mx-out0[12].cloudinfra.eqiad.wikimedia.cloud -- puppet failures caused by cert exhaustion
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Andrew
	Dec 22 2020, 10:02 PM

Description

"type": "urn:acme:error:rateLimited",
3:38 PM "detail": "Error creating new cert :: too many certificates already issued for exact set of domains: mx-out02.wmflabs.org: see https://letsencrypt.org/docs/rate-limits/",

This may be from recent puppet refactors. This might be a good time to adopt acme-chief here if it's not used already; I believe we have a working acme-chief install in that project already.

Related Objects

Mentioned Here: T252199: Stop using letsencrypt::cert::integrated
T260834: Stop using letsencrypt::cert::integrated on mx-out*.cloudinfra

Event Timeline

Andrew created this task.Dec 22 2020, 10:02 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 22 2020, 10:02 PM

Dzahn removed a subscriber: Mutante.Dec 22 2020, 10:24 PM

This may be from recent puppet refactors

I doubt it. The last edit to profile::mail::smarthost was in March 2019

This is T260834 and T252199. As it was announced there the renewal would stop working in about a year.

I think I can work on this.

aborrero closed this task as Resolved.Jan 7 2021, 11:20 AM

mx-out0[12].cloudinfra.eqiad.wikimedia.cloud -- puppet failures caused by cert exhaustionClosed, ResolvedPublicActions

Description

Related Objects

Event Timeline

mx-out0[12].cloudinfra.eqiad.wikimedia.cloud -- puppet failures caused by cert exhaustion
Closed, ResolvedPublic
Actions