Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[5.0] Backport 'Upgrade pip to fix installation issues in AMI (#5514)' #5529

Merged
merged 1 commit into from
Feb 11, 2021
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion assets/aws/files/bin/teleport-get-cert
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ then
fi

echo "No certs/keys found in ${TELEPORT_S3_BUCKET}. Going to request certificate for ${TELEPORT_DOMAIN_NAME}."
certbot certonly -n --agree-tos --email ${TELEPORT_DOMAIN_ADMIN_EMAIL} --dns-route53 -d ${TELEPORT_DOMAIN_NAME}
/usr/local/bin/certbot certonly -n --agree-tos --email ${TELEPORT_DOMAIN_ADMIN_EMAIL} --dns-route53 -d ${TELEPORT_DOMAIN_NAME}
echo "Got certificate for ${TELEPORT_DOMAIN_NAME}. Syncing to S3."

aws s3 sync /etc/letsencrypt/ s3://${TELEPORT_S3_BUCKET} --sse=AES256
2 changes: 1 addition & 1 deletion assets/aws/files/bin/teleport-renew-cert
Original file line number Diff line number Diff line change
Expand Up @@ -16,4 +16,4 @@ fi

# This is called periodically, if renewal is successful
# certs are uploaded to the S3 Bucket
certbot renew --deploy-hook=/usr/local/bin/teleport-upload-cert
/usr/local/bin/certbot renew --deploy-hook=/usr/local/bin/teleport-upload-cert
4 changes: 4 additions & 0 deletions assets/aws/files/install.sh
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,10 @@ rm -f /tmp/influxdb.rpm
# Certbot is a tool to request letsencrypt certificates,
# remove it if you don't need letsencrypt.
sudo yum -y install python3 python3-pip
# pip needs to be upgraded to work around issues with the 'cryptography' package
pip3 install --upgrade pip
# add new pip3 install location to PATH temporarily
export PATH=/usr/local/bin:$PATH
pip3 install -I awscli requests
pip3 install certbot certbot-dns-route53

Expand Down