Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix renewal of certs for Minio #10

Open
Tracked by #1397
himeshr opened this issue Aug 26, 2023 · 3 comments
Open
Tracked by #1397

Fix renewal of certs for Minio #10

himeshr opened this issue Aug 26, 2023 · 3 comments

Comments

@himeshr
Copy link
Contributor

himeshr commented Aug 26, 2023

Currently, the letsEncrypt certs are in a different folder than the place where we have the Minio certs folder "/etc/minio/ssl".

We need to add a deploy-hook to certbot to copy the renewed certs to "/etc/minio/ssl".

@himeshr himeshr moved this to New Issues in Avni Product Aug 26, 2023
@himeshr himeshr moved this from New Issues to Analysis Complete in Avni Product Aug 26, 2023
@mahalakshme
Copy link
Contributor

@himeshr whats the implication of not doing this? Will we face any issues doing renewal?

@himeshr
Copy link
Contributor Author

himeshr commented Sep 20, 2023

We would have to manually do a copy of renewed certificates to /etc/minio/ssl folder.
Minor impact, would be a small manual action every 90 days or so.

@himeshr
Copy link
Contributor Author

himeshr commented Dec 17, 2024

Manual steps to upgrade Minio certs on Minio staging

  1. Apply below patch to avni-infra repo and
    minio_cert_update.patch

  2. Run the below command

<pass variables keys n all> make minio-staging

@himeshr himeshr moved this from In Analysis Review to Focus Items in Avni Product Dec 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Focus Items
Development

No branches or pull requests

2 participants