Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove HTTP access to the canned Pbench Server #3451

Merged
merged 3 commits into from
Jun 23, 2023

Conversation

webbnh
Copy link
Member

@webbnh webbnh commented Jun 6, 2023

Now that we have HTTPS access to the Pbench Server enabled and working, it's time to remove HTTP access.

This PR updates:

  • the Server documentation examples
  • the default Agent configuration
  • the run-server-func-tests script
  • the unit tests and unit test infrastructure
  • the configuration for the Nginx proxy in the can, and
  • the Keycloak redirect configuration and the OpenIDClient

replacing http://*:8080 with https://*:8443.

Note that this PR does not change access to the Keycloak broker...which should be done as soon as practical once this change is merged.

PBENCH-1176

@webbnh webbnh added Agent Documentation Server Code Infrastructure Dashboard Of and relating to the Dashboard GUI Unit tests Installation Containerization Of and relating to the process of setting up and maintaining container images Functional Testing Ansible Ansible playbooks for pbench agent installation labels Jun 6, 2023
@webbnh webbnh added this to the v0.73 milestone Jun 6, 2023
@webbnh webbnh self-assigned this Jun 6, 2023
dbutenhof

This comment was marked as outdated.

@webbnh webbnh force-pushed the remove_HTTPS branch 4 times, most recently from 9bbd144 to fe90ad1 Compare June 12, 2023 17:41
@webbnh webbnh force-pushed the remove_HTTPS branch 4 times, most recently from 6274eea to ab0e955 Compare June 22, 2023 02:03
webbnh added 2 commits June 21, 2023 22:47
Access now requires HTTPS.
Update the Ansible firewall playbooks, the Server documentation examples,
the default Agent configuration, the run-server-func-tests script, the unit
tests and unit test infrastructure, the canned Nginx proxy configuration, and
the Keycloak redirect configuration and the Keycloak access adapter.

PBENCH-1176
@webbnh webbnh requested review from ndokos, npalaska and dbutenhof June 22, 2023 02:52
@webbnh webbnh marked this pull request as ready for review June 22, 2023 02:52
@webbnh
Copy link
Member Author

webbnh commented Jun 22, 2023

This PR is now ready for review (or will be, once it gets past Area-51).

dbutenhof
dbutenhof previously approved these changes Jun 22, 2023
Copy link
Member

@dbutenhof dbutenhof left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see inflexibility here that's going to be a minor pain on CSB systems (at least), but maybe there's no alternative. Have you tried an API Key copy in a runlocal build? 😁

jenkins/run-server-func-tests Show resolved Hide resolved
lib/pbench/server/auth/__init__.py Show resolved Hide resolved
server/pbenchinacan/run-pbench-in-a-can Show resolved Hide resolved
Copy link
Member

@ndokos ndokos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

Copy link
Member

@npalaska npalaska left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good. 👍

@webbnh webbnh merged commit fa225e2 into distributed-system-analysis:main Jun 23, 2023
@webbnh webbnh deleted the remove_HTTPS branch June 23, 2023 17:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Agent Ansible Ansible playbooks for pbench agent installation Code Infrastructure Containerization Of and relating to the process of setting up and maintaining container images Dashboard Of and relating to the Dashboard GUI Documentation Functional Testing Installation Server Unit tests
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

4 participants