAnnotations Map<String>
    Optional additional annotations to add to the webhook service
    serviceLabels Map<String>
    Optional additional labels to add to the Webhook Service
    serviceType String
    Specifies how the service should be handled. Useful if you want to expose the webhook to outside of the cluster. In some cases, the control plane cannot reach internal services.
    strategy Property Map
    This type is defined in the Kubernetes package.
    timeoutSeconds Number
    tolerations List<Property Map>
    url Property Map
    Overrides the mutating webhook and validating webhook so they reach the webhook service using the url field instead of a service.
    validatingWebhookConfigurationAnnotations Map<String>
    Optional additional annotations to add to the webhook ValidatingWebhookConfiguration

    CertManagerWebhookURL, CertManagerWebhookURLArgs

    Host string
    Host string
    host string
    host String
    host string
    host str
    host String

    Release, ReleaseArgs

    A Release is an instance of a chart running in a Kubernetes cluster. A Chart is a Helm package. It contains all of the resource definitions necessary to run an application, tool, or service inside of a Kubernetes cluster. Note - Helm Release is currently in BETA and may change. Use in production environment is discouraged.
    Atomic bool
    If set, installation process purges chart on fail. skipAwait will be disabled automatically if atomic is used.
    Chart string
    Chart name to be installed. A path may be used.
    CleanupOnFail bool
    Allow deletion of new resources created in this upgrade when upgrade fails.
    CreateNamespace bool
    Create the namespace if it does not exist.
    DependencyUpdate bool
    Run helm dependency update before installing the chart.
    Description string
    Add a custom description
    Devel bool
    Use chart development versions, too. Equivalent to version '>0.0.0-0'. If version is set, this is ignored.
    DisableCRDHooks bool
    Prevent CRD hooks from, running, but run other hooks. See helm install --no-crd-hook
    DisableOpenapiValidation bool
    If set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
    DisableWebhooks bool
    Prevent hooks from running.
    ForceUpdate bool
    Force resource update through delete/recreate if needed.
    Keyring string
    Location of public keys used for verification. Used only if verify is true
    Lint bool
    Run helm lint when planning.
    Manifest Dictionary<string, object>
    The rendered manifests as JSON. Not yet supported.
    MaxHistory int
    Limit the maximum number of revisions saved per release. Use 0 for no limit.
    Name string
    Release name.
    Namespace string
    Namespace to install the release into.
    Postrender string
    Postrender command to run.
    RecreatePods bool
    Perform pods restart during upgrade/rollback.
    RenderSubchartNotes bool
    If set, render subchart notes along with the parent.
    Replace bool
    Re-use the given name, even if that name is already used. This is unsafe in production
    RepositoryOpts Pulumi.KubernetesCertManager.Inputs.RepositoryOpts
    Specification defining the Helm chart repository to use.
    ResetValues bool
    When upgrading, reset the values to the ones built into the chart.
    ResourceNames Dictionary<string, ImmutableArray<string>>
    Names of resources created by the release grouped by "kind/version".
    ReuseValues bool
    When upgrading, reuse the last release's values and merge in any overrides. If 'resetValues' is specified, this is ignored
    SkipAwait bool
    By default, the provider waits until all resources are in a ready state before marking the release as successful. Setting this to true will skip such await logic.
    SkipCrds bool
    If set, no CRDs will be installed. By default, CRDs are installed if not already present.
    Timeout int
    Time in seconds to wait for any individual kubernetes operation.
    ValueYamlFiles List<AssetOrArchive>
    List of assets (raw yaml files). Content is read and merged with values. Not yet supported.
    Values Dictionary<string, object>
    Custom values set for the release.
    Verify bool
    Verify the package before installing it.
    Version string
    Specify the exact chart version to install. If this is not specified, the latest version is installed.
    WaitForJobs bool
    Will wait until all Jobs have been completed before marking the release as successful. This is ignored if skipAwait is enabled.
    Atomic bool
    If set, installation process purges chart on fail. skipAwait will be disabled automatically if atomic is used.
    Chart string
    Chart name to be installed. A path may be used.
    CleanupOnFail bool
    Allow deletion of new resources created in this upgrade when upgrade fails.
    CreateNamespace bool
    Create the namespace if it does not exist.
    DependencyUpdate bool
    Run helm dependency update before installing the chart.
    Description string
    Add a custom description
    Devel bool
    Use chart development versions, too. Equivalent to version '>0.0.0-0'. If version is set, this is ignored.
    DisableCRDHooks bool
    Prevent CRD hooks from, running, but run other hooks. See helm install --no-crd-hook
    DisableOpenapiValidation bool
    If set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
    DisableWebhooks bool
    Prevent hooks from running.
    ForceUpdate bool
    Force resource update through delete/recreate if needed.
    Keyring string
    Location of public keys used for verification. Used only if verify is true
    Lint bool
    Run helm lint when planning.
    Manifest map[string]interface{}
    The rendered manifests as JSON. Not yet supported.
    MaxHistory int
    Limit the maximum number of revisions saved per release. Use 0 for no limit.
    Name string
    Release name.
    Namespace string
    Namespace to install the release into.
    Postrender string
    Postrender command to run.
    RecreatePods bool
    Perform pods restart during upgrade/rollback.
    RenderSubchartNotes bool
    If set, render subchart notes along with the parent.
    Replace bool
    Re-use the given name, even if that name is already used. This is unsafe in production
    RepositoryOpts RepositoryOpts
    Specification defining the Helm chart repository to use.
    ResetValues bool
    When upgrading, reset the values to the ones built into the chart.
    ResourceNames map[string][]string
    Names of resources created by the release grouped by "kind/version".
    ReuseValues bool
    When upgrading, reuse the last release's values and merge in any overrides. If 'resetValues' is specified, this is ignored
    SkipAwait bool
    By default, the provider waits until all resources are in a ready state before marking the release as successful. Setting this to true will skip such await logic.
    SkipCrds bool
    If set, no CRDs will be installed. By default, CRDs are installed if not already present.
    Timeout int
    Time in seconds to wait for any individual kubernetes operation.
    ValueYamlFiles AssetOrArchive
    List of assets (raw yaml files). Content is read and merged with values. Not yet supported.
    Values map[string]interface{}
    Custom values set for the release.
    Verify bool
    Verify the package before installing it.
    Version string
    Specify the exact chart version to install. If this is not specified, the latest version is installed.
    WaitForJobs bool
    Will wait until all Jobs have been completed before marking the release as successful. This is ignored if skipAwait is enabled.
    atomic bool
    If set, installation process purges chart on fail. skipAwait will be disabled automatically if atomic is used.
    chart string
    Chart name to be installed. A path may be used.
    cleanup_on_fail bool
    Allow deletion of new resources created in this upgrade when upgrade fails.
    create_namespace bool
    Create the namespace if it does not exist.
    dependency_update bool
    Run helm dependency update before installing the chart.
    description string
    Add a custom description
    devel bool
    Use chart development versions, too. Equivalent to version '>0.0.0-0'. If version is set, this is ignored.
    disable_crd_hooks bool
    Prevent CRD hooks from, running, but run other hooks. See helm install --no-crd-hook
    disable_openapi_validation bool
    If set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
    disable_webhooks bool
    Prevent hooks from running.
    force_update bool
    Force resource update through delete/recreate if needed.
    keyring string
    Location of public keys used for verification. Used only if verify is true
    lint bool
    Run helm lint when planning.
    manifest map(any)
    The rendered manifests as JSON. Not yet supported.
    max_history number
    Limit the maximum number of revisions saved per release. Use 0 for no limit.
    name string
    Release name.
    namespace string
    Namespace to install the release into.
    postrender string
    Postrender command to run.
    recreate_pods bool
    Perform pods restart during upgrade/rollback.
    render_subchart_notes bool
    If set, render subchart notes along with the parent.
    replace bool
    Re-use the given name, even if that name is already used. This is unsafe in production
    repository_opts object
    Specification defining the Helm chart repository to use.
    reset_values bool
    When upgrading, reset the values to the ones built into the chart.
    resource_names map(list(string))
    Names of resources created by the release grouped by "kind/version".
    reuse_values bool
    When upgrading, reuse the last release's values and merge in any overrides. If 'resetValues' is specified, this is ignored
    skip_await bool
    By default, the provider waits until all resources are in a ready state before marking the release as successful. Setting this to true will skip such await logic.
    skip_crds bool
    If set, no CRDs will be installed. By default, CRDs are installed if not already present.
    timeout number
    Time in seconds to wait for any individual kubernetes operation.
    value_yaml_files list(asset)
    List of assets (raw yaml files). Content is read and merged with values. Not yet supported.
    values map(any)
    Custom values set for the release.
    verify bool
    Verify the package before installing it.
    version string
    Specify the exact chart version to install. If this is not specified, the latest version is installed.
    wait_for_jobs bool
    Will wait until all Jobs have been completed before marking the release as successful. This is ignored if skipAwait is enabled.
    atomic Boolean
    If set, installation process purges chart on fail. skipAwait will be disabled automatically if atomic is used.
    chart String
    Chart name to be installed. A path may be used.
    cleanupOnFail Boolean
    Allow deletion of new resources created in this upgrade when upgrade fails.
    createNamespace Boolean
    Create the namespace if it does not exist.
    dependencyUpdate Boolean
    Run helm dependency update before installing the chart.
    description String
    Add a custom description
    devel Boolean
    Use chart development versions, too. Equivalent to version '>0.0.0-0'. If version is set, this is ignored.
    disableCRDHooks Boolean
    Prevent CRD hooks from, running, but run other hooks. See helm install --no-crd-hook
    disableOpenapiValidation Boolean
    If set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
    disableWebhooks Boolean
    Prevent hooks from running.
    forceUpdate Boolean
    Force resource update through delete/recreate if needed.
    keyring String
    Location of public keys used for verification. Used only if verify is true
    lint Boolean
    Run helm lint when planning.
    manifest Map<String,Object>
    The rendered manifests as JSON. Not yet supported.
    maxHistory Integer
    Limit the maximum number of revisions saved per release. Use 0 for no limit.
    name String
    Release name.
    namespace String
    Namespace to install the release into.
    postrender String
    Postrender command to run.
    recreatePods Boolean
    Perform pods restart during upgrade/rollback.
    renderSubchartNotes Boolean
    If set, render subchart notes along with the parent.
    replace Boolean
    Re-use the given name, even if that name is already used. This is unsafe in production
    repositoryOpts RepositoryOpts
    Specification defining the Helm chart repository to use.
    resetValues Boolean
    When upgrading, reset the values to the ones built into the chart.
    resourceNames Map<String,List<String>>
    Names of resources created by the release grouped by "kind/version".
    reuseValues Boolean
    When upgrading, reuse the last release's values and merge in any overrides. If 'resetValues' is specified, this is ignored
    skipAwait Boolean
    By default, the provider waits until all resources are in a ready state before marking the release as successful. Setting this to true will skip such await logic.
    skipCrds Boolean
    If set, no CRDs will be installed. By default, CRDs are installed if not already present.
    timeout Integer
    Time in seconds to wait for any individual kubernetes operation.
    valueYamlFiles List<AssetOrArchive>
    List of assets (raw yaml files). Content is read and merged with values. Not yet supported.
    values Map<String,Object>
    Custom values set for the release.
    verify Boolean
    Verify the package before installing it.
    version String
    Specify the exact chart version to install. If this is not specified, the latest version is installed.
    waitForJobs Boolean
    Will wait until all Jobs have been completed before marking the release as successful. This is ignored if skipAwait is enabled.
    atomic boolean
    If set, installation process purges chart on fail. skipAwait will be disabled automatically if atomic is used.
    chart string
    Chart name to be installed. A path may be used.
    cleanupOnFail boolean
    Allow deletion of new resources created in this upgrade when upgrade fails.
    createNamespace boolean
    Create the namespace if it does not exist.
    dependencyUpdate boolean
    Run helm dependency update before installing the chart.
    description string
    Add a custom description
    devel boolean
    Use chart development versions, too. Equivalent to version '>0.0.0-0'. If version is set, this is ignored.
    disableCRDHooks boolean
    Prevent CRD hooks from, running, but run other hooks. See helm install --no-crd-hook
    disableOpenapiValidation boolean
    If set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
    disableWebhooks boolean
    Prevent hooks from running.
    forceUpdate boolean
    Force resource update through delete/recreate if needed.
    keyring string
    Location of public keys used for verification. Used only if verify is true
    lint boolean
    Run helm lint when planning.
    manifest {[key: string]: any}
    The rendered manifests as JSON. Not yet supported.
    maxHistory number
    Limit the maximum number of revisions saved per release. Use 0 for no limit.
    name string
    Release name.
    namespace string
    Namespace to install the release into.
    postrender string
    Postrender command to run.
    recreatePods boolean
    Perform pods restart during upgrade/rollback.
    renderSubchartNotes boolean
    If set, render subchart notes along with the parent.
    replace boolean
    Re-use the given name, even if that name is already used. This is unsafe in production
    repositoryOpts RepositoryOpts
    Specification defining the Helm chart repository to use.
    resetValues boolean
    When upgrading, reset the values to the ones built into the chart.
    resourceNames {[key: string]: string[]}
    Names of resources created by the release grouped by "kind/version".
    reuseValues boolean
    When upgrading, reuse the last release's values and merge in any overrides. If 'resetValues' is specified, this is ignored
    skipAwait boolean
    By default, the provider waits until all resources are in a ready state before marking the release as successful. Setting this to true will skip such await logic.
    skipCrds boolean
    If set, no CRDs will be installed. By default, CRDs are installed if not already present.
    timeout number
    Time in seconds to wait for any individual kubernetes operation.
    valueYamlFiles (pulumiassetAsset | pulumiassetArchive)[]
    List of assets (raw yaml files). Content is read and merged with values. Not yet supported.
    values {[key: string]: any}
    Custom values set for the release.
    verify boolean
    Verify the package before installing it.
    version string
    Specify the exact chart version to install. If this is not specified, the latest version is installed.
    waitForJobs boolean
    Will wait until all Jobs have been completed before marking the release as successful. This is ignored if skipAwait is enabled.
    atomic bool
    If set, installation process purges chart on fail. skipAwait will be disabled automatically if atomic is used.
    chart str
    Chart name to be installed. A path may be used.
    cleanup_on_fail bool
    Allow deletion of new resources created in this upgrade when upgrade fails.
    create_namespace bool
    Create the namespace if it does not exist.
    dependency_update bool
    Run helm dependency update before installing the chart.
    description str
    Add a custom description
    devel bool
    Use chart development versions, too. Equivalent to version '>0.0.0-0'. If version is set, this is ignored.
    disable_crd_hooks bool
    Prevent CRD hooks from, running, but run other hooks. See helm install --no-crd-hook
    disable_openapi_validation bool
    If set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
    disable_webhooks bool
    Prevent hooks from running.
    force_update bool
    Force resource update through delete/recreate if needed.
    keyring str
    Location of public keys used for verification. Used only if verify is true
    lint bool
    Run helm lint when planning.
    manifest Mapping[str, Any]
    The rendered manifests as JSON. Not yet supported.
    max_history int
    Limit the maximum number of revisions saved per release. Use 0 for no limit.
    name str
    Release name.
    namespace str
    Namespace to install the release into.
    postrender str
    Postrender command to run.
    recreate_pods bool
    Perform pods restart during upgrade/rollback.
    render_subchart_notes bool
    If set, render subchart notes along with the parent.
    replace bool
    Re-use the given name, even if that name is already used. This is unsafe in production
    repository_opts RepositoryOpts
    Specification defining the Helm chart repository to use.
    reset_values bool
    When upgrading, reset the values to the ones built into the chart.
    resource_names Mapping[str, Sequence[str]]
    Names of resources created by the release grouped by "kind/version".
    reuse_values bool
    When upgrading, reuse the last release's values and merge in any overrides. If 'resetValues' is specified, this is ignored
    skip_await bool
    By default, the provider waits until all resources are in a ready state before marking the release as successful. Setting this to true will skip such await logic.
    skip_crds bool
    If set, no CRDs will be installed. By default, CRDs are installed if not already present.
    timeout int
    Time in seconds to wait for any individual kubernetes operation.
    value_yaml_files Sequence[Union[pulumi.Asset, pulumi.Archive]]
    List of assets (raw yaml files). Content is read and merged with values. Not yet supported.
    values Mapping[str, Any]
    Custom values set for the release.
    verify bool
    Verify the package before installing it.
    version str
    Specify the exact chart version to install. If this is not specified, the latest version is installed.
    wait_for_jobs bool
    Will wait until all Jobs have been completed before marking the release as successful. This is ignored if skipAwait is enabled.
    atomic Boolean
    If set, installation process purges chart on fail. skipAwait will be disabled automatically if atomic is used.
    chart String
    Chart name to be installed. A path may be used.
    cleanupOnFail Boolean
    Allow deletion of new resources created in this upgrade when upgrade fails.
    createNamespace Boolean
    Create the namespace if it does not exist.
    dependencyUpdate Boolean
    Run helm dependency update before installing the chart.
    description String
    Add a custom description
    devel Boolean
    Use chart development versions, too. Equivalent to version '>0.0.0-0'. If version is set, this is ignored.
    disableCRDHooks Boolean
    Prevent CRD hooks from, running, but run other hooks. See helm install --no-crd-hook
    disableOpenapiValidation Boolean
    If set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema
    disableWebhooks Boolean
    Prevent hooks from running.
    forceUpdate Boolean
    Force resource update through delete/recreate if needed.
    keyring String
    Location of public keys used for verification. Used only if verify is true
    lint Boolean
    Run helm lint when planning.
    manifest Map<Any>
    The rendered manifests as JSON. Not yet supported.
    maxHistory Number
    Limit the maximum number of revisions saved per release. Use 0 for no limit.
    name String
    Release name.
    namespace String
    Namespace to install the release into.
    postrender String
    Postrender command to run.
    recreatePods Boolean
    Perform pods restart during upgrade/rollback.
    renderSubchartNotes Boolean
    If set, render subchart notes along with the parent.
    replace Boolean
    Re-use the given name, even if that name is already used. This is unsafe in production
    repositoryOpts Property Map
    Specification defining the Helm chart repository to use.
    resetValues Boolean
    When upgrading, reset the values to the ones built into the chart.
    resourceNames Map<List<String>>
    Names of resources created by the release grouped by "kind/version".
    reuseValues Boolean
    When upgrading, reuse the last release's values and merge in any overrides. If 'resetValues' is specified, this is ignored
    skipAwait Boolean
    By default, the provider waits until all resources are in a ready state before marking the release as successful. Setting this to true will skip such await logic.
    skipCrds Boolean
    If set, no CRDs will be installed. By default, CRDs are installed if not already present.
    timeout Number
    Time in seconds to wait for any individual kubernetes operation.
    valueYamlFiles List<Asset>
    List of assets (raw yaml files). Content is read and merged with values. Not yet supported.
    values Map<Any>
    Custom values set for the release.
    verify Boolean
    Verify the package before installing it.
    version String
    Specify the exact chart version to install. If this is not specified, the latest version is installed.
    waitForJobs Boolean
    Will wait until all Jobs have been completed before marking the release as successful. This is ignored if skipAwait is enabled.

    ReleaseStatus, ReleaseStatusArgs

    AppVersion string
    The version number of the application being deployed.
    Chart string
    The name of the chart.
    Name string
    Name is the name of the release.
    Namespace string
    Namespace is the kubernetes namespace of the release.
    Revision int
    Version is an int32 which represents the version of the release.
    Status string
    Status of the release.
    Version string
    A SemVer 2 conformant version string of the chart.
    AppVersion string
    The version number of the application being deployed.
    Chart string
    The name of the chart.
    Name string
    Name is the name of the release.
    Namespace string
    Namespace is the kubernetes namespace of the release.
    Revision int
    Version is an int32 which represents the version of the release.
    Status string
    Status of the release.
    Version string
    A SemVer 2 conformant version string of the chart.
    app_version string
    The version number of the application being deployed.
    chart string
    The name of the chart.
    name string
    Name is the name of the release.
    namespace string
    Namespace is the kubernetes namespace of the release.
    revision number
    Version is an int32 which represents the version of the release.
    status string
    Status of the release.
    version string
    A SemVer 2 conformant version string of the chart.
    appVersion String
    The version number of the application being deployed.
    chart String
    The name of the chart.
    name String
    Name is the name of the release.
    namespace String
    Namespace is the kubernetes namespace of the release.
    revision Integer
    Version is an int32 which represents the version of the release.
    status String
    Status of the release.
    version String
    A SemVer 2 conformant version string of the chart.
    appVersion string
    The version number of the application being deployed.
    chart string
    The name of the chart.
    name string
    Name is the name of the release.
    namespace string
    Namespace is the kubernetes namespace of the release.
    revision number
    Version is an int32 which represents the version of the release.
    status string
    Status of the release.
    version string
    A SemVer 2 conformant version string of the chart.
    app_version str
    The version number of the application being deployed.
    chart str
    The name of the chart.
    name str
    Name is the name of the release.
    namespace str
    Namespace is the kubernetes namespace of the release.
    revision int
    Version is an int32 which represents the version of the release.
    status str
    Status of the release.
    version str
    A SemVer 2 conformant version string of the chart.
    appVersion String
    The version number of the application being deployed.
    chart String
    The name of the chart.
    name String
    Name is the name of the release.
    namespace String
    Namespace is the kubernetes namespace of the release.
    revision Number
    Version is an int32 which represents the version of the release.
    status String
    Status of the release.
    version String
    A SemVer 2 conformant version string of the chart.

    RepositoryOpts, RepositoryOptsArgs

    Specification defining the Helm chart repository to use.
    CaFile string
    The Repository's CA File
    CertFile string
    The repository's cert file
    KeyFile string
    The repository's cert key file
    Password string
    Password for HTTP basic authentication
    Repo string
    Repository where to locate the requested chart. If is a URL the chart is installed without installing the repository.
    Username string
    Username for HTTP basic authentication
    CaFile string
    The Repository's CA File
    CertFile string
    The repository's cert file
    KeyFile string
    The repository's cert key file
    Password string
    Password for HTTP basic authentication
    Repo string
    Repository where to locate the requested chart. If is a URL the chart is installed without installing the repository.
    Username string
    Username for HTTP basic authentication
    ca_file string
    The Repository's CA File
    cert_file string
    The repository's cert file
    key_file string
    The repository's cert key file
    password string
    Password for HTTP basic authentication
    repo string
    Repository where to locate the requested chart. If is a URL the chart is installed without installing the repository.
    username string
    Username for HTTP basic authentication
    caFile String
    The Repository's CA File
    certFile String
    The repository's cert file
    keyFile String
    The repository's cert key file
    password String
    Password for HTTP basic authentication
    repo String
    Repository where to locate the requested chart. If is a URL the chart is installed without installing the repository.
    username String
    Username for HTTP basic authentication
    caFile string
    The Repository's CA File
    certFile string
    The repository's cert file
    keyFile string
    The repository's cert key file
    password string
    Password for HTTP basic authentication
    repo string
    Repository where to locate the requested chart. If is a URL the chart is installed without installing the repository.
    username string
    Username for HTTP basic authentication
    ca_file str
    The Repository's CA File
    cert_file str
    The repository's cert file
    key_file str
    The repository's cert key file
    password str
    Password for HTTP basic authentication
    repo str
    Repository where to locate the requested chart. If is a URL the chart is installed without installing the repository.
    username str
    Username for HTTP basic authentication
    caFile String
    The Repository's CA File
    certFile String
    The repository's cert file
    keyFile String
    The repository's cert key file
    password String
    Password for HTTP basic authentication
    repo String
    Repository where to locate the requested chart. If is a URL the chart is installed without installing the repository.
    username String
    Username for HTTP basic authentication

    Package Details

    Repository
    Jetstack Cert Manager (Helm) pulumi/pulumi-kubernetes-cert-manager
    License
    Apache-2.0
    kubernetes-cert-manager logo
    Viewing docs for Kubernetes Cert Manager v0.2.0
    published on Friday, Mar 14, 2025 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial