From 19662c5a2930ce7620df6416409ab6f26cf36516 Mon Sep 17 00:00:00 2001 From: Aman Raj Date: Wed, 17 Jun 2026 04:38:36 +0530 Subject: [PATCH 1/2] docs: document the cert-manager.io/secret-template ingress annotation The auto-generated annotations reference already cross-links cert-manager.io/secret-template to the Ingress usage page, but the "Supported Annotations" list on that page never documented it (#1715). Add a bullet describing the annotation: its value is a JSON representation of the Certificate spec.secretTemplate (annotations and labels maps), with an example. Closes #1715 Signed-off-by: Aman Raj --- content/docs/usage/ingress.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/content/docs/usage/ingress.md b/content/docs/usage/ingress.md index 93eb064a03b..b93d71db4e8 100644 --- a/content/docs/usage/ingress.md +++ b/content/docs/usage/ingress.md @@ -187,6 +187,12 @@ trigger `Certificate` resources to be automatically created: configure `spec.privateKey.rotationPolicy` field to set the rotation policy of the private key for a Certificate. Valid values are `Never` and `Always`. If unset a rotation policy `Always` will be used. +- `cert-manager.io/secret-template`: (optional) this annotation allows you to + set the `spec.secretTemplate` field of the generated Certificate. + The value is a JSON representation of `secretTemplate` and must not contain any unknown fields. + `secretTemplate` accepts `annotations` and `labels` maps, which are copied onto the `Secret` that stores the certificate. + For example: `cert-manager.io/secret-template: '{"labels": {"my-label": "value"}, "annotations": {"kubed.appscode.com/sync": "true"}}'`. + ## Copying annotations to the Certificate > ℹ️ This feature was added in cert-manager `v1.18.0`. From ba8038009d71b6f739aa26504aa471c03dfa9f9c Mon Sep 17 00:00:00 2001 From: Aman Raj Date: Wed, 17 Jun 2026 15:05:36 +0530 Subject: [PATCH 2/2] docs: use dictionary-safe example annotation (fix cspell) Signed-off-by: Aman Raj --- content/docs/usage/ingress.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/docs/usage/ingress.md b/content/docs/usage/ingress.md index b93d71db4e8..21387e01d71 100644 --- a/content/docs/usage/ingress.md +++ b/content/docs/usage/ingress.md @@ -191,7 +191,7 @@ trigger `Certificate` resources to be automatically created: set the `spec.secretTemplate` field of the generated Certificate. The value is a JSON representation of `secretTemplate` and must not contain any unknown fields. `secretTemplate` accepts `annotations` and `labels` maps, which are copied onto the `Secret` that stores the certificate. - For example: `cert-manager.io/secret-template: '{"labels": {"my-label": "value"}, "annotations": {"kubed.appscode.com/sync": "true"}}'`. + For example: `cert-manager.io/secret-template: '{"labels": {"team": "platform"}, "annotations": {"example.com/owner": "platform"}}'`. ## Copying annotations to the Certificate