Hi,

I'd like to share a community-built cert-manager DNS01 webhook solver for F5 Distributed Cloud (F5 XC): https://github.com/Wenkow/cert-manager-webhook-f5xc

Use Case: Automated Certificate Lifecycle Management via ACME + DNS01 on F5 XC

Organisations using F5 Distributed Cloud as their DNS provider currently have no native cert-manager integration for ACME DNS01 challenges — unlike Cloudflare (https://cert-manager.io/docs/configuration/acme/dns01/cloudflare/) or Akamai (https://cert-manager.io/docs/configuration/acme/dns01/akamai/), which already have official support.

This webhook fills that gap. It implements the standard cert-manager external DNS01 solver interface and automates the full TXT record lifecycle (_acme-challenge) against the F5 XC DNS API — creation before validation and cleanup after.

Key features:

• Helm-based deployment (OCI chart on GHCR)

• Token-based authentication via Kubernetes Secret

• Configurable tenant, RRSet group name, TTL, and server endpoint

• Supports both ClusterIssuer and Issuer

• Wildcard certificate support (e.g. *.example.com)

• CI pipeline + Artifact Hub listing

Quick start:

kubectl create secret generic f5xc-api-token \
  --namespace cert-manager \
  --from-literal=token=YOUR_F5XC_API_TOKEN

helm install cert-manager-webhook-f5xc \
  oci://ghcr.io/wenkow/charts/cert-manager-webhook-f5xc \
  --version 0.2.0 \
  --namespace cert-manager

The project is still early-stage and community feedback / contributions are very welcome. If you're running F5 XC for DNS and need automated TLS issuance in Kubernetes, give it a try!

Repo: https://github.com/Wenkow/cert-manager-webhook-f5xc
Artifact Hub: https://artifacthub.io/packages/search?repo=cert-manager-webhook-f5xc