Skip to content

docs(EDRT-9031): Custom certificates for GCDN with Bot Protection#10121

Open
john-lauro wants to merge 4 commits into
mainfrom
edrt-9031/custom-cert-bot-protection-docs
Open

docs(EDRT-9031): Custom certificates for GCDN with Bot Protection#10121
john-lauro wants to merge 4 commits into
mainfrom
edrt-9031/custom-cert-bot-protection-docs

Conversation

@john-lauro

Copy link
Copy Markdown
Member

Summary

Custom Certificates on Pantheon Advanced and Global CDN - Adds customer-facing documentation for custom certificates on GCDN with Bot Protection, including wildcard certificate support (EDRT-9031).

Effect

The following changes are already committed:

  • Adds a GCDN with Bot Protection tab to the Custom Certificates page covering custom and wildcard (*.example.com) certificates
  • Documents the flow where a domain is first secured with Let's Encrypt and the custom certificate replaces it, plus the CAA-blocked path where a CSE applies the certificate directly
  • Notes that CDN-specific DNS values (CNAME/A/AAAA) are obtained by working with a Customer Success Engineer
  • Adds a CAA-records note for the LE-first flow
  • Removes the outdated "alternative CDN" downgrade reference, since this is now a primary CDN option

Remaining Work and Prerequisites

The following changes still need to be completed:

  • Confirm renewal behavior (reuse CSR vs. mint new) and add a note if the customer experience differs
  • CSE runbook updates (Terminus command, openssl verification) — tracked separately; these live in internal docs, not this repo

Dependencies and Timing

  • Depends on the GCDN with Bot Protection custom-cert feature shipping (EDRT-9029 / EDRT-7933)

Release:

  • After date: aligned with feature GA

…mentation

- Add a GCDN with Bot Protection tab covering custom and wildcard certs
- Document the LE-first then custom-cert flow and the CAA-blocked path
- Note CDN-specific DNS values are obtained via CSE
- Remove outdated alternative-CDN downgrade reference
@john-lauro
john-lauro requested a review from a team as a code owner June 18, 2026 15:24
@pantheon-site-integration
pantheon-site-integration Bot had a problem deploying to pr-10121 June 18, 2026 15:24 Failure
@john-lauro
john-lauro marked this pull request as draft June 18, 2026 15:25
…-bot-protection-docs

# Conflicts:
#	src/source/content/custom-certificates.md
@pantheon-site-integration
pantheon-site-integration Bot temporarily deployed to pr-10121 June 18, 2026 15:29 Inactive
@pantheon-site-integration

Copy link
Copy Markdown

Successfully created multidev environment: pr-10121

- Remove redundant CSR-to-CA instruction in the Bot Protection tab
- Trim wordiness in Before You Begin and CAA guidance
- Fix broken sentence in Test Before Going Live section
@pantheon-site-integration
pantheon-site-integration Bot temporarily deployed to pr-10121 June 18, 2026 16:12 Inactive
@pantheon-site-integration

Copy link
Copy Markdown

Successfully created multidev environment: pr-10121

@pantheon-site-integration

Copy link
Copy Markdown

Successfully created multidev environment: pr-10121

@john-lauro
john-lauro marked this pull request as ready for review June 30, 2026 15:14
@rachelwhitton rachelwhitton self-assigned this Jul 1, 2026
@rachelwhitton rachelwhitton added Topic: CDN Issue or PR relates to the Global CDN Process: Hold for Release labels Jul 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Process: Hold for Release Topic: CDN Issue or PR relates to the Global CDN

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants