diff options
| author | Zuul <zuul@review.opendev.org> | 2022-02-15 18:31:45 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2022-02-15 18:31:45 +0000 |
| commit | cabfd43f49bc2c08f8efc3e5a0c2be34e11d586d (patch) | |
| tree | 1d3c520dac1f3dd8bd0a3c78d691c4e5f0030305 /docker | |
| parent | 333fb35c79d2912a10b70001f5d8b5724e9b8651 (diff) | |
| parent | 68f5856728977d3b4253caf1d5859b5e2a502299 (diff) | |
| download | kolla-cabfd43f49bc2c08f8efc3e5a0c2be34e11d586d.tar.gz kolla-cabfd43f49bc2c08f8efc3e5a0c2be34e11d586d.zip | |
Merge "Add LetsEncrypt images for cert request/renewal"
Diffstat (limited to 'docker')
| -rw-r--r-- | docker/letsencrypt/Dockerfile.j2 | 29 | ||||
| -rw-r--r-- | docker/letsencrypt/extend_start.sh | 10 |
2 files changed, 39 insertions, 0 deletions
diff --git a/docker/letsencrypt/Dockerfile.j2 b/docker/letsencrypt/Dockerfile.j2 new file mode 100644 index 000000000..8e245b480 --- /dev/null +++ b/docker/letsencrypt/Dockerfile.j2 @@ -0,0 +1,29 @@ +FROM {{ namespace }}/{{ image_prefix }}openstack-base:{{ tag }} +LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" + +{% block letsencrypt_header %}{% endblock %} + +{% import "macros.j2" as macros with context %} + +{# NOTE(jkirsch): EPEL required for lego #} +{{ macros.enable_extra_repos(['epel']) }} + +{% if base_package_type == 'rpm' %} + {% set letsencrypt_packages = [ + 'certbot', + 'cronie' + ] %} +{% elif base_package_type == 'deb' %} + {% set letsencrypt_packages = [ + 'certbot', + 'cron' + ] %} +{% endif %} +{{ macros.install_packages(letsencrypt_packages | customizable("packages")) }} + + +COPY extend_start.sh /usr/local/bin/kolla_extend_start +RUN chmod 755 /usr/local/bin/kolla_extend_start + +{% block letsencrypt_footer %}{% endblock %} +{% block footer %}{% endblock %} diff --git a/docker/letsencrypt/extend_start.sh b/docker/letsencrypt/extend_start.sh new file mode 100644 index 000000000..420c96028 --- /dev/null +++ b/docker/letsencrypt/extend_start.sh @@ -0,0 +1,10 @@ +#!/bin/bash + +if [[ ! -d "/var/log/kolla/letsencrypt" ]]; then + mkdir -p /var/log/kolla/letsencrypt +fi +if [[ $(stat -c %a /var/log/kolla/letsencrypt) != "755" ]]; then + chmod 755 /var/log/kolla/letsencrypt +fi + +. /usr/local/bin/kolla_httpd_setup |