aboutsummaryrefslogtreecommitdiff
path: root/docker/letsencrypt
diff options
context:
space:
mode:
authorZuul <zuul@review.opendev.org>2022-02-15 18:31:45 +0000
committerGerrit Code Review <review@openstack.org>2022-02-15 18:31:45 +0000
commitcabfd43f49bc2c08f8efc3e5a0c2be34e11d586d (patch)
tree1d3c520dac1f3dd8bd0a3c78d691c4e5f0030305 /docker/letsencrypt
parent333fb35c79d2912a10b70001f5d8b5724e9b8651 (diff)
parent68f5856728977d3b4253caf1d5859b5e2a502299 (diff)
downloadkolla-cabfd43f49bc2c08f8efc3e5a0c2be34e11d586d.tar.gz
kolla-cabfd43f49bc2c08f8efc3e5a0c2be34e11d586d.zip
Merge "Add LetsEncrypt images for cert request/renewal"
Diffstat (limited to 'docker/letsencrypt')
-rw-r--r--docker/letsencrypt/Dockerfile.j229
-rw-r--r--docker/letsencrypt/extend_start.sh10
2 files changed, 39 insertions, 0 deletions
diff --git a/docker/letsencrypt/Dockerfile.j2 b/docker/letsencrypt/Dockerfile.j2
new file mode 100644
index 000000000..8e245b480
--- /dev/null
+++ b/docker/letsencrypt/Dockerfile.j2
@@ -0,0 +1,29 @@
+FROM {{ namespace }}/{{ image_prefix }}openstack-base:{{ tag }}
+LABEL maintainer="{{ maintainer }}" name="{{ image_name }}"
+
+{% block letsencrypt_header %}{% endblock %}
+
+{% import "macros.j2" as macros with context %}
+
+{# NOTE(jkirsch): EPEL required for lego #}
+{{ macros.enable_extra_repos(['epel']) }}
+
+{% if base_package_type == 'rpm' %}
+ {% set letsencrypt_packages = [
+ 'certbot',
+ 'cronie'
+ ] %}
+{% elif base_package_type == 'deb' %}
+ {% set letsencrypt_packages = [
+ 'certbot',
+ 'cron'
+ ] %}
+{% endif %}
+{{ macros.install_packages(letsencrypt_packages | customizable("packages")) }}
+
+
+COPY extend_start.sh /usr/local/bin/kolla_extend_start
+RUN chmod 755 /usr/local/bin/kolla_extend_start
+
+{% block letsencrypt_footer %}{% endblock %}
+{% block footer %}{% endblock %}
diff --git a/docker/letsencrypt/extend_start.sh b/docker/letsencrypt/extend_start.sh
new file mode 100644
index 000000000..420c96028
--- /dev/null
+++ b/docker/letsencrypt/extend_start.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+if [[ ! -d "/var/log/kolla/letsencrypt" ]]; then
+ mkdir -p /var/log/kolla/letsencrypt
+fi
+if [[ $(stat -c %a /var/log/kolla/letsencrypt) != "755" ]]; then
+ chmod 755 /var/log/kolla/letsencrypt
+fi
+
+. /usr/local/bin/kolla_httpd_setup