Let's Encrypt support

[FedericoBernardi]

Any plan to support Let's Encrypt in SF through Azure Portal? Since SF now supports the certificates by name would be amazing having a self renewal of the SSL Let's Encrypt wildcard certificate inside the portal and deployed in the cluster

[WhitWaldo]

This is actually quite easy to do yourself now until this is more officially supported. I wrote a stateless service that utilizes Certes to create the orders based off an external table (with the latest expiration dates of each) that checks for new orders to run once a day and updates the certs based on where they need to go (since you may have a need to update certs elsewhere beyond Service Fabric too, like App Gateway).

[aljo-microsoft]

@FedericoBernardi and @WhitWaldo

SF isn't prescriptive about how you obtain or deploy your certificates to your scale sets in Azure; we recommend an integrated CA with KV, and using ARM VMSS resource property to deploy from KV.

I provide more context here: microsoft/service-fabric-issues#1209

https://feedback.azure.com/forums/170024-additional-services/suggestions/16957756-add-integration-with-let-s-encrypt