openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update openstack-ansible-haproxy_server from branch 'master'
  to 0c69464fa1fb7c6e14bf97fe7940e5a15785061a
  - Merge "Serialise initial issuing of LetsEncrypt certificates"
  - Serialise initial issuing of LetsEncrypt certificates
    
    Currently the role will run against all target hosts, and it is
    possible that the calling playbook runs with a serial: setting
    to control how many hosts are targetted simultaneously.
    
    However, this is not sufficient to guarantee that each potential
    haproxy server requests a LetsEncrypt certificate sequentially.
    It is only possible for the loadbalancer to direct the challenge
    from the ACME server to one certbot instance at a time, so this
    patch enforces serialisation of the initial certificate generation
    regardless of the number of target hosts and setting of serial:
    outside this role.
    
    Change-Id: If8ae64bc01510d3570fa4c554463bd6121b21f86
This commit is contained in:
Zuul 2023-03-07 18:12:25 +00:00 committed by Gerrit Code Review
parent 0d91d8e38a
commit 86d3ae32f6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openstack-ansible-haproxy_server

@ -1 +1 @@
Subproject commit 23b18f89da818ccf4b1a0490a82571d05c852f4d
Subproject commit 0c69464fa1fb7c6e14bf97fe7940e5a15785061a