<p>I want to create a certificate for Kubernetes application using dns challenge i.e. <strong>blabla.westeurope.cloudapp.azure.com</strong>.
According to below link, I have to create my custom dns zone within azure and have to use it for the same:</p>

<p><a href="https://cert-manager.io/docs/configuration/acme/dns01/azuredns/" rel="nofollow noreferrer">https://cert-manager.io/docs/configuration/acme/dns01/azuredns/</a></p>

<pre><code>kind: Issuer
metadata:
  name: example-issuer
spec:
  acme:
    ...
    solvers:
    - dns01:
        azuredns:
          clientID: AZURE_CERT_MANAGER_SP_APP_ID
          clientSecretSecretRef:
          # The following is the secret we created in Kubernetes. Issuer will use this to present challenge to Azure DNS.
            name: azuredns-config
            key: client-secret
          subscriptionID: AZURE_SUBSCRIPTION_ID
          tenantID: AZURE_TENANT_ID
          resourceGroupName: AZURE_DNS_ZONE_RESOURCE_GROUP
          hostedZoneName: AZURE_DNS_ZONE
          # Azure Cloud Environment, default to AzurePublicCloud
          environment: AzurePublicCloud 
</code></pre>

<p>Can anyone assist me here, how to use Azure Provided DNS for issuing certificate?</p>

Nitin Kalra
<p>If you've configured everything according to the article the next step would be to create a certificate:</p>

<pre><code>apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: domain.AZURE_DNS_ZONE
spec:
  acme:
    config:
      - domains:
          - "domain.AZURE_DNS_ZONE"
        dns01:
          provider: azure
  commonName: "domain.AZURE_DNS_ZONE"
  dnsNames:
    - "domain.AZURE_DNS_ZONE"
  issuerRef:
    kind: Issuer
    name: example-issuer
  secretName: secretname
</code></pre>

<p>also, you cant issue a certificate for <code>westeurope.cloudapp.azure.com</code> using a DNS challenge, so you can only issue a certificate for you AZURE_DNS_ZONE</p>
