hi in order to use infisical with lets encrypt as the external CA and cert manager in k8s do i have to use the infisical-issuer addon for cert manager or i can simply define an acme issuer in cert-manager that uses infisical as the CA? Thank you

Hey @Agapios Barmpounis! You should use the ACME issuer in cert-manager that used Infisical as the CA as described here: https://infisical.com/docs/documentation/platform/pki/k8s-cert-manager

Hi thanks for the info. If i select to skip the DNS ownership validation in infisical then i assume that the any resolver defined in the acme issuer of cert-manager will not be used. Can i remove the solvers section in the resource yaml and using something like the bellow? Thx

apiVersion: <http://cert-manager.io/v1|cert-manager.io/v1>
kind: Issuer
metadata:
    name: issuer-infisical
    namespace: <namespace_you_want_to_issue_certificates_in>
spec:
    acme:
        # ACME server URL from your Infisical certificate profile (Step 1)
        server: <acme_server_url>
        # Email address for ACME account
        # (any valid email works; currently ignored by Infisical)
        email: <your_email>
        externalAccountBinding:
            # EAB Key ID from Step 1
            keyID: <acme_eab_kid>
            # Reference to the Kubernetes Secret containing the EAB
            # HMAC key (created in Step 3)
            keySecretRef:
                name: infisical-acme-eab-secret
                key: eabSecret
        privateKeySecretRef:
            name: issuer-infisical-account-key

@Agapios Barmpounis Yes that's correct you should be able to do without that section.

Thank you