search

tazjin / kubernetes-letsencrypt

A Kubernetes controller to retrieve Let's Encrypt certificates based on service annotations (unmaintained)
MIT License
115 stars 14 forks source link

Re-use previously completed authorizations if they are still valid #53

Closed tazjin closed 7 years ago

tazjin commented 7 years ago

This allows us to re-use previously completed challenges that are still valid for the account key.

In practice this will significantly reduce the time it takes to re-provision certificates with only minor changes to the SAN list.

Fixes #52

tazjin commented 7 years ago

For some of my setups this is reducing reprovisioning time from >10-15 to 2-3 minutes! 👍

@ahume Are you interested in testing this in your setup? I find that doing fewer GCP challenges also reduces the "risk" of running into #14