Start container-based PKI ACME tests #20320
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
cipherboy
force-pushed
the
cipherboy-start-acme-docker-tests
branch
from
f092663
to
4c52079
Compare
cipherboy
force-pushed
the
cipherboy-start-acme-docker-tests
branch
2 times, most recently
from
3f058e6
to
c3ca57d
Compare
stevendpclark
approved these changes
Apr 25, 2023
This starts a containerized ACME test suite using containers, running both Vault and Certbot (in standalone mode) in the container to ensure we successfully issue certificates. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
cipherboy
force-pushed
the
cipherboy-start-acme-docker-tests
branch
from
c3ca57d
to
6b94524
Compare
|
Thanks! Added certbot to the mirror and pushed the update. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This spins up Vault in a container image to allow other containers (in this case, Certbot) to bidirectionally connect to/from Vault.
Based on top of #20247; will be rebased once that merges.
Ideally I'd like to spin up a DNS server that
certbothas a plugin for and update our configuration to allow specifying custom DNS resolvers for all challenge types.But we'll get there. For now, we use an
/etc/hosthack on the Vault container.