puppet-letsencrypt icon indicating copy to clipboard operation
puppet-letsencrypt copied to clipboard

Add dns-azure to allowed plugins

Open yachub opened this issue 2 years ago • 2 comments

Pull Request (PR) description

Add dns-azure to list of allowed plugins.

This is one of the 3rd party plugins listed at https://eff-certbot.readthedocs.io/en/stable/using.html#third-party-plugins

Caveat

I'm currently using this module on my branch on a RHEL 9 host, but the only caveat is the fastest way I found to get the plugin working was via the snap package:

include snap

package { 'certbot':
  ensure          => installed,
  provider        => 'snap',
  install_options => ['classic'],
}

file { '/usr/bin/certbot':
  ensure  => link,
  source  => '/snap/bin/certbot',
  require => Package['certbot'],
}

package { 'certbot-dns-azure':
  ensure          => installed,
  provider        => 'snap',
  install_options => ['channel=edge'],
  require         => Package['certbot'],
}

And also had to run snap set certbot trust-plugin-with-root=ok before the last package resource, but didn't take the time yet to examine what changed on disk in order to create an exec resource to do that.

yachub avatar Oct 01 '22 13:10 yachub

thanks for the PR! Can you please document your steps in the README.md?

bastelfreak avatar Oct 07 '22 11:10 bastelfreak

thanks for the PR! Can you please document your steps in the README.md?

Absolutely!

yachub avatar Oct 07 '22 12:10 yachub

@yachub kinda off-topic

Are you by any chance using my module ?

It has a snap_conf resource to set snap set certbot trust-plugin-with-root=ok but seems I forgot to document it on the readme file :p. You can check REFERENCE for more info.

Edit:

Something like this will work:

snap_conf { 'trust plugin with root dns-azure':
    ensure => present
    conf     => 'trust-plugin-with-root'
    value    => 'ok'
    snap     => 'certbot'
}

root-expert avatar Nov 25 '22 19:11 root-expert

Hello there 👋 Dropping a message on behalf of the infrastructure team for the Jenkins project. We would be interested by this feature as we have puppet-managed (private) VMs on Azure that would benefit from this.

Thanks for the huge work!

dduportal avatar Jan 12 '23 17:01 dduportal