dbc8fe1fe2ec675655624ec7ee3996b20ee6e7a4
Jonathan Rosser
dbc8fe1fe2
Use a certbot pre-hook to ensure haproxy backend is up before renewal
We use the built in python3 http server to bring up a temporary backend on the node which wants to renew a certificate. The timeout set so that the haproxy health check has noticed the backend come up before certbot runs. There is otherwise a race condition between the haproxy healthcheck and the certbot challenge request arriving at the acme-challenge endpoint. Change-Id: I2f5f9457c43c68f2881bf9d44f43434ca7b43859
Team and repository tags
OpenStack-Ansible HAProxy server
- Documentation for the project can be found at:
-
https://docs.openstack.org/openstack-ansible-haproxy_server/latest
- Release notes for the project can be found at:
-
https://docs.openstack.org/releasenotes/openstack-ansible-haproxy_server/
- The project source code repository is located at:
-
https://opendev.org/openstack/openstack-ansible-haproxy_server/
- The project home is at:
- The project bug tracker is located at:
Description
Languages
Jinja
69%
Python
31%