Adding a Let's Encrypt® certificate

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder specified in the CLI profile is used by default. You can specify a different folder through the --folder-name or --folder-id parameter.

1. View a description of the command:

   yc certificate-manager certificate request --help
   

2. Run this command:

   yc certificate-manager certificate request \
     --name mymanagedcert \
     --domains example.com
   

   Where:

   • --name: Certificate name
   • --domains: Certificate domains

   Result:

   id: fpq6gvvm6piu********
   folder_id: b1g7gvsi89m3********
   created_at: "2020-09-15T08:49:11.533771Z"
   ...
   - example.com
   status: VALIDATING
   updated_at: "2020-09-15T08:49:11.533771Z"
   

If you don't have Terraform, install it and configure the Yandex Cloud provider.

1. In the Terraform configuration file, define the parameters of the resource you want to create:

   resource "yandex_cm_certificate" "le-certificate" {
     name    = "<certificate_name>"
     domains = ["<domain>"]
   
     managed {
     challenge_type = "<check_type>"
     }
   }
   

   Where:

   • domains: List of domains you need to create a certificate for.
   • challenge_type: Type of domain rights check the domain owner should pass. The possible values are:
     • DNS_CNAME: Create a DNS record in CNAME format with the specified value. This method is recommended for automatic certificate renewal.
     • DNS_TXT: Create a DNS record in TXT format with the specified value.
     • HTTP: Place the specified value in the specified URL.

   For more information about the yandex_cm_certificate resource properties, see the Terraform provider documentation.

2. Create the resources:

   1. In the terminal, change to the folder where you edited the configuration file.

   2. Make sure the configuration file is correct using the command:

      terraform validate
      

      If the configuration is correct, the following message is returned:

      Success! The configuration is valid.
      

   3. Run the command:

      terraform plan
      

      The terminal will display a list of resources with parameters. No changes are made at this step. If the configuration contains errors, Terraform will point them out.

   4. Apply the configuration changes:

      terraform apply
      

   5. Confirm the changes: type yes in the terminal and press Enter.

A certificate will then be created in the specified folder. You can check the new certificate and its settings using the management console or this CLI command:

yc certificate-manager certificate get <certificate_name>

To add a certificate, use the requestNew REST API method for the Certificate resource or the CertificateService/RequestNew gRPC API call.