53338653fd
We have a single vhost for zuul-ci.org and zuulci.org, so we should request a cert with all 4 hostnames. We also have a separate vhost to handle the git.zuul-ci.org redirect; add a cert request for that so we can manage it with LE. Change-Id: Ia2ba3d3ad4f5ab0356ede371d94af3c77a89eda1
Generate letsencrypt certificates
This must run after the letsencrypt-install-acme-sh,
letsencrypt-request-certs and
letsencrypt-install-txt-records roles. It will run the
acme.sh process to create the certificates on the host.
Role Variables
If set to True, will locally generate self-signed certificates in the same locations the real script would, instead of contacting letsencrypt. This is set during gate testing as the authentication tokens are not available.
If set to True will use the letsencrypt staging environment, rather than make production requests. Useful during initial provisioning of hosts to avoid affecting production quotas.
The same variable as described in
letsencrypt-request-certs.