Add Dashboard page

[shibayan]

Implement a new web UI in /dashboard to add certificate issuance status and clear links to each UI.

Features

• Show certificates that are nearing expiration
• Add / Renew certificate in modal
  • Add
  • Renew
  • Revoke Add support for certificate revocation. #250
  • Details

Future

• Execution history of the renewal process
• Configuration validation (DNS Provider / IAM, etc.)

[GeorgDangl]

That would be really useful, thank you for considering that! It would help a lot in keeping track which certificates are issued by the tool.

[adagioajanes]

This would be unbelievably useful. KeyVault doesn't give the best view for managing these certificates. At least being able to see the status of certificates issued with this app would be stellar.

[shibayan]

Thanks, I'm going to create a great dashboard, but I haven't made much progress lately because I haven't had much time to work on it.

[shibayan]

I'm pasting a screenshot of the work in progress in the comments of #342. Please comment if you have any feedback.

[shibayan]

The dashboard feature is now available as a preview in the recently released v3.7.0.

[siarheikuzmich]

Very cool feature! We are trying to implement it in our project, but faced with the next problem:
dashboard does not show/add certificates, just an empty field

We use GoDaddy, api credentials was provided to function as key-value parameters. GoDaddy api key was generated under admin account. Certificate permissions for Key Vault selected 16 items

[shibayan]

@siarheikuzmich Try the legacy Web UI. https://YOUR-FUNCTIONS.azurewebsites.net/add-certificate

If you still can't see your domain list, there may be a problem with your GoDaddy credentials or the status of your domain. If the status of the domain is anything other than ACTIVE, it will not be displayed, so you will need to type the following command to verify.

curl -X GET "https://api.godaddy.com/v1/domains?statuses=ACTIVE&includes=nameServers" -H "Accept: application/json" -H "Authorization: sso-key <API Key>:<API Secret>"

[siarheikuzmich]

@shibayan you are right! I generated api keys via GoDaddy delegated account which does not have permission to domains record. When owner generate keys from his account all is ok. Thank you very much!

[TheMorganator]

Hello. Does the introduction of the dashboard disable the legacy /add-certificate and /bulk-certificate paths? They no longer work on our deployments, and I was wondering if this was by design. It would be great to have all URLs working.

[shibayan]

@TheMorganator Yes, the old UI (add-certificate / bulk-certificate) has been removed. It will now be invested in dashboard functionality.
Feedback on how to improve the dashboard is always welcome.

[shibayan]

@Apps-Limited Read the document. Also, I don't want comments that have nothing to do with this issue.
https://github.com/shibayan/keyvault-acmebot/wiki#usage

[JelteF]

Having a delete and/or rename option would be very useful. I created a cert with a bit of a bad name, but there's no clear way to remove it or change that from the dashboard.

[shibayan]

It is not intended to be a management dashboard for Key Vault itself. It is intended to be a dashboard as a certificate issuing tool using ACME.

[tpetersvw]

a feature where you can do a selection of certificates (one , multiple, all) and perform the actions (Renew, Revoke and additionally Delete) also having the option to do a manual certificate (where you dont have dns api integration and need to add a acme dns record to issue the certificate manually) would be nice.

[shibayan]

Thanks for the feedback, Acmebot does not take manual DNS record setting into account as it is intended to be automated.

[tpetersvw]

thanks for your reaction, i can appreciate this application has automation in mind and won't use manual dns record validation. How about the features in the first sentence of my question?

[pufferandrew]

@siarheikuzmich Try the legacy Web UI. https://YOUR-FUNCTIONS.azurewebsites.net/add-certificate

If you still can't see your domain list, there may be a problem with your GoDaddy credentials or the status of your domain. If the status of the domain is anything other than ACTIVE, it will not be displayed, so you will need to type the following command to verify.

curl -X GET "https://api.godaddy.com/v1/domains?statuses=ACTIVE&includes=nameServers" -H "Accept: application/json" -H "Authorization: sso-key <API Key>:<API Secret>"

Would it be possible to query for all domains in a GoDaddy account? Most of our domains are DNS Hosted so they have a status of PENDING_DNS_ACTIVE and don't show up in the dashboard. I have successfully tested adding records to those domains via the API without issues.

[shibayan]

@pufferandrew GoDaddy's documentation is unclear what PENDING_DNS_ACTIVE stands for, so we only show the sure ACTIVE. If PENDING_DNS_ACTIVE can also be used without problems, we would consider relaxing the condition.

[pir8g33k]

@shibayan can we add more options when the certificate will renew like for example 10 days before the actual expiration and display on dashboard when it will renew based on the date we set?

[shibayan]

I have created a new milestone and will manage the dashboard issues separately.

[rushikesh-outbound]

First, that's a great tool, and Thank you for the solution!

One thing I want to bring to your attention is that revoking certificates does not delete the certificate from Keyvault. If this by design with any special reason?