Adding a Let's Encrypt® certificate

If you do not have the Yandex Cloud CLI installed yet, install and initialize it.

By default, the CLI uses the folder specified when creating the profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also set a different folder for any specific command using the --folder-name or --folder-id parameter.

1. View a description of the command:

   yc certificate-manager certificate request --help
   

2. Run this command:

   yc certificate-manager certificate request \
     --name mymanagedcert \
     --domains example.com
   

   Where:

   • --name: Certificate name
   • --domains: Certificate domains

   Result:

   id: fpq6gvvm6piu********
   folder_id: b1g7gvsi89m3********
   created_at: "2020-09-15T08:49:11.533771Z"
   ...
   - example.com
   status: VALIDATING
   updated_at: "2020-09-15T08:49:11.533771Z"
   

If you do not have Terraform yet, install it and configure its Yandex Cloud provider.

1. In the Terraform configuration file, define the parameters of the resource you want to create:

   resource "yandex_cm_certificate" "le-certificate" {
     name    = "<certificate_name>"
     domains = ["<domain>"]
   
     managed {
     challenge_type = "<check_type>"
     }
   }
   

   Where:

   • domains: List of domains you need to create a certificate for.
   • challenge_type: Type of domain rights check the domain owner should pass. The possible values are:
     • DNS_CNAME: Create a DNS record in CNAME format with the specified value. This method is recommended for automatic certificate renewal.
     • DNS_TXT: Create a DNS record in TXT format with the specified value.
     • HTTP: Place the specified value in the specified URL.

   For more information about the yandex_cm_certificate resource properties, see the Terraform provider documentation.

2. Create the resources:

   1. In the terminal, go to the directory where you edited the configuration file.

   2. Make sure the configuration file is correct using this command:

      terraform validate
      

      If the configuration is correct, you will get this message:

      Success! The configuration is valid.
      

   3. Run this command:

      terraform plan
      

      You will see a detailed list of resources. No changes will be made at this step. Terraform will show any errors found in your configuration.

   4. Apply the changes:

      terraform apply
      

   5. Type yes and press Enter to confirm the changes.

A certificate will then be created in the specified folder. You can check the new certificate and its settings using the management console or this CLI command:

yc certificate-manager certificate get <certificate_name>

To add a certificate, use the requestNew REST API method for the Certificate resource or the CertificateService/RequestNew gRPC API call.