-
Notifications
You must be signed in to change notification settings - Fork 1
DR-2291 Add a new front end configuration chart #176
Conversation
This allows us to create a k8s resource for configuring an SSL policy for things like prometheus and grafana using an annotation on the ingress config like: `networking.gke.io/v1beta1.FrontendConfig: "<what we specify in the sslPolicy value>"` Note: the default ssl policy is set to one that we create in Terraform that enforces that TLS 1.2 is used by the client
e5ba921 to
e230a80
Compare
tlangs
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approved, but with extremely minor comments.
| sslPolicy: {{ .Values.sslPolicy }} | ||
| redirectToHttps: | ||
| enabled: true | ||
| responseCodeName: MOVED_PERMANENTLY_DEFAULT No newline at end of file |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do we want a newline?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ah right
| @@ -0,0 +1,2 @@ | |||
| --- | |||
| sslPolicy: global-ssl-policy | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
newline here too?
| .svn/ | ||
| # Common backup files | ||
| *.swp | ||
| *.bak |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
.bak, really?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lol...yeah...some copy pasta
0f6e6fb to
3761431
Compare
This allows us to create a k8s resource for configuring an SSL policy for things like prometheus and grafana using an annotation on the ingress config like:
networking.gke.io/v1beta1.FrontendConfig: "<what we specify in the sslPolicy value>"Note: the default ssl policy is set to one that we create in Terraform that enforces that TLS 1.2 is used by the client
Note: this also does http -> https redirects