-
Notifications
You must be signed in to change notification settings - Fork 100
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Drop all internal SSL #197
Conversation
images/miq-app-frontend/Dockerfile
Outdated
yum clean all | ||
|
||
## GIT clone service UI repo (SUI) | ||
RUN mkdir -p ${SUI_ROOT} && \ | ||
curl -L https://github.com/ManageIQ/manageiq-ui-service/tarball/${REF} | tar vxz -C ${SUI_ROOT} --strip 1 | ||
|
||
## Setup environment | ||
RUN mv /etc/httpd/conf.d/ssl.conf{,.orig} && \ | ||
echo "# This file intentionally left blank. ManageIQ maintains its own SSL configuration" > /etc/httpd/conf.d/ssl.conf | ||
RUN rm /etc/httpd/conf.d/ssl.conf && \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
rm -f
?
# HTTP Start-up error log | ||
ErrorLog /var/www/miq/vmdb/log/apache/miq_apache.log | ||
|
||
# Disable this section if using HTTP only |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We are using HTTP only here right? Not sure what this applies to.
DocumentRoot /var/www/miq/vmdb/public | ||
Include conf.d/manageiq-redirects-ui | ||
Include conf.d/manageiq-redirects-ws | ||
Include conf.d/manageiq-redirects-websocket |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we will probably still need cockpit here right?
I'm not sure if they are all tested in containers, but I think that's what #97 is meant to address, so maybe we can investigate in a followup?
- Move SSL to the route - Drop extra httpd modules - Don't generate certificates - No need to pass the MANAGEIQ_SERVICE_NAME to the httpd container
Checked commit bdunne@e0b9b6c with ruby 2.2.6, rubocop 0.47.1, and haml-lint 0.20.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good, probably need a bit in the README to explain how to provide a cert.
@bdunne will take care of the readme in a followup. Going to merge now so @abellotti can rebase on these changes. |
Must be merged at the same time as ManageIQ/container-httpd#11