zeiss / acme-dns-azure Goto Github PK

I was using docker image ghcr.io/zeiss/acme-dns-azure:0.4.0 for workload_identity.
But it was throwing error:

strictyaml.exceptions.YAMLValidationError: while parsing a mapping
  in "<unicode string>", line 1, column 1:
    use_workload_identity_credentials ...
     ^ (line: 1)
unexpected key not in schema 'use_workload_identity_credentials'

After debugging, I found that, 0.4.0 container actually contains 0.3.1 acme-dns-azure library.

I have also tested with edge version, which is working properly.

If a TXT record entry, used for DNS challenge, was created upfront the respective certbot azure dns plugin should only modify the TXT record.

_acme-validation.test 120 IN TXT "-"

Actual behavior:

The wrapper library is not checking for an existing TXT record. Therefore the generated certbot azure dns plugin config is not taking that into account; the TXT record will be updated and deleted after DNS challenge.

Expected behavior:

If an TXT record already exists the wrapper library should take this into account during generation of the certbot dns azure plugin config file. Example configuration snippet for individual record permissions:

dns_azure_zone1 = test.foo.com:/subscriptions/c135abce-d87d-48df-936c-15596c6968a/resourceGroups/dns1/providers/Microsoft.Network/dnszones/foo.com/TXT/_acme-validation.test