Request to support AWS ACM Exportable certificates

[api-py]

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Capability to request and export a new TLS certificate using AWS ACM - see https://aws.amazon.com/blogs/aws/aws-certificate-manager-introduces-exportable-public-ssl-tls-certificates-to-use-anywhere/

Describe alternatives you've considered
None

Additional context

Environment details (remove if not applicable):

• Kubernetes version: n/a
• Cloud-provider/provisioner: AWS
• cert-manager version: next major version
• Install method: e.g., helm/static manifests

/kind feature

[rhyswilliamsza]

Looks like cert-manager won't be adding official support for ACM

#7812 (comment)

[api-py]

The community is still open for anyone to add the external issuer, however need to understand how to overcome the hurdle of e2e tests that do not incur costs

[inteon]

This is probably a good case for a external issuer. Also, asking the aws-privateca-issuer team might help (see https://github.com/cert-manager/aws-privateca-issuer).

[divyansh-gupta]

I attempted to pick up this task and ran into a blocker here: #8235. Posting here in case anyone has any thoughts on the linked issue. Thanks!

[divyansh-gupta]

Hi all (and @api-py),

I wanted to share that ACM has recently launched Automated Certificate Management for Kubernetes via the AWS Controllers for Kubernetes (ACK).

This integration allows you to issue and export TLS certificates from ACM directly to your Kubernetes workloads (as Kubernetes Secrets). This supports terminating TLS at the Ingress level or securing pods directly. The ACK controller also handles lifecycle management, automatically rotating the certificates in the Secret when they are renewed in ACM.

You can find the full setup guide and documentation here, as well as the GitHub project page here.

[cert-manager-bot]

Issues go stale after 6 months of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues remain open for an additional 3 months of inactivity and then close.
If this issue is safe to close now please do so with /close.
/lifecycle stale

[psmolkin]

/remove-lifecycle stale
over 50 👍