-
Notifications
You must be signed in to change notification settings - Fork 108
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove HTTP access to the canned Pbench Server #3451
Conversation
9bbd144
to
fe90ad1
Compare
6274eea
to
ab0e955
Compare
Access now requires HTTPS. Update the Ansible firewall playbooks, the Server documentation examples, the default Agent configuration, the run-server-func-tests script, the unit tests and unit test infrastructure, the canned Nginx proxy configuration, and the Keycloak redirect configuration and the Keycloak access adapter. PBENCH-1176
This PR is now ready for review (or will be, once it gets past Area-51). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I see inflexibility here that's going to be a minor pain on CSB systems (at least), but maybe there's no alternative. Have you tried an API Key copy in a runlocal
build? 😁
agent/ansible/collection/roles/pbench_firewall_open_ports/README.md
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
looks good. 👍
Now that we have HTTPS access to the Pbench Server enabled and working, it's time to remove HTTP access.
This PR updates:
run-server-func-tests
scriptOpenIDClient
replacing
http://*:8080
withhttps://*:8443
.Note that this PR does not change access to the Keycloak broker...which should be done as soon as practical once this change is merged.
PBENCH-1176