marthydavid / supermicro-letsencrypt

Docker container to install Supermicro IPMI TLS certificates via ACME

supermicro-letsencrypt

Docker container to install Supermicro IPMI TLS certificates via ACME

python script source

Config options

Option	Type	Default
IPMI_USERNAME	String	-
IPMI_PASSWORD	String	-
IPMI_DOMAIN	String	-
LE_EMAIL	String	-
LE_SERVER	String	https://acme-v02.api.letsencrypt.org/directory
DNS_PROVIDER	String (options of go-acme/lego )	route53
MODEL	String (X9-X13)	X11
FORCE_UPDATE	bool	false
DEBUG	any	-

Usage with Docker

docker run -v ~/.aws:/home/lego/.aws \
           -v ~/.lego:/home/lego/.lego \
           -e IPMI_USERNAME=ADMIN \
           -e IPMI_PASSWORD=ADMIN \
           -e IPMI_ADDRESS=ipmi.my.tld \
           -e LE_EMAIL=[e-mail] \
           -e DNS_PROVIDER=route53 \
           -e MODEL=X10 \
           ghcr.io/marthydavid/supermicro-letsencrypt

Usage with kubernetes cronjob

kubectl create configmap sm-ipmi-info \
        --from-literal=IPMI_USERNAME=ADMIN \
        --from-literal=IPMI_DOMAIN=ipmi.my.tld \
        --from-literal=LE_EMAIL=[e-mail] \
        --from-literal=DNS_PROVIDER=route53 \
        --from-literal=MODEL=X10
kubectl create secret generic sm-ipmi-secret \
        --from-literal=IPMI_PASSWORD=ADMIN \
        --from-literal=AWS_ACCESS_KEY_ID=blahblahblah \
        --from-literal=AWS_SECRET_ACCESS_KEY=blahblahblah

kubectl apply -f demo/kubernetes/cronjob.yaml
kubectl get cm,secret,cronjob

# To trigger a run:

kubectl create job --from cronjob/sm-letsencrypt sm-letsencrypt-first-run

kubectl logs -f sm-letsencrypt-first-run