Skip to content
Snippets Groups Projects
Normal view Permalink
add-lets-encrypt-intergration-9e5f9846536379af.yaml 528 B
Newer Older
  • Learn to ignore specific revisions
    • James Kirsch's avatar
    Add support for LetsEncrypt-managed certs
    James Kirsch committed
    1 2 3 4 5 6 7 8 9 10 
    ---
features:
  - Add Lets Encrypt TLS certificate service integration into Openstack
    deployment. Enables trusted TLS certificate generation option for
    secure communcation with OpenStack HAProxy instances using
    ``letsencrypt_email``, ``kolla_internal_fqdn`` and/or
    ``kolla_external_fqdn`` is required. One container runs an Apache
    ACME client webserver and one runs Lego for certificate retrieval
    and renewal. The Lego container starts a cron job which attempts
    to renew certificates every 12 hours.