Add a time.sleep in the certbot gandi dns-01 hook (!127) · Merge requests · Platform / Infrastructure / Puppet / puppet-swh-site

Nicolas Dandrimont requested to merge generated-differential-D7598-source into generated-differential-D7598-target Apr 19, 2022

This regularly fails to validate because Gandi LiveDNS takes a bit to sync all the anycast nodes, and the secondary letsencrypt validation can see stale records.

Test Plan

looks like this made the last renewal go through

Migrated from D7598 (view on Phabricator)

Add a time.sleep in the certbot gandi dns-01 hook

Test Plan

Merge request reports