cloudweb2001-dev: add TLS termination
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• ema
	Sep 25 2020, 8:11 AM

Description

cloudweb2001-dev is one of the very few remaining origin servers available only via plain HTTP, see T108580#6488253. We should make it available via HTTPS instead to ensure that traffic between ATS and cloudweb2001-dev is encrypted.

Details

	Project	Branch	Lines +/-	Subject
	operations/puppet	production	+3 -3	P::trafficserver: use https for cloudweb2001-dev
	operations/puppet	production	+14 -0	set up tls termination on cloudweb2001-dev

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		• ema	T108580 HTTPS for internal service traffic
		Resolved		taavi	T263829 cloudweb2001-dev: add TLS termination

Event Timeline

• ema created this task.Sep 25 2020, 8:11 AM

Restricted Application added a project: SRE. · View Herald TranscriptSep 25 2020, 8:11 AM

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

• ema added a parent task: T108580: HTTPS for internal service traffic.Sep 25 2020, 8:26 AM

Marostegui added a project: cloud-services-team (Kanban).Oct 20 2020, 9:48 AM

nskaggs triaged this task as Medium priority.Oct 20 2020, 4:16 PM

nskaggs moved this task from Inbox to Watching on the cloud-services-team (Kanban) board.

Nintendofan885 added a project: HTTPS.Nov 4 2020, 2:21 PM

• ema moved this task from Triage to Feature Requests on the Traffic board.Nov 24 2020, 3:19 PM

The swap of Traffic for Traffic-Icebox in this ticket's set of tags was based on a bulk action for all such tickets that haven't been updated in 6 months or more. This does not imply any human judgement about the validity or importance of the task, and is simply the first step in a larger task cleanup effort. Further manual triage and/or requests for updates will happen this month for all such tickets. For more detail, have a look at the extended explanation on the main page of Traffic-Icebox . Thank you!