<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openstack/kolla.git/docker/haproxy/haproxy-ssh/extend_start.sh, branch stable/2026.1</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<id>https://git.platform-os.org/openstack/kolla.git/atom?h=stable%2F2026.1</id>
<link rel='self' href='https://git.platform-os.org/openstack/kolla.git/atom?h=stable%2F2026.1'/>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/'/>
<updated>2026-03-17T16:13:18+00:00</updated>
<entry>
<title>Remove dsa from haproxy-ssh host key types</title>
<updated>2026-03-17T16:13:18+00:00</updated>
<author>
<name>Antony Messerli</name>
<email>antony@mes.ser.li</email>
</author>
<published>2026-03-11T22:43:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=01fef6fc62c4dbf3c7f75bde1cdcf73e1b1745aa'/>
<id>urn:sha1:01fef6fc62c4dbf3c7f75bde1cdcf73e1b1745aa</id>
<content type='text'>
CentOS/Rocky 10 no longer supports DSA keys, causing haproxy-ssh
to fail on startup with "unknown key type dsa". This aligns
haproxy-ssh with the same fix already applied to keystone-ssh
and nova-ssh.

Closes-Bug: #2143880
Change-Id: I3990c2c67756378063e0867edcd004e8d28574dd
Signed-off-by: Antony Messerli &lt;antony@mes.ser.li&gt;
</content>
</entry>
<entry>
<title>Rework letsencrypt</title>
<updated>2023-09-18T09:26:22+00:00</updated>
<author>
<name>Michal Arbet</name>
<email>michal.arbet@ultimum.io</email>
</author>
<published>2023-06-29T23:29:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=3213dccb8c318134695bcc9c9ba480448964314f'/>
<id>urn:sha1:3213dccb8c318134695bcc9c9ba480448964314f</id>
<content type='text'>
This patch is adding "API layer" to letsencrypt
images which is represented by set of scripts inside.

This scripts are called by kolla-ansible orchestration.

Change-Id: I61b70fb4e12ba03b96e79004e735d2ead0f52319
</content>
</entry>
<entry>
<title>Replace Certbot with Lego for Let's Encrypt container</title>
<updated>2022-05-30T08:11:54+00:00</updated>
<author>
<name>generalfuzz</name>
<email>generalfuzz@gmail.com</email>
</author>
<published>2022-03-17T18:15:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=d424a63d6049d8d241ab1294aea035d4b187a111'/>
<id>urn:sha1:d424a63d6049d8d241ab1294aea035d4b187a111</id>
<content type='text'>
Replaces Certbot with Lego for certificate retrieval and renewal.
Lego includes support for DNS ACME Challenges.

Adds ssh-client to LetsEncrypt and ssh-server to HAProxy to allow both
the transfer of Let's Encrypt certificates to the HAProxy container and
to enable live updating of HAProxy certifices using the HAProxy API
exposed on the local HAProxy socket.

Implements: blueprint letsencrypt-https
Change-Id: I737e1ce5bfc37d0703879c8272a9e915084c5ca6
</content>
</entry>
</feed>
