Page MenuHomeDevCentral
Differential D4103

Allow to provide default options for acme.sh certificates
ClosedPublic
Actions

Authored by dereckson on May 20 2026, 22:19.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Jul 20, 05:19
Unknown Object (File)
Wed, Jul 15, 07:39
Unknown Object (File)
Wed, Jul 15, 05:31
Unknown Object (File)
Tue, Jul 14, 11:45
Unknown Object (File)
Tue, Jul 14, 09:14
Unknown Object (File)
Mon, Jul 13, 18:30
Unknown Object (File)
Sat, Jul 11, 05:53
Unknown Object (File)
Fri, Jul 10, 19:45
View All 51 Files
Subscribers
Duranzed

Details

Reviewers
dereckson
Maniphest Tasks
T2043: Switch to acme.sh instead of certbot
Commits
rOPS10b107344c7a: Allow to provide default options for acme.sh certificates
Summary

On Alkane PaaS, all certificates have a similar reload configuration,
ie to call the nginx reload script.

This change introduces for this scenario:

  • a new pillar certificates_default_options
  • a new Salt module certificates to merge it with certificates_options

Co-authored-by: Sami Baghdadi <samlmrb@outlook.com>

Test Plan
  • unit test provicded for new module
  • D4102 for deployment on web-001

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
_modules/
30 lines
_tests/
data/
pillar/
13 lines
modules/
38 lines
roles/
core/
certificates/
2 lines

Diff 10835

View Options

_modules/certificates.py

Loading...
View Options

_tests/data/pillar/certificates.yaml

Loading...
View Options

_tests/modules/test_certificates.py

Loading...
View Options

roles/core/certificates/acmesh.sls

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator