Differential D7598

Add a time.sleep in the certbot gandi dns-01 hook
ClosedPublic
Actions

Authored by olasd on Apr 19 2022, 6:39 PM.

Details

Reviewers

ardumont

Group Reviewers

System administrators

Commits

rSPSITE22e2d04ae7c5: Add a time.sleep in the certbot gandi dns-01 hook

Summary

This regularly fails to validate because Gandi LiveDNS takes a bit to
sync all the anycast nodes, and the secondary letsencrypt validation can
see stale records.

Test Plan

looks like this made the last renewal go through

Diff Detail

Repository

rSPSITE puppet-swh-site

Branch

staging

Lint

No Linters Available

Unit

No Unit Test Coverage

Build Status

Buildable 28553
Build 44642: arc lint + arc unit

Event Timeline

olasd created this revision.Apr 19 2022, 6:39 PM

Herald added a reviewer: System administrators. · View Herald TranscriptApr 19 2022, 6:39 PM

Harbormaster completed remote builds in B28553: Diff 27528.Apr 19 2022, 6:39 PM

olasd requested review of this revision.Apr 19 2022, 6:39 PM

ardumont accepted this revision.Apr 20 2022, 10:49 AM

This revision is now accepted and ready to land.Apr 20 2022, 10:49 AM

Closed by commit rSPSITE22e2d04ae7c5: Add a time.sleep in the certbot gandi dns-01 hook (authored by olasd). · Explain WhyApr 20 2022, 12:59 PM

This revision was automatically updated to reflect the committed changes.

olasd added a commit: rSPSITE22e2d04ae7c5: Add a time.sleep in the certbot gandi dns-01 hook.

Revision Contents
Changeset List

Path

Size

site-modules/

profile/

templates/

letsencrypt/

letsencrypt_gandi_livedns.erb

6 lines

Diff 27528

View Options

site-modules/profile/templates/letsencrypt/letsencrypt_gandi_livedns.erb

Add a time.sleep in the certbot gandi dns-01 hookClosedPublicActions