Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(domains): allow to specify different authenticators/installers #83

Conversation

javierbertoli
Copy link
Member

PR progress checklist (to be filled in by reviewers)

  • Changes to documentation are appropriate (or tick if not required)
  • Changes to tests are appropriate (or tick if not required)
  • Reviews completed

What type of PR is this?

Primary type

  • [build] Changes related to the build system
  • [chore] Changes to the build process or auxiliary tools and libraries such as documentation generation
  • [ci] Changes to the continuous integration configuration
  • [feat] A new feature
  • [fix] A bug fix
  • [perf] A code change that improves performance
  • [refactor] A code change that neither fixes a bug nor adds a feature
  • [revert] A change used to revert a previous commit
  • [style] Changes that do not affect the meaning of the code (white-space, formatting, missing semi-colons, etc.)

Secondary type

  • [docs] Documentation changes
  • [test] Adding missing or correcting existing tests

Does this PR introduce a BREAKING CHANGE?

No.

Related issues and/or pull requests

Fixes #14

Describe the changes you're proposing

  • Added a couple of extra paramters (letsencrypt:authenticators and letsencrypt:installers) that allow to specify different authenticators or installers for each domainset.
    This lets you manage, in a single server, vhosts that authenticate using a local webserver (ie, nginx) and vhosts that authenticate using other methods (ie, route53).

  • Added a pebble ACME CA to the testing infrastructure, so now we can test that the domainsets are obtained and installed correctly.

  • Added tests to verify the certificates are obtained and installed correctly.

Pillar / config required to test the proposed changes

See https://github.com/saltstack-formulas/letsencrypt-formula/blob/master/test/salt/pillar/domains.sls
and https://github.com/saltstack-formulas/letsencrypt-formula/blob/master/pillar.example

Debug log showing how the proposed changes work

Documentation checklist

  • Updated the README (e.g. Available states).
  • Updated pillar.example.

Testing checklist

  • Included in Kitchen (i.e. under state_top).
  • Covered by new/existing tests (e.g. InSpec, Serverspec, etc.).
  • Updated the relevant test pillar.

Additional context

@javierbertoli javierbertoli requested a review from a team as a code owner June 24, 2021 19:56
@javierbertoli javierbertoli force-pushed the allow-mixing-authenticators branch 2 times, most recently from a1be797 to 1b58e74 Compare June 24, 2021 20:34
@javierbertoli javierbertoli mentioned this pull request Jun 24, 2021
@javierbertoli javierbertoli requested review from myii and dafyddj June 25, 2021 16:41
Allow to specify different authenticators or installers for each domainset.

Also, added a `pebble` ACME CA to test that the domainsets can be obtained
and installed correctly.

Added tests to verify the certificates are installed.
@javierbertoli javierbertoli force-pushed the allow-mixing-authenticators branch from 3cadbaf to 2870ada Compare July 2, 2021 20:23
@javierbertoli javierbertoli force-pushed the allow-mixing-authenticators branch from 2870ada to c3637f7 Compare July 2, 2021 20:34
@javierbertoli javierbertoli merged commit 2c50f9d into saltstack-formulas:master Jul 2, 2021
@javierbertoli javierbertoli deleted the allow-mixing-authenticators branch July 2, 2021 20:55
@saltstack-formulas-travis

🎉 This PR is included in version 3.1.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support standalone mode
2 participants