Support for subdomains

[cschneemann]

What happened?

Hi,
we want to use this webhook to create certificates for our service running in a subdomain. But in the webhook I always see this error logged:

│ {"level":"error","ts":1764776202.297415,"caller":"resolver/resolver.go:160","msg":"Error fetching zone","error":"zone not found","zoneDnsName":"example.de","stacktrace":"github.com/stackitcloud/stack │

Domains are changed to example.de and test.example.de.

From one of our challenges:

│   Dns Name:           id.test.example.de                                                                                                                                                           
│   Issuer Ref:                                                                                                                                                                                            
│     Kind:  Issuer                                                                                                                                                                                        
│     Name:  letsencrypt-prod-dns-stackit                                                                                                                                                                                                                                                                                                               
│   Solver:                                                                                                                                                                                                
│     dns01:                                                                                                                                                                                               
│       Webhook:                                                                                                                                                                                           
│         Config:                                                                                                                                                                                          
│           Auth Token Secret Ref:  stackit-sa-authentication                                                                                                                                              
│           Project Id:             aaaa-bbbb-cccc-dddd-eeeeeeee                                                                                                                                   
│         Group Name:               acme.stackit.de                                                                                                                                                        
│         Solver Name:              stackit                                                                                                                                                                
│     Selector:                                                                                                                                                                                            
│       Dns Zones:                                                                                                                                                                                         
│         argocd-test.opndsk.de   

And the Issuer:

 spec:
   acme:
     privateKeySecretRef:
       name: letsencrypt-prod-dns-key-stackit
     server: https://acme-v02.api.letsencrypt.org/directory
     solvers:
     - dns01:
         webhook:
           config:
             authTokenSecretRef: stackit-sa-authentication
             projectId: aaaaaaaa-bbbb-cccc-deeeeeeee
           groupName: acme.stackit.de
           solverName: stackit
       selector:
         dnsZones:
          - test.example.de

Do I miss some parameters to set?

We manage the subdomain test.example.de in our stackit-project, the example.de domain is managed in aws and delegated to stackit NS like described in the Portal.

How can we reproduce this?

Create an issuer for a subdomain like above and try to request a certificate

Search

• I did search for other open and closed issues before opening this.

Code of Conduct

• I agree to follow this project's Code of Conduct

Additional context

No response