Traefik Discovery

Import certificates from a Traefik `acme.json` document (Path B).

Changed on

Upload the raw contents of Traefik's acme.json and a list of hosts to import. Each host is independently validated (8-step chain from ADR-041 §5) and a per-host verdict is returned. dry_run: true runs all validation without writing anything, so the operator can preview before committing.

The request body is capped at 1 MiB. Do not add a decompression layer to this route — the 1 MiB cap's security properties depend on the absence of decompression here (ADR-041 §4).

post/traefik-discovery/tls/import

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/traefik-discovery/tls/import
  • Auth: HTTP bearer

Request body

acknowledge_manual_dns_renewalboolean

Required when renewal_method is "dns-01" and no auto-manage zone covers the host.

acme_jsonstring required

Raw contents of the Traefik acme.json file (uploaded by the CLI or pasted in the console). Never a server-side file path. Redacted in Debug output — the field holds private key material.

dry_runboolean

true → full parse and validation, no writes. The identical per-host verdicts are returned, giving the operator a preview before committing.

hostsstring[] required

Hosts to import. Only hosts that appear in the document's certificates (by X.509 SAN, not JSON domain.main) are accepted.

renewal_methodstring required

"http-01" or "dns-01". Stored as verification_method so the renewal scheduler knows how to renew.

Response

Import results (per-host verdicts)

dry_runboolean required
failedinteger required
succeededinteger required
total_requestedinteger required

Changes

  • 4b228ebed583Revision changes
    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

  • 1dc3e6788214Revision changes
    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status