Skip to content
This repository was archived by the owner on Mar 21, 2025. It is now read-only.

Conversation

@nmalfroy
Copy link
Contributor

@nmalfroy nmalfroy commented Dec 1, 2021

This allows us to create a k8s resource for configuring an SSL policy for things like prometheus and grafana using an annotation on the ingress config like:
networking.gke.io/v1beta1.FrontendConfig: "<what we specify in the sslPolicy value>"

Note: the default ssl policy is set to one that we create in Terraform that enforces that TLS 1.2 is used by the client

Note: this also does http -> https redirects

This allows us to create a k8s resource for configuring an SSL policy for things like prometheus and grafana using an annotation on the ingress config like:
`networking.gke.io/v1beta1.FrontendConfig: "<what we specify in the sslPolicy value>"`

Note: the default ssl policy is set to one that we create in Terraform that enforces that TLS 1.2 is used by the client
@nmalfroy nmalfroy force-pushed the dr-2291-nm-add-front-end-config-chart branch from e5ba921 to e230a80 Compare December 1, 2021 22:54
Copy link
Contributor

@tlangs tlangs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved, but with extremely minor comments.

sslPolicy: {{ .Values.sslPolicy }}
redirectToHttps:
enabled: true
responseCodeName: MOVED_PERMANENTLY_DEFAULT No newline at end of file
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we want a newline?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah right

@@ -0,0 +1,2 @@
---
sslPolicy: global-ssl-policy
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

newline here too?

.svn/
# Common backup files
*.swp
*.bak
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

.bak, really?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lol...yeah...some copy pasta

@nmalfroy nmalfroy force-pushed the dr-2291-nm-add-front-end-config-chart branch from 0f6e6fb to 3761431 Compare December 2, 2021 21:39
@nmalfroy nmalfroy merged commit e8b4120 into master Dec 2, 2021
@nmalfroy nmalfroy deleted the dr-2291-nm-add-front-end-config-chart branch December 2, 2021 21:43
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants