diff options
| author | Jason Anderson <jasonanderson@uchicago.edu> | 2020-05-04 12:32:51 -0500 |
|---|---|---|
| committer | James Kirsch <generalfuzz@gmail.com> | 2022-02-04 22:55:00 +0000 |
| commit | 68f5856728977d3b4253caf1d5859b5e2a502299 (patch) | |
| tree | ab417090054b8d3279cedcd39ec497dbeb16ff64 /docker | |
| parent | 57f56e70623a5cb9bec3a97a1f05b087c99f1ccd (diff) | |
| download | kolla-68f5856728977d3b4253caf1d5859b5e2a502299.tar.gz kolla-68f5856728977d3b4253caf1d5859b5e2a502299.zip | |
Add LetsEncrypt images for cert request/renewal
Adds container images for LetsEncrypt.
Implements: blueprint letsencrypt-https
Change-Id: I36d1a367fd8f40bb93ebc49122c8ee4fdcc151b2
Co-Authored-By: Jason Anderson <jasonanderson@uchicago.edu>
Diffstat (limited to 'docker')
| -rw-r--r-- | docker/letsencrypt/Dockerfile.j2 | 29 | ||||
| -rw-r--r-- | docker/letsencrypt/extend_start.sh | 10 |
2 files changed, 39 insertions, 0 deletions
diff --git a/docker/letsencrypt/Dockerfile.j2 b/docker/letsencrypt/Dockerfile.j2 new file mode 100644 index 000000000..8e245b480 --- /dev/null +++ b/docker/letsencrypt/Dockerfile.j2 @@ -0,0 +1,29 @@ +FROM {{ namespace }}/{{ image_prefix }}openstack-base:{{ tag }} +LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" + +{% block letsencrypt_header %}{% endblock %} + +{% import "macros.j2" as macros with context %} + +{# NOTE(jkirsch): EPEL required for lego #} +{{ macros.enable_extra_repos(['epel']) }} + +{% if base_package_type == 'rpm' %} + {% set letsencrypt_packages = [ + 'certbot', + 'cronie' + ] %} +{% elif base_package_type == 'deb' %} + {% set letsencrypt_packages = [ + 'certbot', + 'cron' + ] %} +{% endif %} +{{ macros.install_packages(letsencrypt_packages | customizable("packages")) }} + + +COPY extend_start.sh /usr/local/bin/kolla_extend_start +RUN chmod 755 /usr/local/bin/kolla_extend_start + +{% block letsencrypt_footer %}{% endblock %} +{% block footer %}{% endblock %} diff --git a/docker/letsencrypt/extend_start.sh b/docker/letsencrypt/extend_start.sh new file mode 100644 index 000000000..420c96028 --- /dev/null +++ b/docker/letsencrypt/extend_start.sh @@ -0,0 +1,10 @@ +#!/bin/bash + +if [[ ! -d "/var/log/kolla/letsencrypt" ]]; then + mkdir -p /var/log/kolla/letsencrypt +fi +if [[ $(stat -c %a /var/log/kolla/letsencrypt) != "755" ]]; then + chmod 755 /var/log/kolla/letsencrypt +fi + +. /usr/local/bin/kolla_httpd_setup |