Expired/invalid TLS certificate

[kubernetes-retired]

Expired/invalid TLS certificate

[philips]

Looks like it expired 23 days ago. cc @thockin

[thockin]

@ixdy - we missed one. dammit.

…

On Thu, Dec 29, 2016 at 2:54 PM, Brandon Philips ***@***.***> wrote: Looks like it expired 23 days ago. cc @thockin <https://github.com/thockin> — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#16 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFVgVETrAt9oz3bRAM0doydT3_3TnttJks5rNDpDgaJpZM4LXumS> .

[ixdy]

d'oh. I can fix.

[thockin]

you're a prince. Is this scripted somewhere?

…

On Thu, Dec 29, 2016 at 3:22 PM, Jeff Grafton ***@***.***> wrote: d'oh. I can fix. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#16 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFVgVEObgqTKrXma0EEWO8dQUG9pXcNWks5rNECsgaJpZM4LXumS> .

[ixdy]

Not yet, but most of the hard work is automated away by https://github.com/xenolf/lego:

$ cd <some_private_dir>
$ GCE_PROJECT=<project> lego --email=<email> --dns=gcloud --domains=foo.k8s.io --domains=foo.kubernetes.io run
...
Server responded with a certificate.
$ cd .lego/certificates

and then manually update secrets.

[thockin]

I am AFK rest of today - do you have time and access enough top push this before EOY?

…

On Thu, Dec 29, 2016 at 3:45 PM, Jeff Grafton ***@***.***> wrote: Not yet, but most of the hard work is automated away by https://github.com/xenolf/lego: $ cd <some_private_dir> $ GCE_PROJECT=<project> lego --email=<email> --dns=gcloud --domains=foo.k8s.io --domains=foo.kubernetes.io run...Server responded with a certificate. $ cd .lego/certificates and then manually update secrets. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#16 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFVgVMlyprArGt0Sz9YO9rz5pWLAwgm0ks5rNEYUgaJpZM4LXumS> .

[ixdy]

I just updated the secret. It looks like spartakus is using Ingress, so it should be fixed momentarily.

[ixdy]

as in now

[ixdy]

I'm hoping at some point there will be some more production-ready integration between LE and Kubernetes.

For now, it's ~10m of effort to update all of our certs quarterly, and now spartakus is on my radar.

[thockin]

THANKS!!!

…

On Thu, Dec 29, 2016 at 3:50 PM, Jeff Grafton ***@***.***> wrote: I'm hoping at some point there will be some more production-ready integration between LE and Kubernetes. For now, it's ~10m of effort to update all of our certs quarterly, and now spartakus is on my radar. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#16 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFVgVOYWmnVPzqd4WDntVimgw_qvvpoxks5rNEc9gaJpZM4LXumS> .

[yuvipanda]

Should this be closed? :)