<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openstack/kolla.git/docker/letsencrypt/letsencrypt-lego/letsencrypt-certificates.sh, branch master</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<id>https://git.platform-os.org/openstack/kolla.git/atom?h=master</id>
<link rel='self' href='https://git.platform-os.org/openstack/kolla.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/'/>
<updated>2026-07-06T19:59:40+00:00</updated>
<entry>
<title>Migrate to pyproject.toml</title>
<updated>2026-07-06T19:59:40+00:00</updated>
<author>
<name>Michal Nasiadka</name>
<email>mnasiadka@gmail.com</email>
</author>
<published>2026-07-06T13:26:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=db35ac8d793506bc43b62e7e39d27a75de1043ed'/>
<id>urn:sha1:db35ac8d793506bc43b62e7e39d27a75de1043ed</id>
<content type='text'>
[tool.setuptools.data-files] does not support recursive directory
installation. The old setup.cfg [files] worked because PBR's
FilesConfig.expand_globs() used os.walk() to expand docker/*, but
this hook is not triggered by the pbr.build PEP-517 backend.

Move docker/ into kolla/ and use [tool.setuptools.package-data]
instead. Update kolla_worker._get_images_dir() to check the kolla
package directory first so both editable and regular installs work.

Change-Id: I4fc452c03740ef22ebbb4e8d0d86c4f4783e2d09
Signed-off-by: Michal Nasiadka &lt;mnasiadka@gmail.com&gt;
</content>
</entry>
<entry>
<title>Allow specification of a key type</title>
<updated>2025-04-24T13:10:08+00:00</updated>
<author>
<name>Jay Jahns</name>
<email>jayjahns@gmail.com</email>
</author>
<published>2024-11-11T17:24:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=f1248fe58a2e51a679d033c401e5d8953b04c8da'/>
<id>urn:sha1:f1248fe58a2e51a679d033c401e5d8953b04c8da</id>
<content type='text'>
Letsencrypt allows using a specific key type for certificates. If
the user has an internal letsencrypt mechanism, such as Vault Acme,
then they have to provide a specific key type as the default is
not supported.

This change will allow a user to specify a key type and use the lego
default in the event that they don't specify it.

Partial-Bug: 2087860
Change-Id: I83e618a861b4d51b6a7893f79c50fdfc35228891
</content>
</entry>
<entry>
<title>Fix EAB support in letsencrypt</title>
<updated>2024-12-11T18:55:47+00:00</updated>
<author>
<name>Michal Arbet</name>
<email>michal.arbet@ultimum.io</email>
</author>
<published>2024-12-06T22:16:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=6698a072d0169b2ecbad82322821eabd6186d090'/>
<id>urn:sha1:6698a072d0169b2ecbad82322821eabd6186d090</id>
<content type='text'>
This patch fixes recently merged [1] patch.

 - Original patch added params function args
   eab, hmac, key_id, but then
   EXTERNAL_ACCOUNT_BINDING_OPTS var is passed
   into obtain_or_renew_certificate which
   can't work

 - This patch correctly set EXTERNAL_ACCOUNT_BINDING,
   HMAC, KEY_ID defaults and then call obtain_or_renew_certificate
   function with them. This will ensure that arguments are always
   set, so we can write if condtional correctly and process.

[1] https://review.opendev.org/c/openstack/kolla/+/916617

Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/933924
Change-Id: I406ff10edec9dc94b1a3de005080e149ee3ab3f2
</content>
</entry>
<entry>
<title>Add Let's Encrypt EAB support</title>
<updated>2024-12-05T08:21:14+00:00</updated>
<author>
<name>Piotr Parczewski</name>
<email>piotr@stackhpc.com</email>
</author>
<published>2024-04-22T11:33:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=4adc9a103554005a675fd018f965f34701777897'/>
<id>urn:sha1:4adc9a103554005a675fd018f965f34701777897</id>
<content type='text'>
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/935656

Change-Id: I0b20d82a0061062f8aa9dfe179b1d02708ad610e
</content>
</entry>
<entry>
<title>Use full binary path when invoking ip</title>
<updated>2024-01-24T12:23:52+00:00</updated>
<author>
<name>Piotr Parczewski</name>
<email>piotr@stackhpc.com</email>
</author>
<published>2024-01-24T12:23:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=c3eb169e6c62747cfbc5ddc8ba951f7f5dda6382'/>
<id>urn:sha1:c3eb169e6c62747cfbc5ddc8ba951f7f5dda6382</id>
<content type='text'>
Closes-bug: #2051111
Change-Id: I2a4df6121236379d88d0d7f2f7a888feab273003
</content>
</entry>
<entry>
<title>Fix letsencrypt-lego logging</title>
<updated>2023-11-07T17:20:35+00:00</updated>
<author>
<name>Michal Arbet</name>
<email>michal.arbet@ultimum.io</email>
</author>
<published>2023-11-01T02:32:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=7fe6696c203f7f4fd0f3ef5e50ba0d42f53569da'/>
<id>urn:sha1:7fe6696c203f7f4fd0f3ef5e50ba0d42f53569da</id>
<content type='text'>
This patch fixes formatting of letsencrypt, so
it will be easier to parse via fluent.

Change-Id: I8a403e14819df4351e28d53c676571a3ad0c14be
</content>
</entry>
<entry>
<title>Rework letsencrypt</title>
<updated>2023-09-18T09:26:22+00:00</updated>
<author>
<name>Michal Arbet</name>
<email>michal.arbet@ultimum.io</email>
</author>
<published>2023-06-29T23:29:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=3213dccb8c318134695bcc9c9ba480448964314f'/>
<id>urn:sha1:3213dccb8c318134695bcc9c9ba480448964314f</id>
<content type='text'>
This patch is adding "API layer" to letsencrypt
images which is represented by set of scripts inside.

This scripts are called by kolla-ansible orchestration.

Change-Id: I61b70fb4e12ba03b96e79004e735d2ead0f52319
</content>
</entry>
</feed>
