You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Current »

Finally! 

See also:

Go to  https://domains.google.com and create new wildcard record for *.whatever.

Clone the certbot repo and install the package (I'm using Docker).

$ git clone https://github.com/certbot/certbot
$ cd certbot
$ docker run -v `pwd`:/certbot -it python bash
# cd /certbot
# python setup.py install


Since Google Domains doesn't have an API, need to use the manual feature:

$ certbot certonly --manual -d *.whatever.ndslabs.org --agree-tos --no-bootstrap --server https://acme-v02.api.letsencrypt.org/directory
...
Please deploy a DNS TXT record under the name
_acme-challenge.whatever.ndslabs.org with the following value:

XXuXXmIvjuvCNa-cXXoX4Xy0c2VDkbQrNnp3V4qrnXo

Before continuing, verify the record is deployed.

Now, go to Google domains and add a TXT record for *.whatever using the above value:

Login to Google Domains page.
Click DNS tab.
Scroll down to Custom resource records.
Name: *.whatever
Type:  TXT
TTL: 1h
Data: Value from above

Wait until the name resolves:

$ nslookup -type=TXT _acme-challenge.whatever.ndslabs.org
Server:		192.168.1.1
Address:	192.168.1.1#53

Non-authoritative answer:
_acme-challenge.whatever.ndslabs.org	text = "XXuXXmIvjuvCNa-cXXoX4Xy0c2VDkbQrNnp3V4qrnXo"

In the certbot window, Press Enter to Continue.  This will create the certificate in /etc/letsencrypt/live/domain.  


kubectl create secret generic ndslabs-tls-secret --from-file=tls.crt=fullchain.pem --from-file=tls.key=privkey.pem --namespace=default


A few things to note: 

  • No labels