cert-manager: 1.20.3 -> 1.21.0
Change-Id: I50161b8cfd621c1b07de87358fe8c14d1b14f711
diff --git a/charts/cert-manager/templates/crd-acme.cert-manager.io_orders.yaml b/charts/cert-manager/templates/crd-acme.cert-manager.io_orders.yaml
index 59596e7..d64e5d6 100644
--- a/charts/cert-manager/templates/crd-acme.cert-manager.io_orders.yaml
+++ b/charts/cert-manager/templates/crd-acme.cert-manager.io_orders.yaml
@@ -79,7 +79,7 @@
duration:
description: |-
Duration is the duration for the not after date for the requested certificate.
- this is set on order creation as pe the ACME spec.
+ This is set on order creation as per the ACME spec.
type: string
ipAddresses:
description: |-
@@ -119,6 +119,15 @@
Profile allows requesting a certificate profile from the ACME server.
Supported profiles are listed by the server's ACME directory URL.
type: string
+ replaces:
+ description: |-
+ Replaces is the ARI CertID (RFC 9773 §4.1) of the certificate that this
+ Order is intended to replace. When set, cert-manager will include the
+ "replaces" field on the newOrder request to the ACME server if and only
+ if the server advertises ARI support in its directory. The CertID has
+ the form "base64url(AKI).base64url(serial)" and is derived locally from
+ the currently issued leaf certificate.
+ type: string
request:
description: |-
Certificate signing request bytes in DER encoding.