feat(chart): Add cluster issuer disableAccountKeyGeneration option

Signed-off-by: Thomas Coudert <thomas.coudert@ovhcloud.com>

Author: thcdrt

charts/cert-manager-webhook-ovh/templates/issuer.yaml

@@ -31,6 +31,9 @@ spec:
         name: {{ .externalAccountBinding.keySecretRef.name | quote }}
         key: {{ .externalAccountBinding.keySecretRef.key | quote }}
     {{- end}}
+    {{- if .disableAccountKeyGeneration }}
+    disableAccountKeyGeneration: {{.disableAccountKeyGeneration }}
+    {{- end}}
     privateKeySecretRef:
       name: {{ printf "%s-account-key" .name | quote }}
     solvers:

charts/cert-manager-webhook-ovh/values.yaml

@@ -173,6 +173,9 @@ issuers:
     # email to use when registering your account with Let's encrypt.
     email: acme@example.net
 
+    # If the disableAccountKeyGeneration field is set, cert-manager will not create a new ACME account and use the existing key specified in privateKeySecretRef
+    # disableAccountKeyGeneration: true
+
     # If the ACME server supports profiles, you can specify the profile name here.
     # For more details, see https://cert-manager.io/docs/configuration/acme/#acme-certificate-profiles
     # Run the command `curl -fsSL https://acme-v02.api.letsencrypt.org/directory` and inpsect the object `profiles`.