search

jetstack / kube-lego

DEPRECATED: Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt
Apache License 2.0
2.16k stars 269 forks source link

Let's Encrypt Wildcard Support #322

Closed jesseshieh closed 6 years ago

jesseshieh commented 6 years ago

First of all, thanks for building kube-lego! It's really great.

Let's Encrypt is working on supporting wildcard certificates. It's not ready yet so this issue is really more of a placeholder feature request, but I'm wondering whether or not kube-lego plans to support wildcard certificates once they are available.

Thanks again!

Palakis commented 6 years ago

Update: starting from today (2018-03-13), Wildcard Support is live: https://community.letsencrypt.org/t/acme-v2-and-wildcard-certificate-support-is-live/55579

tmaier commented 6 years ago

I don't think so. See #318

Palakis commented 6 years ago

@tmaier Wilcard Support was staging-only until yesterday. It's now live on production.

Palakis commented 6 years ago

Anyway, it's still better to add this to cert-manager of course.

StephanX commented 6 years ago

letsencrypt's release note: https://community.letsencrypt.org/t/acme-v2-and-wildcard-certificate-support-is-live/55579

Would also love to start utilizing this.

pvsousalima commented 6 years ago

Thanks for this amazing project! Has anyone already tested with the new feature? Or has started to give support yet? Thanks!

Hagbarth commented 6 years ago

If there is any need for contributions to make this happen, I'm more than willing to work on it.

munnerz commented 6 years ago

kube-lego will never support let's encrypt wildcard certificates, not least because they require DNS01 validation to obtain.

If you want to get wildcard certs, try out the v0.3.0-alpha.1 release of cert-manager. I'm going to close this issue now as I don't think it's actionable!

justjanne commented 6 years ago

@munnerz cert-manager is significantly more complex to set up, and in many configurations, and fails without any useful error messages where kube-lego works fine. The EOL of kube-lego is problematic under that light.