Maniphest T208212

Provision unique LE accounts for each certcentral node
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Vgutierrez
	Oct 29 2018, 11:08 AM

Description

As discussed in -traffic, to mitigate the risk of reaching several rate limits accounted per user account, certcentral1001 and certcentral2001 should use different Let's Encrypt accounts.

Details

Subject	Repo	Branch	Lines +/-
certcentral: Switch to LE ACMEv2 production environment	operations/puppet	production	+6 -6
secret: add dummy LE ACMEv2 private keys for certcentral[12]001	labs/private	master	+6 -0
certcentral: Provide unique LE accounts for each certcentral hosts	operations/puppet	production	+8 -4
secret: Add dummy LE ACMEv2 staging private key for certcentral2001	labs/private	master	+3 -0

Customize query in gerrit

Related Objects

Mentioned In: T207476: Create production LE accounts

Event Timeline

Vgutierrez created this task.Oct 29 2018, 11:08 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 29 2018, 11:08 AM

Vgutierrez renamed this task from Provision unique LE accounts for each cercentral node to Provision unique LE accounts for each certcentral node.Oct 29 2018, 11:09 AM

Vgutierrez triaged this task as Medium priority.

Vgutierrez updated the task description. (Show Details)

Change 470403 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[labs/private@master] secret: Add dummy LE ACMEv2 staging private key for certcentral2001

https://gerrit.wikimedia.org/r/470403

Change 470403 merged by Vgutierrez:
[labs/private@master] secret: Add dummy LE ACMEv2 staging private key for certcentral2001

https://gerrit.wikimedia.org/r/470403

Change 470404 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] certcentral: Provide unique LE accounts for each certcentral hosts

https://gerrit.wikimedia.org/r/470404

Change 470404 merged by Vgutierrez:
[operations/puppet@production] certcentral: Provide unique LE accounts for each certcentral hosts

https://gerrit.wikimedia.org/r/470404

Vgutierrez mentioned this in T207476: Create production LE accounts.Nov 5 2018, 3:44 PM

Change 471751 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[labs/private@master] secret: add dummy LE ACMEv2 private keys for certcentral[12]001

https://gerrit.wikimedia.org/r/471751

Change 471753 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] certcentral: Switch to LE ACMEv2 production environment

https://gerrit.wikimedia.org/r/471753

Change 471751 merged by Vgutierrez:
[labs/private@master] secret: add dummy LE ACMEv2 private keys for certcentral[12]001