Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop all internal SSL #197

Merged
merged 1 commit into from
Aug 16, 2017
Merged

Drop all internal SSL #197

merged 1 commit into from
Aug 16, 2017

Conversation

bdunne
Copy link
Member

@bdunne bdunne commented Aug 15, 2017

  • Move SSL to the route
  • Drop extra httpd modules
  • Don't generate certificates

Must be merged at the same time as ManageIQ/container-httpd#11

yum clean all

## GIT clone service UI repo (SUI)
RUN mkdir -p ${SUI_ROOT} && \
curl -L https://github.com/ManageIQ/manageiq-ui-service/tarball/${REF} | tar vxz -C ${SUI_ROOT} --strip 1

## Setup environment
RUN mv /etc/httpd/conf.d/ssl.conf{,.orig} && \
echo "# This file intentionally left blank. ManageIQ maintains its own SSL configuration" > /etc/httpd/conf.d/ssl.conf
RUN rm /etc/httpd/conf.d/ssl.conf && \
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

rm -f?

# HTTP Start-up error log
ErrorLog /var/www/miq/vmdb/log/apache/miq_apache.log

# Disable this section if using HTTP only
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We are using HTTP only here right? Not sure what this applies to.

DocumentRoot /var/www/miq/vmdb/public
Include conf.d/manageiq-redirects-ui
Include conf.d/manageiq-redirects-ws
Include conf.d/manageiq-redirects-websocket
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we will probably still need cockpit here right?

I'm not sure if they are all tested in containers, but I think that's what #97 is meant to address, so maybe we can investigate in a followup?

- Move SSL to the route
- Drop extra httpd modules
- Don't generate certificates
- No need to pass the MANAGEIQ_SERVICE_NAME to the httpd container
@miq-bot
Copy link
Member

miq-bot commented Aug 16, 2017

Checked commit bdunne@e0b9b6c with ruby 2.2.6, rubocop 0.47.1, and haml-lint 0.20.0
0 files checked, 0 offenses detected
Everything looks fine. 🍰

Copy link
Member

@carbonin carbonin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, probably need a bit in the README to explain how to provide a cert.

@carbonin carbonin self-assigned this Aug 16, 2017
@carbonin
Copy link
Member

@bdunne will take care of the readme in a followup. Going to merge now so @abellotti can rebase on these changes.

@carbonin carbonin merged commit 874a9b1 into ManageIQ:master Aug 16, 2017
@carbonin carbonin added this to the Sprint 67 Ending Aug 21, 2017 milestone Aug 16, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants