Reuse certs

[nzoschke]

Demo

# no certs exist
$ convox certs
ID                DOMAIN       EXPIRES

$ cd convox-guide
$ convox apps create

# first deploy creates a cert and SSL endpoints
$ convox deploy
...
Promoting RZEXQRXNHTI... UPDATING

$ convox apps info
Name       convox-guide
Status     running
Release    RZEXQRXNHTI
Processes  redis web worker
Endpoints  convox-guide-web-NQKTDIJ-553968778.us-east-1.elb.amazonaws.com:80 (web)
           convox-guide-web-NQKTDIJ-553968778.us-east-1.elb.amazonaws.com:443 (web)
           internal-convox-guide-redis-FGGZQIL-i-518573721.us-east-1.elb.amazonaws.com:6379 (redis)

$ convox certs
ID                              DOMAIN                 EXPIRES
cert-dev-east-1479341785-53506  *.*.elb.amazonaws.com  1 year from now

# second app create / deploy reuses the cert
$ convox apps create guide2
$ convox deploy --app guide2

$ convox apps info
Name       guide2
Status     running
Release    RZEXQRXNHTI
Processes  redis web worker
Endpoints  guide2-web-NQKTDIJ-553968778.us-east-1.elb.amazonaws.com:80 (web)
           guide2-web-NQKTDIJ-553968778.us-east-1.elb.amazonaws.com:443 (web)
           internal-guide2-redis-FGGZQIL-i-518573721.us-east-1.elb.amazonaws.com:6379 (redis)


$ convox certs
ID                              DOMAIN                 EXPIRES
cert-dev-east-1479341785-53506  *.*.elb.amazonaws.com  1 year from now

[codecov-io]

Current coverage is 29.04% (diff: 0.00%)

Merging #1402 into master will decrease coverage by 0.04%

@@             master      #1402   diff @@
==========================================
  Files           137        137          
  Lines         12900      12923    +23   
  Methods           0          0          
  Messages          0          0          
  Branches          0          0          
==========================================
+ Hits           3752       3753     +1   
- Misses         8750       8772    +22   
  Partials        398        398          

Powered by Codecov. Last update 46de994...b73da58

[MiguelMoll]

Is this sleep a test or do we really want something like that?

[nzoschke]

It is a test, but based on the AWS ticket.

We observed certs created 30s before the CF stack creation that couldn't be used.

So the hypothesis is that adding a sleep will help with IAM delay and let the first deploy work more reliably.

But we also have evidence that this may have been a transient error so maybe we don't need it.

[MiguelMoll]

Using existing rack cert for apps

[nzoschke]

Cert/ELB debugging

[nzoschke]

👍