Script to get Let's Encrypt public facing certs for an OpenShift v4 cluster

os4-acme-certs.sh

#!/bin/sh
DOMAIN="${1}"
EMAIL="${2}"

if [ "${#}" -ne 2 ]; then
	echo "USAGE: os4-acme-certs.sh clustername.basedomain.tld email@example.com"
	echo "QUITTING"
	exit 1
fi
	
OUT="$(env | grep ^AWS | wc -l)"
if [ ${?} -ne 0 ]; then
	echo "Please set the correct AWS environment variables to proceed"
	echo "QUITTING"
	exit 1
fi

OUT="$(which lego)"
if [ ${?} -ne 0 ]; then
	echo "You must download lego from https://github.com/go-acme/lego/releases to proceed"
	echo "QUITTING"
	exit 1
fi

if [ -f  .lego/certificates/apps.${DOMAIN}.crt ] || [ -f .lego/certificates/apps.${DOMAIN}.certs ]; then
	echo "Found previously issued lego certs, attempting to apply them"
else
	echo "No issued lego certs found.  Requesting them now"
	lego --dns route53  -a -m bharrington@redhat.com -d apps.${DOMAIN} -d *.apps.${DOMAIN} run
fi

oc project openshift-ingress

oc delete secret router-certs-default
oc create secret tls router-certs-default  --cert=.lego/certificates/apps.${DOMAIN}.crt --key=.lego/certificates/apps.${DOMAIN}.key
oc delete pods -l ingresscontroller.operator.openshift.io/deployment-ingresscontroller=default