Certificate Provider

certificate_provider

This is a simple module that supports uploading, updating or deleting certificates in the Ionos Cloud Certificate Manager.

Example Syntax

name: Create Certificate Provider
ionoscloudsdk.ionoscloud.certificate_provider:
  provider_name: 'Let's Encrypt'
  provider_email: '[email protected]'
  provider_server: 'https://acme-staging-v02.api.letsencrypt.org/directory'
  key_id: 'some-key-id'
  key_secret: 'secret'
  allow_replace: true
register: certificate_provider


name: Update Certificate Provider
ionoscloudsdk.ionoscloud.certificate_provider:
  provider: ''
  provider_name: 'Let's Encrypt UPDATED'
  allow_replace: false
  state: update
register: certificateproviderupdate


name: Delete Certificate Provider
ionoscloudsdk.ionoscloud.certificate_provider:
  provider: ''
  state: absent

Returned object

{
    "changed": true,
    "failed": false,
    "action": "create",
    "certificate_provider": {
        "id": "f9debe0b-8c4e-4bae-ab9a-5b634d7d054e",
        "type": "provider",
        "href": "/providers/f9debe0b-8c4e-4bae-ab9a-5b634d7d054e",
        "metadata": {
            "created_date": "2025-09-26T14:55:11.643007+00:00",
            "created_by": "<USER_EMAIL>",
            "created_by_user_id": "<USER_ID>",
            "last_modified_date": "2023-05-29T13:48:11Z",
            "last_modified_by": "<USER_EMAIL>",
            "last_modified_by_user_id": "<USER_ID>",
            "resource_urn": "<URN>",
            "state": "AVAILABLE",
            "message": "Ready"
        },
        "properties": {
            "name": "Let's Encrypt",
            "email": "<EMAIL>",
            "server": "<SERVR>",
            "external_account_binding": {
                "key_id": "some-key-id",
                "key_secret": null
            }
        }
    }
}

For more examples please check out the tests here.

NOTE: If you are using a versions 7.0.0 and up: modules can replace resources if certain set parameters differ from the results found in the API!

Parameters that can trigger a resource replacement:

• provider_email

• provider_server

• key_id

• key_secret (Will trigger replace just by being set as this parameter cannot be retrieved from the api to check for changes!)

state: present

  
name: Create Certificate Provider
ionoscloudsdk.ionoscloud.certificate_provider:
  provider_name: 'Let's Encrypt'
  provider_email: '[email protected]'
  provider_server: 'https://acme-staging-v02.api.letsencrypt.org/directory'
  key_id: 'some-key-id'
  key_secret: 'secret'
  allow_replace: true
register: certificate_provider

Available parameters for state present:

Name	Required	Description
provider_name str	True	The name of the certificate provider.
provider_email str	True	The email address of the certificate requester.
provider_server str	True	The URL of the certificate provider.
key_id str	False	The key ID of the external account binding.
key_secret str	False	The secret of the external account binding.
allow_replace bool	False	Boolean indicating if the resource should be recreated when the state cannot be reached in another way. This may be used to prevent resources from being deleted from specifying a different value to an immutable property. An error will be thrown instead Default: False
api_url str	False	The Ionos API base URL.
certificate_fingerprint str	False	The Ionos API certificate fingerprint.
username str	False	The Ionos username. Overrides the IONOS_USERNAME environment variable.
password str	False	The Ionos password. Overrides the IONOS_PASSWORD environment variable.
token str	False	The Ionos token. Overrides the IONOS_TOKEN environment variable.
wait bool	False	Wait for the resource to be created before returning. Default: True Options: [True, False]
wait_timeout int	False	How long before wait gives up, in seconds. Default: 600
state str	False	Indicate desired state of the resource. Default: present Options: ['present', 'absent', 'update']

state: absent

  
name: Delete Certificate Provider
ionoscloudsdk.ionoscloud.certificate_provider:
  provider: ''
  state: absent

Available parameters for state absent:

Name	Required	Description
provider str	False	The provider name or ID.
provider_name str	False	The name of the certificate provider.
provider_email str	False	The email address of the certificate requester.
provider_server str	False	The URL of the certificate provider.
key_id str	False	The key ID of the external account binding.
key_secret str	False	The secret of the external account binding.
api_url str	False	The Ionos API base URL.
certificate_fingerprint str	False	The Ionos API certificate fingerprint.
username str	False	The Ionos username. Overrides the IONOS_USERNAME environment variable.
password str	False	The Ionos password. Overrides the IONOS_PASSWORD environment variable.
token str	False	The Ionos token. Overrides the IONOS_TOKEN environment variable.
wait bool	False	Wait for the resource to be created before returning. Default: True Options: [True, False]
wait_timeout int	False	How long before wait gives up, in seconds. Default: 600
state str	False	Indicate desired state of the resource. Default: present Options: ['present', 'absent', 'update']

state: update

  
name: Update Certificate Provider
ionoscloudsdk.ionoscloud.certificate_provider:
  provider: ''
  provider_name: 'Let's Encrypt UPDATED'
  allow_replace: false
  state: update
register: certificateproviderupdate

Available parameters for state update:

Name	Required	Description
provider str	True	The provider name or ID.
provider_name str	False	The name of the certificate provider.
provider_email str	False	The email address of the certificate requester.
provider_server str	False	The URL of the certificate provider.
key_id str	False	The key ID of the external account binding.
key_secret str	False	The secret of the external account binding.
allow_replace bool	False	Boolean indicating if the resource should be recreated when the state cannot be reached in another way. This may be used to prevent resources from being deleted from specifying a different value to an immutable property. An error will be thrown instead Default: False
api_url str	False	The Ionos API base URL.
certificate_fingerprint str	False	The Ionos API certificate fingerprint.
username str	False	The Ionos username. Overrides the IONOS_USERNAME environment variable.
password str	False	The Ionos password. Overrides the IONOS_PASSWORD environment variable.
token str	False	The Ionos token. Overrides the IONOS_TOKEN environment variable.
wait bool	False	Wait for the resource to be created before returning. Default: True Options: [True, False]
wait_timeout int	False	How long before wait gives up, in seconds. Default: 600
state str	False	Indicate desired state of the resource. Default: present Options: ['present', 'absent', 'update']