Page MenuHomePhabricator

Provision unique LE accounts for each certcentral node
Closed, ResolvedPublic

Description

As discussed in -traffic, to mitigate the risk of reaching several rate limits accounted per user account, certcentral1001 and certcentral2001 should use different Let's Encrypt accounts.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 29 2018, 11:08 AM
Vgutierrez renamed this task from Provision unique LE accounts for each cercentral node to Provision unique LE accounts for each certcentral node.Oct 29 2018, 11:09 AM
Vgutierrez triaged this task as Medium priority.
Vgutierrez updated the task description. (Show Details)

Change 470403 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[labs/private@master] secret: Add dummy LE ACMEv2 staging private key for certcentral2001

https://gerrit.wikimedia.org/r/470403

Change 470403 merged by Vgutierrez:
[labs/private@master] secret: Add dummy LE ACMEv2 staging private key for certcentral2001

https://gerrit.wikimedia.org/r/470403

Change 470404 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] certcentral: Provide unique LE accounts for each certcentral hosts

https://gerrit.wikimedia.org/r/470404

Change 470404 merged by Vgutierrez:
[operations/puppet@production] certcentral: Provide unique LE accounts for each certcentral hosts

https://gerrit.wikimedia.org/r/470404

Change 471751 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[labs/private@master] secret: add dummy LE ACMEv2 private keys for certcentral[12]001

https://gerrit.wikimedia.org/r/471751

Change 471753 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] certcentral: Switch to LE ACMEv2 production environment

https://gerrit.wikimedia.org/r/471753

Change 471751 merged by Vgutierrez:
[labs/private@master] secret: add dummy LE ACMEv2 private keys for certcentral[12]001

https://gerrit.wikimedia.org/r/471751

Change 471753 merged by Vgutierrez:
[operations/puppet@production] certcentral: Switch to LE ACMEv2 production environment

https://gerrit.wikimedia.org/r/471753

Vgutierrez closed this task as Resolved.Nov 6 2018, 1:11 PM