cookbook 'certificate', '~> 3.0.0'
certificate
(33) Versions
3.0.0
-
Follow6
Installs and configures certificates, private keys, CA root bundles from encrypted data bags.
cookbook 'certificate', '~> 3.0.0', :supermarket
knife supermarket install certificate
knife supermarket download certificate
Certificate Cookbook
Description
This cookbook automates the management of X.509 certificates, private keys, and CA root bundles. It provides a powerful and flexible certificate_manage resource to fetch data from Chef Data Bags (encrypted or unencrypted) or direct plaintext input.
Requirements
-
Chef Infra Client: >= 15.3 (Required for
unified_mode)
Resources
[certificate_manage](documentation/certificate_manage.md)
The primary resource for managing certificate files on disk.
certificate_manage 'my_site' do data_bag 'my_certs' data_bag_type 'encrypted' owner 'www-data' group 'www-data' end
See the [resource documentation](documentation/certificate_manage.md) for full details and examples!
Usage
This cookbook is designed to be used as a dependency in your own cookbooks. Add depends 'certificate' to your metadata.rb and use the certificate_manage resource.
Contributors
This project exists thanks to all the people who contribute.
Backers
Thank you to all our backers!
Sponsors
Support this project by becoming a sponsor. Your logo will show up here with a link to your website.
Dependent cookbooks
This cookbook has no specified dependencies.
Contingent cookbooks
There are no cookbooks that are contingent upon this one.
certificate Cookbook CHANGELOG
This file is used to list changes made in each version of the certificate cookbook.
3.0.0 (2026-04-13)
⚠ BREAKING CHANGES
- Removed recipe-based interface (default, manage_by_attributes, wildcard).
Features
- ci: migrate to reusable workflows v4.1.0 (#112) (ee8de29)
- full migration to custom resource pattern (#123) (3f2ba37)
- major version bump for custom resource migration (4fdf5d6)
Bug Fixes
Reverts
- 38 (000802f)
2.1.5 (2025-10-15)
Bug Fixes
Reverts
- 38 (000802f)
2.1.3 - 2024-11-18
Standardise files with files in sous-chefs/repo-management
2.1.2 - 2024-07-15
Standardise files with files in sous-chefs/repo-management
2.1.1 - 2024-05-23
Standardise files with files in sous-chefs/repo-management
2.1.0 - 2024-05-03
- Allow owner and group to be String or Integer
2.0.16 - 2023-04-19
- Various CI and Documentation cleanup
2.0.15 - 2023-04-07
- Standardise files with files in sous-chefs/repo-management
2.0.14 - 2023-04-01
- Update gaurav-nelson/github-action-markdown-link-check action to v1.0.15
2.0.13 - 2023-04-01
- Update actions/stale action to v8
2.0.12 - 2023-04-01
- Standardise files with files in sous-chefs/repo-management
2.0.11 - 2023-03-15
- Standardise files with files in sous-chefs/repo-management
2.0.10 - 2023-03-02
- Standardise files with files in sous-chefs/repo-management
2.0.9 - 2023-02-23
- Standardise files with files in sous-chefs/repo-management
2.0.8 - 2023-02-16
- Standardise files with files in sous-chefs/repo-management
2.0.7 - 2023-02-15
- Standardise files with files in sous-chefs/repo-management
2.0.6 - 2023-02-14
- Remove CircleCI
2.0.5 - 2022-12-13
- Standardise files with files in sous-chefs/repo-management
2.0.4 - 2022-02-03
- Standardise files with files in sous-chefs/repo-management
2.0.3 - 2022-02-02
- Fix
cert_pathusage when usingcreate_subfolders - Remove delivery and move to calling RSpec directly via a reusable workflow
- Update tested platforms
2.0.2 - 2021-08-30
- Standardise files with files in sous-chefs/repo-management
2.0.1 - 2021-07-09
- Standardise files with files in sous-chefs/repo-management
2.0.0 - 2021-07-06
- Sous Chefs Adoption
1.0.0 - 2015-04-03
- #45 @dmlb2000 added
data_bag_typeparameter and support for vault, or unencrypted modes. - Update documentation for helper methods.
0.8.2 - 2015-03-02
- #43 @hartfordfi## e added sensitive mode to hide certificates and keys in console output.
- #47 @fletchowns added documentation note concerning lazy attribute evaluation.
0.8.1 - 2015-02-05
- Fix bad pick on merge conflict from revert.
0.8.0 - 2015-02-04
- Revert #38: This previous change worked around a bug in Knife that limited use of characters in data bags. See CHEF-3531 for more information.
0.7.0 - 2015-01-23
- #33 expose final path of managed objects.
- #38 normalize dots to underscore in search_id
- #40 chefspec matcher deprecation
- Update travis config
v0.6.3
- #30 Hash rockets
- #34 Rescue version
v0.6.0
- Add thor-scmversion
- Add use_inline_resources, if defined
- Add ignore_missing parameter
v0.5.2
- Update documentation
- Update gitignore
- Rubocop whitespace corrections
v0.5.0
- ChefSpec create_certificate_manage matcher added.
- Added combined_file resource.
- Update build files.
- Added Rubocop.
- Added BATS tests.
v0.4.3
- Issue #16, fix handling of subdir creation
v0.4.2
- Issue #15, Revert FC017 change
v0.4.1
- FC017: LWRP does not notify when updated: ./providers/manage.rb:24
v0.4.0
- Add
nginx_certknob for chained certificates
v0.3.0
- Add test-kitchen coverage and documentation.
v0.2.3
- Fix typo in "manage" resource definitions
v0.2.2
- Add :create_subfolders attribute, to toggle off folder creation of private/certs directories.
v0.2.1
- Fixes issue #11, reported by @tmatilia
v0.2.0
Cleaning up the backlog of PRs
- @kechagia added data_bag_secret attribute
- @sawanoboly added smartos paths, and recipe
certificate::manage_by_attributes - allow specification of data bag secret
- new attribute added: data_bag_secret
- defaults to /etc/chef/encrypted_data_bag_secret
- openssl certs path for smartos
- add recipe manage_by_attributes
- Add :data_bag_keyfile attribute to the LWRP.
v0.1.0
Thanks Teemu, and Kris, for their outstanding work!
-
Teemu Matilainen
- Add whyrun mode support.
- Extract directory and file creation to generic methods.
- Corrected outstanding issues related to updated_by_last_action
-
Kris Kechagia
- Corrected the updated_by_last_action to avoid unneccessary notification.
0.0.6
- Fix incorrect has_key conditional
- Disable incorrect foodcritic warning about repetition
0.0.5
- Add foodcritic linting
- Anyone have ideas on testing LWRPs?
0.0.4
- Fix default action
0.0.3
- Minor typo fixes
0.0.2
- LWRP conversion of recipe
0.0.1
- Recipe prototype
Collaborator Number Metric
3.0.0 passed this metric
Contributing File Metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a CONTRIBUTING.md file
Cookstyle Metric
3.0.0 passed this metric
No Binaries Metric
3.0.0 passed this metric
Testing File Metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
3.0.0 passed this metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a CONTRIBUTING.md file
Cookstyle Metric
3.0.0 passed this metric
No Binaries Metric
3.0.0 passed this metric
Testing File Metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
3.0.0 passed this metric
3.0.0 passed this metric
Testing File Metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
3.0.0 failed this metric
3.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number