Channel Revision Published Runs on
4/stable 61 22 Apr 2025
Ubuntu 22.04
4/candidate 128 13 Nov 2025
Ubuntu 22.04
4/beta 162 09 Dec 2025
Ubuntu 24.04 Ubuntu 22.04
4/beta 160 09 Dec 2025
Ubuntu 24.04 Ubuntu 22.04
4/edge 446 Today
Ubuntu 24.04 Ubuntu 22.04
4/edge 445 Today
Ubuntu 24.04 Ubuntu 22.04
4/edge 444 Today
Ubuntu 24.04 Ubuntu 22.04
4/edge 443 Today
Ubuntu 24.04 Ubuntu 22.04
juju deploy lego --channel 4/stable
Show information

Platform:

Ubuntu
24.04 22.04

LEGO is a Let’s Encrypt/ACME client and library written in Go. It makes it possible to request X509 certificates from an ACME server for Public Domain Names.

The provider implements the tls-certificates interface supporting automatic certificate renewal, structured error reporting with standardized codes, and guaranteed responses (every certificate request receives either a certificate or a detailed error).

The LEGO operator utilises this library to provide X.509 certificates to charms using the tls-certificates integration in contexts where certificates are obtained from an ACME server using the DNS-01 challenge.

This operator supports a wide range of DNS providers and can request certificate from any ACME-compliant server, including Let’s Encrypt.

As a workload-less solution, the LEGO operator works across both Kubernetes and Machine models.

In this documentation

Tutorials Get started - a hands-on introduction for new users How-to guides Step-by-step guides covering key operations and common tasks
Explanation Concepts - discussion and clarification of key topics Reference Technical information - specifications, APIs, architecture

Project and community

LEGO operator is a member of the Ubuntu family. It’s an open source project that warmly welcomes community projects, contributions, suggestions, fixes and constructive feedback.