openstack-ansible-haproxy_s.../tasks
Jonathan Rosser 34f153b139 Serialise initial issuing of LetsEncrypt certificates
Currently the role will run against all target hosts, and it is
possible that the calling playbook runs with a serial: setting
to control how many hosts are targetted simultaneously.

However, this is not sufficient to guarantee that each potential
haproxy server requests a LetsEncrypt certificate sequentially.
It is only possible for the loadbalancer to direct the challenge
from the ACME server to one certbot instance at a time, so this
patch enforces serialisation of the initial certificate generation
regardless of the number of target hosts and setting of serial:
outside this role.

Change-Id: If8ae64bc01510d3570fa4c554463bd6121b21f86
2023-02-28 18:40:01 +00:00
..
haproxy_install.yml Remove references to unsupported operating systems 2021-03-21 20:48:54 +01:00
haproxy_post_install.yml Move selinux fix to haproxy_post_install.yml 2023-02-14 12:29:47 +01:00
haproxy_pre_install.yml Generate self-signed SSL per listen IP 2021-06-25 13:30:25 +00:00
haproxy_service_config.yml Move selinux fix to haproxy_post_install.yml 2023-02-14 12:29:47 +01:00
haproxy_ssl_letsencrypt.yml Serialise initial issuing of LetsEncrypt certificates 2023-02-28 18:40:01 +00:00
main.yml Remove redundant vars line 2022-09-15 09:54:38 +02:00