Marc Dequènes (Duck) created OVIRT-2858:
-------------------------------------------
Summary: Upgrade of Openshift certificates
Key: OVIRT-2858
URL:
https://ovirt-jira.atlassian.net/browse/OVIRT-2858
Project: oVirt - virtualization made easy
Issue Type: Improvement
Reporter: Marc Dequènes (Duck)
Assignee: infra
Priority: Low
The
status.ovirt.org certificates expires in April; we have some time but it would be nice
to replace Digicert by Let's Encrypt. I see that the cert-manager operator can do that
but I have no experience with such integration. It seems like the way to go though (or
with another implementation).
I would like to point out that we would need support for HTTP01. DNS01 would be nice but
unless we convert the
ovirt.org domain fully into a dynamic zone, which I do not
recommend, there is an option to use CNAMEs to a dynamic sub-zone; it works fine but it is
not yet merged upstream (see
https://github.com/certbot/certbot/pull/7244).
--
This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100118)