Page MenuHomePhabricator

Make labs proxies https only
Open, MediumPublic

Description

This will require some doing as we already rely on domains that we don't have certs for.

Event Timeline

Andrew created this task.Mar 30 2016, 7:36 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 30 2016, 7:36 PM
chasemp triaged this task as Medium priority.Apr 4 2016, 1:52 PM
bd808 moved this task from Backlog to Dynamicproxy on the Cloud-VPS board.Nov 10 2019, 11:36 PM
Dzahn added a subscriber: Dzahn.Nov 21 2019, 11:27 PM

was this resolved by https://gerrit.wikimedia.org/r/c/operations/puppet/+/482142 or is there more to be done?

We'd need to set https_upgrade to true either by changing the default or setting the key when we create the dynamicproxy class.

Isaac added a subscriber: Isaac.Mon, Jul 20, 7:39 PM

+1 to this. Discussed in IRC but having this handled by default would be hugely hugely appreciated as I definitely do not trust myself to get it right!