Certificate Deployment Providers

Relevant source files

• internal/certacme/certifiers/sp_byteplus_dns.go
• internal/certacme/certifiers/sp_googlecloud_dns.go
• internal/certmgmt/deployers/sp_aliyun_casdeploy.go
• internal/certmgmt/deployers/sp_baotapanel.go
• internal/certmgmt/deployers/sp_baotapanelgo.go
• internal/certmgmt/deployers/sp_baotawaf.go
• internal/certmgmt/deployers/sp_byteplus_alb.go
• internal/certmgmt/deployers/sp_byteplus_cdn.go
• internal/certmgmt/deployers/sp_byteplus_certcenter.go
• internal/certmgmt/deployers/sp_byteplus_medialive.go
• internal/certmgmt/deployers/sp_cloudflare_ssl.go
• internal/certmgmt/deployers/sp_cmcccloud_vlb.go
• internal/certmgmt/deployers/sp_digitalocean_certificate.go
• internal/certmgmt/deployers/sp_googlecloud_certificatemanager.go
• internal/certmgmt/deployers/sp_huaweicloud_aad.go
• internal/certmgmt/deployers/sp_huaweicloud_vod.go
• internal/certmgmt/deployers/sp_jdcloud_ssl.go
• internal/certmgmt/deployers/sp_jdcloud_waf.go
• internal/certmgmt/deployers/sp_kubernetes_secret.go
• internal/certmgmt/deployers/sp_linode_los.go
• internal/certmgmt/deployers/sp_mohua_mvh.go
• internal/certmgmt/deployers/sp_oraclecloud_certificatesmgmt.go
• internal/certmgmt/deployers/sp_ratpanel.go
• internal/certmgmt/deployers/sp_samwaf_console.go
• internal/certmgmt/deployers/sp_tencentcloud_eo.go
• internal/certmgmt/deployers/sp_tencentcloud_eomakers.go
• internal/certmgmt/deployers/sp_tencentcloud_ssldeploy.go
• internal/certmgmt/deployers/sp_tencentcloud_sslupdate.go
• internal/certmgmt/deployers/sp_tencentcloud_tse.go
• internal/certmgmt/deployers/sp_tencentcloud_waf.go
• internal/certmgmt/deployers/sp_wangsu_cdn.go
• pkg/core/certifier/challengers/dns01/aws-lightsail/internal/lego.go
• pkg/core/certifier/challengers/dns01/byteplus/byteplus.go
• pkg/core/certifier/challengers/dns01/byteplus/internal/lego.go
• pkg/core/certmgr.go
• pkg/core/certmgr/providers/1panel/1panel.go
• pkg/core/certmgr/providers/aliyun-cas/aliyun_cas.go
• pkg/core/certmgr/providers/aws-acm/aws_acm.go
• pkg/core/certmgr/providers/aws-iam/aws_iam.go
• pkg/core/certmgr/providers/azure-keyvault/azure_keyvault.go
• pkg/core/certmgr/providers/baiducloud-cert/baiducloud_cert.go
• pkg/core/certmgr/providers/byteplus-cdn/byteplus_cdn.go
• pkg/core/certmgr/providers/byteplus-cdn/byteplus_cdn_test.go
• pkg/core/certmgr/providers/byteplus-certcenter/byteplus_certcenter.go
• pkg/core/certmgr/providers/byteplus-certcenter/byteplus_certcenter_test.go
• pkg/core/certmgr/providers/byteplus-medialive/byteplus_medialive.go
• pkg/core/certmgr/providers/byteplus-medialive/byteplus_medialive_test.go
• pkg/core/certmgr/providers/cmcccloud-vlb/cmcccloud_vlb.go
• pkg/core/certmgr/providers/cmcccloud-vlb/cmcccloud_vlb_test.go
• pkg/core/certmgr/providers/ctcccloud-cms/ctcccloud_cms.go
• pkg/core/certmgr/providers/digitalocean-certificate/digitalocean_certificate.go
• pkg/core/certmgr/providers/digitalocean-certificate/digitalocean_certificate_test.go
• pkg/core/certmgr/providers/gcore-cdn/gcore_cdn.go
• pkg/core/certmgr/providers/googlecloud-certificatemanager/googlecloud_certificatemanager.go
• pkg/core/certmgr/providers/googlecloud-certificatemanager/googlecloud_certificatemanager_test.go
• pkg/core/certmgr/providers/huaweicloud-elb/huaweicloud_elb.go
• pkg/core/certmgr/providers/huaweicloud-scm/huaweicloud_scm.go
• pkg/core/certmgr/providers/jdcloud-ssl/jdcloud_ssl.go
• pkg/core/certmgr/providers/nginxproxymanager/nginxproxymanager.go
• pkg/core/certmgr/providers/oraclecloud-certificatesmgmt/consts.go
• pkg/core/certmgr/providers/oraclecloud-certificatesmgmt/oraclecloud_certificatesmgmt.go
• pkg/core/certmgr/providers/oraclecloud-certificatesmgmt/oraclecloud_certificatesmgmt_test.go
• pkg/core/certmgr/providers/qiniu-sslcert/qiniu_sslcert.go
• pkg/core/certmgr/providers/rainyun-sslcenter/rainyun_sslcenter.go
• pkg/core/certmgr/providers/tencentcloud-gaap/tencentcloud_gaap.go
• pkg/core/certmgr/providers/tencentcloud-ssl/tencentcloud_ssl.go
• pkg/core/certmgr/providers/tencentcloud-tse/consts.go
• pkg/core/certmgr/providers/tencentcloud-tse/tencentcloud_tse_test.go
• pkg/core/certmgr/providers/ucloud-ussl/ucloud_ussl.go
• pkg/core/certmgr/providers/upyun-ssl/upyun_ssl.go
• pkg/core/certmgr/providers/volcengine-cdn/volcengine_cdn.go
• pkg/core/certmgr/providers/volcengine-live/volcengine_live.go
• pkg/core/certmgr/providers/wangsu-certificate/wangsu_certificate.go
• pkg/core/certmgr/providers/zenlayer-cdn/zenlayer_cdn.go
• pkg/core/certmgr/providers/zenlayer-ga/zenlayer_ga.go
• pkg/core/deployer.go
• pkg/core/deployer/providers/1panel/1panel.go
• pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go
• pkg/core/deployer/providers/aliyun-apigw/aliyun_apigw.go
• pkg/core/deployer/providers/aliyun-cas-deploy/aliyun_cas_deploy.go
• pkg/core/deployer/providers/aliyun-cdn/aliyun_cdn.go
• pkg/core/deployer/providers/aliyun-clb/aliyun_clb.go
• pkg/core/deployer/providers/aliyun-dcdn/aliyun_dcdn.go
• pkg/core/deployer/providers/aliyun-ddospro/aliyun_ddospro.go
• pkg/core/deployer/providers/aliyun-esa-saas/aliyun_esasaas.go
• pkg/core/deployer/providers/aliyun-esa/aliyun_esa.go
• pkg/core/deployer/providers/aliyun-ga/aliyun_ga.go
• pkg/core/deployer/providers/aliyun-live/aliyun_live.go
• pkg/core/deployer/providers/aliyun-nlb/aliyun_nlb.go
• pkg/core/deployer/providers/aliyun-oss/aliyun_oss.go
• pkg/core/deployer/providers/aliyun-vod/aliyun_vod.go
• pkg/core/deployer/providers/aliyun-waf/aliyun_waf.go
• pkg/core/deployer/providers/apisix/apisix.go
• pkg/core/deployer/providers/aws-alb/aws_alb.go
• pkg/core/deployer/providers/aws-amplify/aws_amplify.go
• pkg/core/deployer/providers/aws-apigateway/aws_apigateway.go
• pkg/core/deployer/providers/aws-clb/aws_clb.go
• pkg/core/deployer/providers/aws-cloudfront/aws_cloudfront.go
• pkg/core/deployer/providers/aws-nlb/aws_nlb.go
• pkg/core/deployer/providers/baiducloud-appblb/baiducloud_appblb.go
• pkg/core/deployer/providers/baiducloud-blb/baiducloud_blb.go
• pkg/core/deployer/providers/baiducloud-cdn/baiducloud_cdn.go
• pkg/core/deployer/providers/baishan-cdn/baishan_cdn.go
• pkg/core/deployer/providers/baotapanel/baotapanel.go
• pkg/core/deployer/providers/baotapanelgo/baotapanelgo.go
• pkg/core/deployer/providers/baotawaf/baotawaf.go
• pkg/core/deployer/providers/byteplus-alb/byteplus_alb.go
• pkg/core/deployer/providers/byteplus-alb/byteplus_alb_test.go
• pkg/core/deployer/providers/byteplus-alb/consts.go
• pkg/core/deployer/providers/byteplus-apig/byteplus_apig.go
• pkg/core/deployer/providers/byteplus-cdn/byteplus_cdn.go
• pkg/core/deployer/providers/byteplus-certcenter/byteplus_certcenter.go
• pkg/core/deployer/providers/byteplus-medialive/byteplus_medialive.go
• pkg/core/deployer/providers/byteplus-medialive/byteplus_medialive_test.go
• pkg/core/deployer/providers/byteplus-medialive/consts.go
• pkg/core/deployer/providers/byteplus-tos/byteplus_tos.go
• pkg/core/deployer/providers/byteplus-tos/byteplus_tos_test.go
• pkg/core/deployer/providers/cloudflare-ssl/cloudflare_ssl.go
• pkg/core/deployer/providers/cloudflare-ssl/cloudflare_ssl_test.go
• pkg/core/deployer/providers/cmcccloud-cdn/cmcccloud_cdn.go
• pkg/core/deployer/providers/cmcccloud-vlb/cmcccloud_vlb.go
• pkg/core/deployer/providers/cmcccloud-vlb/cmcccloud_vlb_test.go
• pkg/core/deployer/providers/cmcccloud-vlb/consts.go
• pkg/core/deployer/providers/ctcccloud-ao/ctcccloud_ao.go
• pkg/core/deployer/providers/ctcccloud-cdn/ctcccloud_cdn.go
• pkg/core/deployer/providers/ctcccloud-elb/ctcccloud_elb.go
• pkg/core/deployer/providers/ctcccloud-icdn/ctcccloud_icdn.go
• pkg/core/deployer/providers/ctcccloud-lvdn/ctcccloud_lvdn.go
• pkg/core/deployer/providers/digitalocean-certificate/digitalocean_certificate.go
• pkg/core/deployer/providers/ftp/consts.go
• pkg/core/deployer/providers/ftp/ftp.go
• pkg/core/deployer/providers/gcore-cdn/gcore_cdn.go
• pkg/core/deployer/providers/googlecloud-certificatemanager/googlecloud_certificatemanager.go
• pkg/core/deployer/providers/huaweicloud-aad/huaweicloud_aad.go
• pkg/core/deployer/providers/huaweicloud-apig/huaweicloud_apig.go
• pkg/core/deployer/providers/huaweicloud-cdn/huaweicloud_cdn.go
• pkg/core/deployer/providers/huaweicloud-elb/huaweicloud_elb.go
• pkg/core/deployer/providers/huaweicloud-live/huaweicloud_live.go
• pkg/core/deployer/providers/huaweicloud-vod/consts.go
• pkg/core/deployer/providers/huaweicloud-vod/huaweicloud_vod.go
• pkg/core/deployer/providers/huaweicloud-vod/huaweicloud_vod_test.go
• pkg/core/deployer/providers/huaweicloud-waf/huaweicloud_waf.go
• pkg/core/deployer/providers/jdcloud-live/jdcloud_live.go
• pkg/core/deployer/providers/jdcloud-ssl/jdcloud_ssl.go
• pkg/core/deployer/providers/jdcloud-waf/jdcloud_waf.go
• pkg/core/deployer/providers/jdcloud-waf/jdcloud_waf_test.go
• pkg/core/deployer/providers/k8s-secret/k8s_secret.go
• pkg/core/deployer/providers/kong/kong.go
• pkg/core/deployer/providers/ksyun-cdn/ksyun_cdn.go
• pkg/core/deployer/providers/ksyun-slb/ksyun_slb.go
• pkg/core/deployer/providers/lecdn/lecdn.go
• pkg/core/deployer/providers/linode-los/linode_los.go
• pkg/core/deployer/providers/linode-los/linode_los_test.go
• pkg/core/deployer/providers/local/consts.go
• pkg/core/deployer/providers/local/local.go
• pkg/core/deployer/providers/mohua-mvh/mohua_mvh.go
• pkg/core/deployer/providers/nginxproxymanager/nginxproxymanager.go
• pkg/core/deployer/providers/oraclecloud-certificatesmgmt/oraclecloud_certificatesmgmt.go
• pkg/core/deployer/providers/qingcloud-lb/qingcloud_lb.go
• pkg/core/deployer/providers/qiniu-cdn/qiniu_cdn.go
• pkg/core/deployer/providers/rainyun-rcdn/rainyun_rcdn.go
• pkg/core/deployer/providers/ratpanel/ratpanel.go
• pkg/core/deployer/providers/s3/consts.go
• pkg/core/deployer/providers/s3/s3.go
• pkg/core/deployer/providers/safeline/safeline.go
• pkg/core/deployer/providers/samwaf-console/samwaf_console.go
• pkg/core/deployer/providers/samwaf-console/samwaf_console_test.go
• pkg/core/deployer/providers/samwaf/samwaf.go
• pkg/core/deployer/providers/ssh/consts.go
• pkg/core/deployer/providers/ssh/ssh.go
• pkg/core/deployer/providers/tencentcloud-cdn/tencentcloud_cdn.go
• pkg/core/deployer/providers/tencentcloud-clb/tencentcloud_clb.go
• pkg/core/deployer/providers/tencentcloud-cos/tencentcloud_cos.go
• pkg/core/deployer/providers/tencentcloud-css/tencentcloud_css.go
• pkg/core/deployer/providers/tencentcloud-ecdn/tencentcloud_ecdn.go
• pkg/core/deployer/providers/tencentcloud-eo/tencentcloud_eo.go
• pkg/core/deployer/providers/tencentcloud-ga2/tencentcloud_ga2.go
• pkg/core/deployer/providers/tencentcloud-scf/tencentcloud_scf.go
• pkg/core/deployer/providers/tencentcloud-ssl-deploy/tencentcloud_ssl_deploy.go
• pkg/core/deployer/providers/tencentcloud-ssl-update/tencentcloud_ssl_update.go
• pkg/core/deployer/providers/tencentcloud-tse/consts.go
• pkg/core/deployer/providers/tencentcloud-tse/tencentcloud_tse.go
• pkg/core/deployer/providers/tencentcloud-vod/tencentcloud_vod.go
• pkg/core/deployer/providers/tencentcloud-waf/tencentcloud_waf.go
• pkg/core/deployer/providers/tencentcloud-waf/tencentcloud_waf_test.go
• pkg/core/deployer/providers/ucloud-ualb/ucloud_ualb.go
• pkg/core/deployer/providers/ucloud-uclb/ucloud_uclb.go
• pkg/core/deployer/providers/unicloud-webhost/unicloud_webhost.go
• pkg/core/deployer/providers/upyun-cdn/upyun_cdn.go
• pkg/core/deployer/providers/upyun-file/upyun_file.go
• pkg/core/deployer/providers/volcengine-apig/volcengine_apig.go
• pkg/core/deployer/providers/volcengine-cdn/volcengine_cdn.go
• pkg/core/deployer/providers/volcengine-dcdn/volcengine_dcdn.go
• pkg/core/deployer/providers/volcengine-live/volcengine_live.go
• pkg/core/deployer/providers/volcengine-tos/volcengine_tos.go
• pkg/core/deployer/providers/volcengine-vod/consts.go
• pkg/core/deployer/providers/volcengine-vod/volcengine_vod.go
• pkg/core/deployer/providers/wangsu-cdn/wangsu_cdn.go
• pkg/core/deployer/providers/wangsu-certificate/wangsu_certificate.go
• pkg/core/deployer/providers/zenlayer-cdn/zenlayer_cdn.go
• pkg/core/notifier.go
• pkg/core/shared.go
• pkg/sdk3rd-trimmed/github.com/byteplus-sdk/byteplus-go-sdk-v2/service/alb/api_describe_listener_attributes.go
• pkg/sdk3rd-trimmed/github.com/byteplus-sdk/byteplus-go-sdk-v2/service/alb/api_describe_listeners.go
• pkg/sdk3rd-trimmed/github.com/byteplus-sdk/byteplus-go-sdk-v2/service/alb/api_describe_load_balancer_attributes.go
• pkg/sdk3rd-trimmed/github.com/byteplus-sdk/byteplus-go-sdk-v2/service/alb/api_modify_listener_attributes.go
• pkg/sdk3rd-trimmed/github.com/huaweicloud/huaweicloud-sdk-go-v3/services/vod/v1/vod_client.go
• pkg/sdk3rd-trimmed/github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tse/v20201207/client.go
• pkg/sdk3rd-trimmed/github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tse/v20201207/models.go
• pkg/sdk3rd-trimmed/github.com/volcengine/volcengine-go-sdk/service/certificateservice/service_certificateservice.go
• pkg/sdk3rd-trimmed/github.com/volcengine/volcengine-go-sdk/service/vod20260101/api_list_vod_domains.go
• pkg/sdk3rd-trimmed/github.com/volcengine/volcengine-go-sdk/service/vod20260101/api_update_vod_domain_config.go
• pkg/sdk3rd-trimmed/github.com/volcengine/volcengine-go-sdk/service/vod20260101/service_vod20260101.go
• pkg/sdk3rd/1panel/api_website_get.go
• pkg/sdk3rd/1panel/api_website_https_get.go
• pkg/sdk3rd/1panel/api_website_search.go
• pkg/sdk3rd/1panel/api_website_ssl_search.go
• pkg/sdk3rd/1panel/models.go
• pkg/sdk3rd/1panel/v2/api_website_get.go
• pkg/sdk3rd/1panel/v2/api_website_https_get.go
• pkg/sdk3rd/1panel/v2/api_website_search.go
• pkg/sdk3rd/1panel/v2/api_website_ssl_search.go
• pkg/sdk3rd/apisix/api_update_ssl.go
• pkg/sdk3rd/baishan/api_get_domain_config.go
• pkg/sdk3rd/btwaf/types.go
• pkg/sdk3rd/cloudflare/api_customcertificate_create.go
• pkg/sdk3rd/cloudflare/api_customcertificate_edit.go
• pkg/sdk3rd/cloudflare/options.go
• pkg/sdk3rd/cloudflare/types.go
• pkg/sdk3rd/dcloud/unicloud/options.go
• pkg/sdk3rd/digitalocean/api_create_certificate.go
• pkg/sdk3rd/digitalocean/api_list_certificates.go
• pkg/sdk3rd/digitalocean/models.go
• pkg/sdk3rd/digitalocean/options.go
• pkg/sdk3rd/digitalocean/types.go
• pkg/sdk3rd/kong/api_upsert_certificates.go
• pkg/sdk3rd/lecdn/v3/client/options.go
• pkg/sdk3rd/lecdn/v3/master/options.go
• pkg/sdk3rd/linode/api_delete_object_storage_ssl.go
• pkg/sdk3rd/linode/api_get_object_storage_ssl.go
• pkg/sdk3rd/linode/api_upload_object_storage_ssl.go
• pkg/sdk3rd/mohua/api_list_virtualhost_domains.go
• pkg/sdk3rd/mohua/api_set_virtualhost_ssl.go
• pkg/sdk3rd/mohua/models.go
• pkg/sdk3rd/mohua/options.go
• pkg/sdk3rd/mohua/types.go
• pkg/sdk3rd/nginxproxymanager/options.go
• pkg/sdk3rd/samwaf/api_vipconfig_restartmanager.go
• pkg/sdk3rd/samwaf/api_vipconfig_updatesslenable.go
• pkg/sdk3rd/samwaf/api_vipconfig_uploadsslcert.go
• pkg/sdk3rd/volcengine/tos/api_put_bucket_customdomain.go
• pkg/sdk3rd/volcengine/tos/options.go
• pkg/sdk3rd/volcengine/tos/types.go
• pkg/sdk3rd/wangsu/cdnpro/types.go
• pkg/utils/maps/copy.go
• pkg/utils/third-party/azure/env.go
• pkg/utils/third-party/gcore/endpoint.go
• pkg/utils/third-party/gcore/signer.go
• pkg/utils/third-party/gcp/credential.go
• pkg/utils/wait/delay.go
• pkg/utils/wait/until.go
• ui/src/components/access/forms/AccessConfigFieldsProviderBytePlus.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProvider1Panel.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderBytePlusMediaLive.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderCdnfly.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderCloudflareSSL.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderFlexCDN.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderGoEdge.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderHuaweiCloudAAD.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderHuaweiCloudLive.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderKubernetesSecret.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderLeCDN.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderLinodeLOS.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderNetlify.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderNginxProxyManager.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderOracleCloudCertificatesMgmt.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderSafeLine.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderSamWAFConsole.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderTencentCloudSSLDeploy.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderTencentCloudSSLUpdate.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderUniCloudWebHost.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderVolcEngineCLB.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderVolcEngineVOD.tsx
• ui/src/components/workflow/designer/forms/BizDeployNodeConfigFieldsProviderWangsuCDNPro.tsx
• ui/src/i18n/resources/zh/nls.settings.json

Certificate deployment providers in Certimate are responsible for pushing issued certificates and their corresponding private keys to various infrastructure targets, such as cloud-native load balancers, CDNs, server management panels, and local or remote filesystems.

Architecture Overview

The deployment system is built on a provider-based abstraction that separates the deployment logic from the workflow engine. Each provider implements a common interface, allowing the bizDeploy node executor to handle any target uniformly.

The Provider Interface

All deployment providers must satisfy the Provider interface (aliased from core.Deployer) defined in the core deployer package.

Sources: pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go27-28 pkg/core/deployer/providers/apisix/apisix.go17-18 pkg/core/deployer.go10-13

Deployment Data Flow

The following diagram illustrates the lifecycle of a deployment operation, from the workflow engine to the final infrastructure target.

Deployment Execution Flow

Sources: pkg/core/deployer/providers/ssh/ssh.go89-106 pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go67-105 pkg/core/deployer/providers/apisix/apisix.go43-66

Implementation Patterns

Deployers generally follow one of three implementation patterns depending on the target infrastructure:

1. Two-Step Cloud Deployment (Upload + Apply)

Cloud providers often require certificates to be uploaded to a centralized certificate management service before they can be associated with specific resources.

• Example: Aliyun ALB
  • Upload: Uses sdkCertmgr.Upload (aliyun-cas) to push the certificate pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go114-120
  • Apply: Calls deployToLoadbalancer or deployToListener to update ALB resources via the ALB SDK pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go124-136
• Example: Azure Key Vault
  • Upload: Converts PEM to PFX (required by Azure Key Vault) and imports it using ImportCertificate pkg/core/certmgr/providers/azure-keyvault/azure_keyvault.go148-179
• Example: AWS IAM/ACM
  • IAM: Extracts server certificate and chain, then uses UploadServerCertificate pkg/core/certmgr/providers/aws-iam/aws_iam.go161-175
  • ACM: Uses ImportCertificate to push or replace certificates pkg/core/certmgr/providers/aws-acm/aws_acm.go152-171
• Example: Tencent Cloud EO
  • Upload: Uses sdkCertmgr.Upload (tencentcloud-ssl) pkg/core/deployer/providers/tencentcloud-eo/tencentcloud_eo.go103-109
  • Apply: Updates hosts via ModifyHostsCertificate pkg/core/deployer/providers/tencentcloud-eo/tencentcloud_eo.go216-220

2. Direct Panel/Infrastructure Deployment

Server panels or specific API endpoints allow direct submission of PEM strings via their APIs.

• Example: Aliyun WAF 3.0
  • Deploys to cloud resources or CNAME-based instances after uploading to Aliyun CAS pkg/core/deployer/providers/aliyun-waf/aliyun_waf.go131-146
• Example: BaoTa Panel
  • Uses custom SDK to update site SSL configurations pkg/core/deployer/providers/baotapanel/baotapanel.go111-131
• Example: Kubernetes Secret
  • Updates or creates a v1.Secret of type kubernetes.io/tls in a specified namespace pkg/core/deployer/providers/k8s-secret/k8s_secret.go173-184

3. Filesystem & Protocol Deployment

Infrastructure targets receive raw files via standard protocols.

• SSH/SCP: Connects to remote hosts, optionally executes a PreCommand, uploads files, and executes a PostCommand pkg/core/deployer/providers/ssh/ssh.go124-173
• S3: Uploads certificates and keys as objects to a specified bucket using PutObjectString pkg/core/deployer/providers/s3/s3.go93-194

Provider Categories

Certimate supports over 130 deployment targets organized by cloud and infrastructure types.

Cloud Providers

These providers integrate with major cloud vendor APIs to update edge services.

Provider	Supported Services	Key Logic / SDKs
Aliyun	ALB, WAF, VOD, CDN, DCDN, OSS, APIGW, ESA	alialb.Client, aliwaf.Client, alivod.Client, alicdn.Client
Tencent Cloud	EO, SSL-Update, CDN, CLB, COS, CSS, VOD, SCF, GA2, GAAP, TSE	tceo.Client, tcga2.Client, tcssl.Client
Volcengine	VOD, APIG, WAF, CertCenter, ImageX, ALB, CLB, DCDN, Live, TOS	vevod.VOD20260101, veapig.APIG
AWS	ACM, S3, CloudFront, Amplify, APIGateway, ALB, NLB, CLB, IAM	aws-sdk-go-v2, elasticloadbalancingv2.Client, awsiam.Client
JD Cloud	VOD, WAF, Live, ALB, CDN, SSL	jdcloud-sdk
BytePlus	APIG, CLB, MediaLive, CertCenter, ALB, TOS	byteplus_apig.Deployer
Baidu Cloud	BLB, AppBLB, Cert	baiducloudcert.Provider
UCloud	UCLB, UALB, UEWAF	ucloud_uclb.Deployer

Sources: pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go17-18 pkg/core/deployer/providers/volcengine-vod/volcengine_vod.go14-17 pkg/core/deployer/providers/aws-nlb/aws_nlb.go8-12 pkg/core/deployer/providers/tencentcloud-eo/tencentcloud_eo.go15-18 pkg/core/certmgr/providers/aws-iam/aws_iam.go14-15

Server Panels & Infrastructure

• Panels: BaoTa (btpanel, btpanelgo, baotawaf), 1Panel, RatPanel, Mohua MVH, UniCloud WebHost, CPanel, DogeCloud, Bunny CDN, Dokploy, Fly.io, Vercel, Proxmox VE, Synology DSM.
• Gateways: Nginx Proxy Manager, APISIX, Kong, GoEdge, SafeLine, SamWaf.
• Infrastructure: Kubernetes Secret, SSH, FTP, S3, Webhook, Local, DigitalOcean, Google Cloud, Azure Key Vault.

Code Entity Mapping

The following diagram maps high-level provider names to their internal Go structs and configuration types.

Provider Entity Map

Sources: pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go31-58 pkg/core/deployer/providers/tencentcloud-eo/tencentcloud_eo.go31-56 pkg/core/deployer/providers/aws-alb/aws_alb.go24-47 pkg/core/deployer/providers/k8s-secret/k8s_secret.go24-52

Key Functions & Logic

Certificate Management Integration

Most deployers utilize a core.Certmgr instance to handle the "Upload" phase.

• Aliyun: Uses cmgrimpl.NewCertmgr for Aliyun CAS pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go78-87
• AWS: Can use either ACM or IAM as the certificate source pkg/core/deployer/providers/aws-alb/aws_alb.go61-86
• Tencent Cloud: Uses cmgrimpl.NewCertmgr for Tencent SSL pkg/core/deployer/providers/tencentcloud-eo/tencentcloud_eo.go70-78

Domain Matching Logic

Many providers support matching domains via wildcards or Certificate SANs.

• Wildcard Matching: Filters candidate domains in a zone using xcerthostname.IsMatch pkg/core/deployer/providers/tencentcloud-eo/tencentcloud_eo.go138-145
• SAN Matching: Uses xcerthostname.IsMatchByCertificatePEM to identify resources covered by the certificate's SANs pkg/core/deployer/providers/aliyun-cdn/aliyun_cdn.go144-146 pkg/core/deployer/providers/aliyun-vod/aliyun_vod.go143-145

Duplicate Prevention

Providers check for existing certificates before uploading to avoid cluttering cloud storage.

• Azure Key Vault: Compares NotBefore, Expires, and custom Tags (kvTagCertCN, kvTagCertSN) pkg/core/certmgr/providers/azure-keyvault/azure_keyvault.go87-117
• AWS ACM: Iterates through ListCertificates and compares SANs, validity dates, and content pkg/core/certmgr/providers/aws-acm/aws_acm.go102-143
• AWS IAM: Iterates through ListServerCertificates and compares metadata and body pkg/core/certmgr/providers/aws-iam/aws_iam.go108-149

Sources:

• pkg/core/deployer/providers/aliyun-alb/aliyun_alb.go
• pkg/core/deployer/providers/tencentcloud-eo/tencentcloud_eo.go
• pkg/core/deployer/providers/aliyun-cdn/aliyun_cdn.go
• pkg/core/deployer/providers/aliyun-vod/aliyun_vod.go
• pkg/core/deployer/providers/aws-alb/aws_alb.go
• pkg/core/deployer/providers/aws-nlb/aws_nlb.go
• pkg/core/deployer/providers/k8s-secret/k8s_secret.go
• pkg/core/certmgr/providers/azure-keyvault/azure_keyvault.go
• pkg/core/certmgr/providers/aws-acm/aws_acm.go
• pkg/core/certmgr/providers/aws-iam/aws_iam.go
• pkg/core/deployer/providers/aliyun-waf/aliyun_waf.go