feat: support for Akamai EdgeDNS (#1708)

Co-authored-by: Sander Rodenhuis <[email protected]>

Author: merll

values-schema.yaml

@@ -136,6 +136,34 @@ definitions:
       targetMemoryUtilizationPercentage:
         type: integer
         default: 80
+  akamai:
+    definitions:
+      dns:
+        properties:
+          host:
+            title: Akamai API host
+            description: Akamai Edgegrid API server
+            $ref: '#/definitions/wordCharacterPattern'
+          accessToken:
+            title: Akamai access token
+            description: Akamai Edgegrid API access token
+            $ref: '#/definitions/wordCharacterPattern'
+            x-secret: ''
+          clientToken:
+            title: Akamai client token
+            description: Akamai Edgegrid API client token
+            $ref: '#/definitions/wordCharacterPattern'
+            x-secret: ''
+          clientSecret:
+            title: Akamai client secret
+            description: Akamai Edgegrid API client secret
+            $ref: '#/definitions/wordCharacterPattern'
+            x-secret: ''
+        required:
+          - host
+          - accessToken
+          - clientToken
+          - clientSecret
   aws:
     definitions:
       accessKey:
@@ -2503,6 +2531,13 @@ properties:
       provider:
         description: The DNS provider managing the domains.
         oneOf:
+          - title: Akamai EdgeDNS
+            additionalProperties: false
+            properties:
+              akamai:
+                $ref: '#/definitions/akamai/definitions/dns'
+            required:
+              - akamai
           - title: AWS
             description: Uses credentials when either a pair of id+key or a secret name is provided. Assumes node role otherwise.
             additionalProperties: false

values/cert-manager/cert-manager-raw.gotmpl

@@ -13,6 +13,10 @@ resources:
     data:
       {{- if hasKey $p "google" }}
       secret: "{{ $p.google.serviceAccountKey | b64enc }}"
+      {{- else if hasKey $p "akamai" }}
+      access_token: {{ $p.akamai.accessToken | b64enc | quote }}
+      client_token: {{ $p.akamai.clientToken | b64enc | quote }}
+      client_secret: {{ $p.akamai.clientSecret | b64enc | quote }}
       {{- else if hasKey $p "azure-private-dns" }}
       secret: "{{ $p | get "azure-private-dns.aadClientSecret" | b64enc }}"
       {{- else if hasKey $p "azure" }}
@@ -48,6 +52,19 @@ resources:
         solvers:
           - selector: {}
             dns01:
+              {{- with $p | get "akamai" nil }}
+              akamai:
+                serviceConsumerDomain: {{ .host }}
+                accessTokenSecretRef:
+                  name: external-dns
+                  key: access_token
+                clientTokenSecretRef:
+                  name: external-dns
+                  key: client_token
+                clientSecretSecretRef:
+                  name: external-dns
+                  key: client_secret
+              {{- end }}
               {{- with $p | get "aws" nil }}
               route53:
                 {{- with . | get "credentials.accessKey" nil }}