| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
CentOS/Rocky 10 no longer supports DSA keys, causing haproxy-ssh
to fail on startup with "unknown key type dsa". This aligns
haproxy-ssh with the same fix already applied to keystone-ssh
and nova-ssh.
Closes-Bug: #2143880
Change-Id: I3990c2c67756378063e0867edcd004e8d28574dd
Signed-off-by: Antony Messerli <antony@mes.ser.li>
|
|
This patch is adding "API layer" to letsencrypt
images which is represented by set of scripts inside.
This scripts are called by kolla-ansible orchestration.
Change-Id: I61b70fb4e12ba03b96e79004e735d2ead0f52319
|
|
Replaces Certbot with Lego for certificate retrieval and renewal.
Lego includes support for DNS ACME Challenges.
Adds ssh-client to LetsEncrypt and ssh-server to HAProxy to allow both
the transfer of Let's Encrypt certificates to the HAProxy container and
to enable live updating of HAProxy certifices using the HAProxy API
exposed on the local HAProxy socket.
Implements: blueprint letsencrypt-https
Change-Id: I737e1ce5bfc37d0703879c8272a9e915084c5ca6
|
