diff options
| author | Zuul <zuul@review.opendev.org> | 2026-08-27 23:18:31 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2026-08-27 23:18:31 +0000 |
| commit | 201438c78025e1364cd0e874560de14065bee428 (patch) | |
| tree | 8825af2f0160cecab1138497a48db86db8f14258 /releasenotes | |
| parent | d3e4241997bd850c736e43626cddcb7856b4b194 (diff) | |
| parent | abe305634a9dd5a8a0ba06df8f349617a745ea31 (diff) | |
| download | kolla-201438c78025e1364cd0e874560de14065bee428.tar.gz kolla-201438c78025e1364cd0e874560de14065bee428.zip | |
Merge "letsencrypt: Add ACME dns-01 challenge support"
Diffstat (limited to 'releasenotes')
| -rw-r--r-- | releasenotes/notes/letsencrypt-dns01-challenge-432b5122dc832f4a.yaml | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/releasenotes/notes/letsencrypt-dns01-challenge-432b5122dc832f4a.yaml b/releasenotes/notes/letsencrypt-dns01-challenge-432b5122dc832f4a.yaml new file mode 100644 index 000000000..0b35c17ca --- /dev/null +++ b/releasenotes/notes/letsencrypt-dns01-challenge-432b5122dc832f4a.yaml @@ -0,0 +1,14 @@ +--- +features: + - | + The ``letsencrypt-lego`` image now supports the ACME ``dns-01`` challenge + in addition to the existing ``http-01`` challenge. The + ``letsencrypt-certificates`` script accepts a new ``--challenge`` option + (defaulting to ``http-01``) and, when ``dns-01`` is selected, a + ``--dns-provider`` option naming any DNS provider supported by the bundled + ``lego`` binary. An optional ``--dns-additional-opts`` passthrough allows + forwarding extra ``lego`` DNS flags (such as ``--dns.resolvers`` or + ``--dns.propagation-disable-ans``) for environments where the default + authoritative name server propagation check cannot be performed. The + default behaviour is unchanged: without ``--challenge`` the ``http-01`` + challenge is used exactly as before. |