Re: Update ssl certs

2016-03-29 Thread Philippe Lafoucrière
On Fri, Mar 18, 2016 at 4:34 PM, Erik Jacobs wrote: > Perhaps this is a stupid question, but why couldn't Puppet call to the API > using the "oc" client and update the routes' certificate information? > > We are doing things like this with Ansible already today. > We

Re: Update ssl certs

2016-03-20 Thread David Eads
I'm not aware of any plans to support a cross-namespace references for namespace scoped resources. As for routes in particular, openshift routes don't even have secret references, it's embedded right there in the type. The only way I'd know to do it is a label selected `oc get` (btw, label

Re: Update ssl certs

2016-03-19 Thread Philippe Lafoucrière
On Thu, Mar 17, 2016 at 3:00 PM, Jonathan Yu wrote: > Wait, are you sharing an SSL private key with multiple projects? That > shouldn't be done between applications, let alone across projects. If > you're just sharing a certificate (public key), then you could use a common >

Re: Update ssl certs

2016-03-19 Thread Jonathan Yu
On Thu, Mar 17, 2016 at 11:51 AM, Philippe Lafoucrière < philippe.lafoucri...@tech-angels.com> wrote: > Hi, > > We need to update a ssl certificate used in many projects. This is > generally handled by puppet, but with openshift I don't see a way to update > several routes at once. > Is there