{"action":"created","issue":{"url":"https://api.github.com/repos/ByteInternet/hypernode-docker/issues/6","repository_url":"https://api.github.com/repos/ByteInternet/hypernode-docker","labels_url":"https://api.github.com/repos/ByteInternet/hypernode-docker/issues/6/labels{/name}","comments_url":"https://api.github.com/repos/ByteInternet/hypernode-docker/issues/6/comments","events_url":"https://api.github.com/repos/ByteInternet/hypernode-docker/issues/6/events","html_url":"https://github.com/ByteInternet/hypernode-docker/issues/6","id":336313764,"node_id":"MDU6SXNzdWUzMzYzMTM3NjQ=","number":6,"title":"Generated Let's Encrypt certificate invalid","user":{"login":"peterjaap","id":431360,"node_id":"MDQ6VXNlcjQzMTM2MA==","avatar_url":"https://avatars2.githubusercontent.com/u/431360?v=4","gravatar_id":"","url":"https://api.github.com/users/peterjaap","html_url":"https://github.com/peterjaap","followers_url":"https://api.github.com/users/peterjaap/followers","following_url":"https://api.github.com/users/peterjaap/following{/other_user}","gists_url":"https://api.github.com/users/peterjaap/gists{/gist_id}","starred_url":"https://api.github.com/users/peterjaap/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/peterjaap/subscriptions","organizations_url":"https://api.github.com/users/peterjaap/orgs","repos_url":"https://api.github.com/users/peterjaap/repos","events_url":"https://api.github.com/users/peterjaap/events{/privacy}","received_events_url":"https://api.github.com/users/peterjaap/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-06-27T17:04:19Z","updated_at":"2018-06-27T19:41:57Z","closed_at":"2018-06-27T17:27:09Z","author_association":"NONE","body":"We use this Docker container in our CI/CD process with Gitlab's Review Apps. We deploy it on a Kubernetes cluster and then request an LE certficate for the auto-generated hostname. But the certficate isn't valid;\r\n\r\n![image](https://user-images.githubusercontent.com/431360/41988529-b475f2b0-7a3c-11e8-8b30-08bf70fb8a3c.png)\r\n\r\nAlthough my pipeline log says it's just fine;\r\n\r\n```\r\n[clientname-123-issue-slug.elgentos.io] > echo \"clientname-123-issue-slug.elgentos.io\" > /data/web/.dehydrated/domains.txt && dehydrated -c --create-dirs && hypernode-ssl-config-generator\r\n[clientname-123-issue-slug.elgentos.io] < # INFO: Using main config file /etc/dehydrated/config\r\n[clientname-123-issue-slug.elgentos.io] < + Generating account key...\r\n[clientname-123-issue-slug.elgentos.io] < + Registering account key with ACME server...\r\n[clientname-123-issue-slug.elgentos.io] < Processing clientname-123-issue-slug.elgentos.io\r\n[clientname-123-issue-slug.elgentos.io] <  + Signing domains...\r\n[clientname-123-issue-slug.elgentos.io] <  + Creating new directory /data/web/certs/clientname-123-issue-slug.elgentos.io ...\r\n[clientname-123-issue-slug.elgentos.io] <  + Generating private key...\r\n[clientname-123-issue-slug.elgentos.io] <  + Generating signing request...\r\n[clientname-123-issue-slug.elgentos.io] <  + Requesting challenge for clientname-123-issue-slug.elgentos.io...\r\n[clientname-123-issue-slug.elgentos.io] <  + Responding to challenge for clientname-123-issue-slug.elgentos.io...\r\n[clientname-123-issue-slug.elgentos.io] <  + Challenge is valid!\r\n[clientname-123-issue-slug.elgentos.io] <  + Requesting certificate...\r\n[clientname-123-issue-slug.elgentos.io] <  + Checking certificate...\r\n[clientname-123-issue-slug.elgentos.io] <  + Done!\r\n[clientname-123-issue-slug.elgentos.io] <  + Creating fullchain.pem...\r\n[clientname-123-issue-slug.elgentos.io] < INFO:kamikaze.sslconfig.main:Generating ssl config for clientname-123-issue-slug.elgentos.io\r\n[clientname-123-issue-slug.elgentos.io] <  + Done!\r\n[clientname-123-issue-slug.elgentos.io] < INFO:kamikaze.sslconfig.main:Generating ssl config for clientname-123-issue-slug.elgentos.io\r\n```"},"comment":{"url":"https://api.github.com/repos/ByteInternet/hypernode-docker/issues/comments/400805193","html_url":"https://github.com/ByteInternet/hypernode-docker/issues/6#issuecomment-400805193","issue_url":"https://api.github.com/repos/ByteInternet/hypernode-docker/issues/6","id":400805193,"node_id":"MDEyOklzc3VlQ29tbWVudDQwMDgwNTE5Mw==","user":{"login":"peterjaap","id":431360,"node_id":"MDQ6VXNlcjQzMTM2MA==","avatar_url":"https://avatars2.githubusercontent.com/u/431360?v=4","gravatar_id":"","url":"https://api.github.com/users/peterjaap","html_url":"https://github.com/peterjaap","followers_url":"https://api.github.com/users/peterjaap/followers","following_url":"https://api.github.com/users/peterjaap/following{/other_user}","gists_url":"https://api.github.com/users/peterjaap/gists{/gist_id}","starred_url":"https://api.github.com/users/peterjaap/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/peterjaap/subscriptions","organizations_url":"https://api.github.com/users/peterjaap/orgs","repos_url":"https://api.github.com/users/peterjaap/repos","events_url":"https://api.github.com/users/peterjaap/events{/privacy}","received_events_url":"https://api.github.com/users/peterjaap/received_events","type":"User","site_admin":false},"created_at":"2018-06-27T19:41:57Z","updated_at":"2018-06-27T19:41:57Z","author_association":"NONE","body":"@vdloo unfortunately `/usr/bin/nginx_config_reloader` can only be run by root and we use the app user to deploy to (and thus request the LE certificate with)."}}
{"actor":{"display_login":"peterjaap"}}