<p>I am following <a href="https://cert-manager.io/docs/configuration/acme/dns01/azuredns/#managed-identity-using-aad-pod-identities" rel="nofollow noreferrer">that guide</a>. At the end of the section there is a sentence:</p>
<blockquote>
<p>To enable this authentication mechanism for Issuers, you will need to set <code>--issuer-ambient-credentials</code> flag on cert-manager controller to true.</p>
</blockquote>
<p>I am looking all over the documentation, the internet and cannot find out how do I set any flag for the cert manager? There is a <a href="https://cert-manager.io/v0.16-docs/cli/controller/" rel="nofollow noreferrer">guide about cert-manager-controller</a> but it doesn't say a word if I should install the controller or how to access that. There is no such option in help command of <code>kubectl cert-manager</code>. I was trying to add flag in my Certificate in yaml file, but don't know where exactly it could be. I was also trying to edit cert-manager pod, but anywhere I put the following:</p>
<pre><code>extraArgs:
- --issuer-ambient-credentials=true
</code></pre>
<p>It cannot accept it:</p>
<blockquote>
<p>Invalid value: &quot;The edited file failed validation&quot;: ValidationError(Pod.metadata): unknown field &quot;extraArgs&quot; in io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta</p>
</blockquote>
<p>I deleted cert-manager and now trying to install it this way:</p>
<pre><code>kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.7.2/cert-manager.yaml --edit
</code></pre>
<p>But still have problem determining where to put the flag.</p>
<p>I am using cert-manager v1.7.2, if that does matter. Downloaded tar.gz from github.
kubectl v 1.22.0</p>
<p>I am afraid the resolution is very simple but I don't see it...</p>

Morales1235
<p>The only way was to reinstall cert-manager. This time I used yaml file from their github and for deployment of cert-manager I added:</p>
<pre><code>spec:
  template:
    spec:
      containers:
        args:
          - --issuer-ambient-credentials=true
</code></pre>
