opendev/system-config
Code Issues Proposed changes

Add missing Lets Encrypt certs to ssldomains list

Browse Source 
A bunch of the sites we've started managing LE certs for are not
getting their expirations checked, so fix that. In particular, sites
recently moved off the multi-domain SAN cert for the old
static.openstack.org server (omitted the logs site as it's
deprecated), and many of the rebuilt CI mirrors (with the exception
of mirror01.gra1.ovh.opendev.org which is presently in a SHUTOFF
state for unknown reasons). Also add graphite which was previously
missed, and review-dev because we can now that it's no longer
sporting snakeoil.

When this merges, we're also going to start getting alerts for an
expired cert on mirror.gra1.ovh.opendev.org, unless someone gets a
chance to look into it first.

Change-Id: I98a98e0d2ff081c51c33d980274f3ee8c0266802
This commit is contained in:
Jeremy Stanley 2020-02-07 15:23:42 +00:00
parent 0d308a3d10
commit bc0480756c
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
modules/openstack_project/files/ssl_cert_check/ssldomains
View File

@ -18,17 +18,28 @@ gitea05.opendev.org 3000
gitea06.opendev.org 3000
gitea07.opendev.org 3000
gitea08.opendev.org 3000
governance.openstack.org 443
graphite.opendev.org 443
insecure-ci-registry.opendev.org 5000
mirror.dfw.rax.opendev.org 443
mirror.gra1.ovh.opendev.org
mirror.mtl01.inap.opendev.org 443
mirror.ord.rax.opendev.org 443
mirror.regionone.fortnebula.opendev.org 443
mirror.regionone.linaro-us.opendev.org 443
opendev.org 443
openstackid-dev.openstack.org 443
openstackid.org 443
refstack.openstack.org 443
review.opendev.org 443
review.openstack.org 443
review-dev.opendev.org 443
security.openstack.org 443
static.openstack.org 443
storyboard.openstack.org 443
survey.openstack.org 443
tarballs.opendev.org 443
tarballs.openstack.org 443
translate.openstack.org 443
wiki.openstack.org 443
www.openstack.org 443