Oracle Cloud Infrastructure DNS Authenticator plugin for Certbot

Plugin automates the process of dns-01 challenge by managing TXT records in the Oracle Cloud Infrastructure DNS service.

Installation

pip3 install certbot-dns-oci

Arguments

Name	Description	Default
--authenticator dns-oci	Select the plugin	Required
--dns-oci-credentials	OCI credentials config file location	~/.oci/config
--dns-oci-profile	Profile name in OCI credentials config file	DEFAULT
--dns-oci-propagation-seconds	DNS record propagation timeout	60

Credentials

--dns-oci-credentials has special value instance_principal that switches certbot to use the instance principal for OCI authentication (please, read the documentation about the feature.) Corresponding dynamic group must be able to read dns-zones in compartment and manage dns-records.

In other cases, plugin requires the OCI credentials configuration file, which is ~/.oci/config by default. The profile can be specified by --dns-oci-profile (usually DEFAULT).

Example

certbot certonly --email [email protected] \
                 --authenticator dns-oci -d www.example.com --dry-run

Requirements

oci
certbot