Skip to content

[patch] Support Let's Encrypt HTTP-01 for path routing mode - #2569

Open
praiyani6789 wants to merge 11 commits into
masterfrom
le-pbr
Open

[patch] Support Let's Encrypt HTTP-01 for path routing mode#2569
praiyani6789 wants to merge 11 commits into
masterfrom
le-pbr

Conversation

@praiyani6789

@praiyani6789 praiyani6789 commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Description

Adds Let's Encrypt HTTP-01 certificate management as an opt-in feature for MAS installs using path-based routing. Introduces new CLI flag --le-email [ACME email], interactive prompts, non-interactive validation, install summary output, and Tekton pipeline wiring. Also add unit tests for new flag to cover edge cases.

  • Interactive mode: after routing mode is confirmed as path, prompts the user to opt into Let's Encrypt and collects the email address.
  • Non-interactive mode: pass --le-email [ACME email] to enable let's encrypt, it validates that --le-email [ACME email] is only used with --routing path.

NOTE: Let’s Encrypt can work with both custom and default domains. Therefore, we can use Let’s Encrypt http01 in mas for default domains instead of using a self-signed CA. Core can use the Let’s Encrypt issuer to obtain the public certificate and then pass it to the other applications in path mode.

Jira Issue

MASCORE-13570

Guidance for Reviewers

Testing

  • Interactive mode:
Screenshot 2026-08-31 at 2 37 48 PM
  • Non-interactive mode validations:
Screenshot 2026-09-01 at 8 07 15 PM
  • Summary preview:
Screenshot 2026-09-01 at 1 08 51 PM
  • Test on ibm cloud:
Screenshot 2026-08-20 at 9 47 11 PM

@praiyani6789
praiyani6789 marked this pull request as ready for review September 1, 2026 17:13
@praiyani6789
praiyani6789 requested a review from a team as a code owner September 1, 2026 17:13
IanBoden
IanBoden previously approved these changes Sep 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants