openshift-letsencrypt

openshift-letsencrypt copied to clipboard

patch_route() doesn't work - Route won't be updated.

5

When I looked at the `watcher`pod's log, I noticed, that all steps work fine. Even the generation of the `data` object to patch the route with is correct. I took...

macmacs

Certificate Not Connected?

20

I initially had a similar issue to #21. I was able to get past that by changing the insecureEdgeTerminationPolicy from Redirect to Allow. Now I get the following: `watching routes...

jonrogoff

Add existing certificate to route after redeployment of a service

5

This way, an existing certificate is also added to a route if the corresponding service is redeployed.

macmacs

Clusterrole updated

5

I added the [clusterrole.yaml](https://github.com/tnozicka/openshift-acme/blob/master/deploy/clusterrole.yaml) from [openshift-acme](https://github.com/tnozicka/openshift-acme). It fixes #26.

macmacs

routes with same dns name and different paths

1

i have routes with same domain but different paths example: i have a route with sucefful installed certificate by openshift-letsencrypt route name: "cdn" with url cdn.mydomain.com route to service nginx-cdn...

Hertan

are you aware of openshift-acme

1

Are you aware of https://github.com/tnozicka/openshift-acme. If so, is there a reason to not use that repo? If not, could you possibly join efforts?

dustymabe

Handling secrets

3

I'm opening this issue to see how you feel about dealing with secrets as well as routes. An example use case that I have is postfix and dovecot deployments. There...

jameseck

implement multiple domains per certificate

2

Maybe use a label `butter.sh/letsencrypt-cert-id` which implements the grouping, or group by namespace only. An open question is still, whether requesting a new certificate that contains a domain whose original...

ibotty

Scheduled Jobs

7

Fantastic work. Just what I need. Thanks for that. One idea. Instead of continuously running the containers could this also be done with [ScheduledJob](https://docs.openshift.com/container-platform/3.3/dev_guide/scheduled_jobs.html)?

sandrich

Develop

1

When you forgot to add the edit role to system:serviceaccount::letsencrypt the watcher script still tries to process an empty list of routes instead of giving a hint about the error....

malagant