bzed / bzed-dehydrated

Puppet module for centralized CSR signing using Let’s Encrypt™ and lukas2511/dehydrated - keeping your keys safe on the host they belong to.
9 stars 11 forks source link

How to detect finished deployment #14

Open cbergmann opened 5 years ago

cbergmann commented 5 years ago

Hi, I use this module in a custom vhost module to give certificates to internal hosts via dns-01 validation. My current problem is that after adding the vhost apache is configured to add a ssl vhost with the cerifificates but these are not there yet because of the workflow of this module. Therefore I want apache to only reconfigure after the certificates have been deployed. Is there a way (fact or defined resource) to detect that the certificate is finished deploying?

Kind regards Clemens.

bzed commented 5 years ago

Thats actually a good question, I need to figure that out or find a way, too... Didn't have the time for it unfortunately...

bzed commented 4 years ago

@cbergmann what you can do is to subscribe on the dehydrated class or (I think) on Dehydrated::Certificate['yourcert'], that should trigger a refresh on your service.