Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Cloudflare DNS plugin support #238

Conversation

CallumBanbery
Copy link
Contributor

Pull Request (PR) description

Adding feature support for the Certbot DNS Cloudflare plugin.

The plugin itself allows for two types of authentication, API token or Global API Key and corresponding Email so both are supported in this change.

Cloudflare recommends API tokens as they're more secure, so this module will prioritize token authentication over key authentication if both are provided.

This Pull Request (PR) fixes the following issues

n/a

@CallumBanbery CallumBanbery force-pushed the feature/plugins/dns-cloudflare branch 3 times, most recently from 5db46ea to 0f17906 Compare February 24, 2021 14:11
@CallumBanbery
Copy link
Contributor Author

A bunch of the CI pipelines are failing with the same error, unrelated to my change.

Notice: /Stage[main]/Letsencrypt/Exec[initialize letsencrypt]/returns: Upgrading certbot-auto 0.39.0 to 1.12.0...

Notice: /Stage[main]/Letsencrypt/Exec[initialize letsencrypt]/returns: Replacing certbot-auto...

Notice: /Stage[main]/Letsencrypt/Exec[initialize letsencrypt]/returns: Your system is not supported by certbot-auto anymore.

Notice: /Stage[main]/Letsencrypt/Exec[initialize letsencrypt]/returns: Certbot cannot be installed.

I'm unsure how to proceed since it's an underlying certbot installation issue rather than an error introduced from my changes.

@kenyon
Copy link
Member

kenyon commented Mar 1, 2021

@CallumBanbery these failures are happening in #235, which is where we could use help fixing this.

@vox-pupuli-tasks
Copy link

Dear @CallumBanbery, thanks for the PR!

This is Vox Pupuli Tasks, your friendly Vox Pupuli Github Bot. I noticed that your pull request has CI failures. Can you please have a look at the failing CI jobs?
If you need any help, you can reach out to us on our IRC channel voxpupuli on Freenode or our Slack channel voxpupuli at slack.puppet.com.
You can find my sourcecode at voxpupuli/vox-pupuli-tasks

@ekohl
Copy link
Member

ekohl commented Jun 30, 2021

#235 was merged and CI is green again. Would mind rebasing?

Adding feature support for the Certbot DNS Cloudflare plugin.  The
plugin itself allows for two types of authentication, API token or
Global API Key and corresponding Email; as Cloudflare recommends
the use of API tokens since they're more secure the plugin will
prioritize token authentication if both a token and key are provided.
@CallumBanbery CallumBanbery force-pushed the feature/plugins/dns-cloudflare branch from 0f17906 to abe4750 Compare July 1, 2021 08:57
@CallumBanbery
Copy link
Contributor Author

I need maintainer approval to run the CI

@@ -1,3 +1,4 @@
---
letsencrypt::plugin::dns_rfc2136::package_name: 'python3-certbot-dns-rfc2136'
letsencrypt::plugin::dns_route53::package_name: 'python3-certbot-dns-route53'
letsencrypt::plugin::dns_cloudflare::package_name: 'python3-certbot-dns-cloudflare'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you add the same thing for Ubuntu 20.04?

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello @CallumBanbery, Just a quick question can this be used as is with Ubuntu 20.04, or is this not possible at the moment. Or is there a better way to implement dns certbot for cloudflare, mainly looking to do this with a wildcard.
Thank you in advance.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I haven't personally tested Ubuntu 20.04, however apt search from my machine shows the same package name in use, so I don't foresee any reason why it wouldn't work.

@bkuebler
Copy link
Contributor

I forked the source repository and did all the required tasks mentioned here, because i need this feature and want to use it soon. I opened a PR #279 this can be replaced by this if the author @CallumBanbery will not update soon its PR.

@bkuebler
Copy link
Contributor

@ekohl ore someone else who has the permission. This PR could be closed now.

@ekohl
Copy link
Member

ekohl commented Apr 22, 2022

Thanks!

@ekohl ekohl closed this Apr 22, 2022
@CallumBanbery CallumBanbery deleted the feature/plugins/dns-cloudflare branch June 9, 2022 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants