btw: it seems you still can't automate the cert renewal for let's encrypt on openshift online.[1]

[1] https://openshift.uservoice.com/forums/258655-ideas/suggesti...