Sign in
Traefik Discovery

Request Temps to issue an ACME certificate for a discovered route (Path A).

Changed on

The operator explicitly authorizes issuance; cert_eligible stays false so the container's own labels can never trigger this. Both SettingsWrite and DomainsCreate are required: SettingsWrite is Admin/PlatformAdmin only, so any caller reaching this endpoint is already an administrator.

The authorization is recorded against the container identity currently serving the host (§2a). Container drift after authorization fires a Critical alarm but does not auto-clear cert_authorized — auto-clearing would not remove the certificate and would be a DoS primitive (ADR-041 §2a).

post/traefik-discovery/routes/{host}/certificate

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/traefik-discovery/routes/{host}/certificate
  • Auth: HTTP bearer

Path parameters

hoststring required

Hostname of the discovered route

Request body

acknowledge_manual_dns_renewalboolean

Must be true when challenge_type is "dns-01" and no verified auto_manage zone covers this host. Lets the operator confirm they know renewal will require manual DNS updates.

challenge_typestring required

"http-01" or "dns-01". Required — no silent default.

Response

TLS authorization created and ACME challenge initiated

Changes

  • 4b228ebed583Revision changes
    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

  • 1dc3e6788214Revision changes
    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status