Skip to content
Snippets Groups Projects
add-lets-encrypt-intergration-9e5f9846536379af.yaml 529 B
Newer Older
---
features:
  - Add Lets Encrypt TLS certificate service integration into Openstack
    deployment. Enables trusted TLS certificate generation option for
Michal Nasiadka's avatar
Michal Nasiadka committed
    secure communication with OpenStack HAProxy instances using
    ``letsencrypt_email``, ``kolla_internal_fqdn`` and/or
    ``kolla_external_fqdn`` is required. One container runs an Apache
    ACME client webserver and one runs Lego for certificate retrieval
    and renewal. The Lego container starts a cron job which attempts
    to renew certificates every 12 hours.