openstack-ansible/releasenotes/notes/certbot_ha-83b56aed3f360dba.yaml
Dmitriy Rabotyagov b6b6f6eb75 Create Ussuri
This effectively:
- Freeze roles, to allow their branching.
- Bump upstream repos to point to their Ussuri equivalent, allowing
our regular updates to continue with ussuri.

Change-Id: Iafbd47c92cc4090640af3cda896d097daa167daa
2020-05-30 20:49:27 +00:00

12 lines
594 B
YAML

---
features:
- |
Multiple HAProxy nodes can now be deployed in an HA configuration with
keepalived and LetsEncrypt certificates. Certbot can be treated as a
backend service for haproxy and acme-challenge requests from LetsEncrypt
can be directed to whichever HAProxy server is running a certificate
renewal. New variables are defined for frontend ACLs and options
to be passed to Certbot which enable this new feature, but the majority
of the required configuration is done via the existing HAProxy service
setup. An example is provided in the documentation.