Free https certificates on OpenShift
summary
Live demo shows installing openshift-acme to obtain free Let's Encrypt certificates for OpenShift Routes; controller creates a path-specific Route for /.well-known/acme-challenge and uses a headless Service plus self-created Endpoints to steer validation traffic into its pod so no router replacement is required. Certificates are written into the Route and a Secret, renewed automatically every 90 days. Deployment is two oc create commands and an annotation on the Route (value true); logs/events show successful issuance.
AI-written summary · about
chapters (8)
- 0:00The problem with certificates
- 2:00Exploring existing solutions
- 4:29Designing a new architecture
- 6:03Implementation challenges
- 8:01Improving developer experience
- 10:13Project maintenance and CI
- 13:04Demo and ease of use
- 16:21Q&A and future roadmap
