introduce TLS support in toolsbeta front proxy
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	aborrero
	Feb 8 2021, 11:42 AM

Description

Introduce TLS support in toolsbeta nginx front proxy.

This is to enable experiments with among other things, client-side TLS certs to auth against webservices running in Toolforge.

Details

	Subject	Repo	Branch	Lines +/-
	toolforge: front proxy: drop non-TLS support	operations/puppet	production	+9 -17
	toolforge: front proxy: add dhparams file	operations/puppet	production	+1 -0

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Resolved	• JHedden	T251027 "signatures" tool has failed job pods on Kubernetes cluster
Resolved	aborrero	T251917 Design the Jobs service in k8s
Resolved	aborrero	T274123 introduce TLS support in toolsbeta front proxy

Event Timeline

aborrero triaged this task as Medium priority.Feb 8 2021, 11:42 AM

aborrero created this task.

aborrero moved this task from Inbox to Doing on the cloud-services-team (Kanban) board.

Mentioned in SAL (#wikimedia-cloud) [2021-02-08T11:48:38Z] <arturo> trying to introduce TLS support in the front proxy T274123

Change 662662 had a related patch set uploaded (by Arturo Borrero Gonzalez; owner: Arturo Borrero Gonzalez):
[operations/puppet@production] toolforge: front proxy: add dhparams file

https://gerrit.wikimedia.org/r/662662

gerritbot added a project: Patch-For-Review.Feb 8 2021, 11:56 AM

Change 662662 merged by Arturo Borrero Gonzalez:
[operations/puppet@production] toolforge: front proxy: add dhparams file

https://gerrit.wikimedia.org/r/662662

Maintenance_bot removed a project: Patch-For-Review.Feb 8 2021, 12:10 PM

Change 662942 had a related patch set uploaded (by Arturo Borrero Gonzalez; owner: Arturo Borrero Gonzalez):
[operations/puppet@production] toolforge: front proxy: drop non-TLS support

https://gerrit.wikimedia.org/r/662942

gerritbot added a project: Patch-For-Review.Feb 9 2021, 1:07 PM

Change 662942 merged by Arturo Borrero Gonzalez:
[operations/puppet@production] toolforge: front proxy: drop non-TLS support

https://gerrit.wikimedia.org/r/662942

I think this is done.