Live data from Hacker News

How to use Let's Encypt with Google Cloud Platform

medium.com

31–35 of 35 posts

Re: How to use Let's Encypt with Google Cloud Platform

#33
post #14

The fact that setting up SSL on Google's platform in 2017 requires reading a long article and repeating steps is really bad publicity - if this post is official it ought to be embarrassing. AWS, Heroku, Cloudflare have all moved on to automated certificate management for all their hosted services. http://docs.aws.amazon.com/acm/latest/userguide/acm-overview... https://devcenter.heroku.com/articles/automated-certifica…

Yup! I even link to the Amazon one in the tutorial, Google's is coming soon ( https://issuetracker.google.com/issues/35900034 ), and in the meanwhile this helps you get a cert.

Is this App Engine specific? Or will this also apply to https://cloud.google.com/load-balancing/ ?

Re: How to use Let's Encypt with Google Cloud Platform

#34
post #23

For the Container Engine part of GCP (and any Kubernetes installation really), this project automates everything away : https://github.com/jetstack/kube-lego

+1 well worth checking this tool out. Saved me a lot of effort setting up a GCP Kubernetes deployment two months ago. So far it has been a matter of set it and forget it.

Re: How to use Let's Encypt with Google Cloud Platform

#35

Earlier quoted context omitted.

It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.

SSL certificates can now be updated in GAE using the gcloud command[1]. You could combine that with lego[2] to renew a Let's Encrypt SSL certificate via DNS Challenge to automate the process until native automation is implemented in GAE. [1] https://cloud.google.com/appengine/docs/standard/python/usin... [2] https://thornelabs.net/2016/11/08/use-lego-gcloud-dns-and-dn...

Oh hot damn!

I've been waiting on API access to manage certs for a while.

Post reply on HN