Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AWS Provider Docs - Add Recommendation to enable HTTPS #1558

Closed
steffh opened this issue Apr 15, 2021 · 5 comments
Closed

AWS Provider Docs - Add Recommendation to enable HTTPS #1558

steffh opened this issue Apr 15, 2021 · 5 comments

Comments

@steffh
Copy link
Collaborator

steffh commented Apr 15, 2021

Since we want users to run and connect to their Airy instance securely in the cloud, we should recommend to enable HTTPS by adding SSL certificates (for example using Let’s encrypt).

The recommended way of doing this seems to be to enable SSL on either the ingress controller or the load balancer serving the ingress.

We should refer to the documentation of AWS or the relevant cloud provider / ingress controller.

To the extent this is necessary for HTTPS to work, we should also show how the configuration needs to be adjusted in the relevant Airy instance.

@steffh steffh added the docs label Apr 15, 2021
@steffh steffh changed the title AWS Provider Docs - Add Guide how to configure HTTPS AWS Provider Docs - Add Recommendation to enable HTTPS Apr 15, 2021
@steffh
Copy link
Collaborator Author

steffh commented Apr 22, 2021

depends on: #1212

@ljupcovangelski
Copy link
Contributor

We had a discussion and we decided to solve https on a per-provider basis. Therefore I closed #1212 and for AWS we will write docs on how to create AWS ACM certificate and update the loadbalancer service to use that certificate with the loadbalancer them with the loadbalancer

@ljupcovangelski ljupcovangelski added this to To do in Engineering WIP via automation Apr 23, 2021
@ljupcovangelski ljupcovangelski moved this from To do to In progress in Engineering WIP Apr 26, 2021
ljupcovangelski added a commit that referenced this issue Apr 27, 2021
Co-authored-by: lucapette <ciao@lucapette.me>
@ljupcovangelski ljupcovangelski moved this from In progress to To do in Engineering WIP Apr 27, 2021
@ljupcovangelski
Copy link
Contributor

We added instructions on howto enable HTTPS for AWS in the docs, however we are using a self-signed certificate and that is not an ideal solution.
We need to instruct on how to create a HTTPS tunnel with a generated let's encrypt certificate and also make Airy core available on a configurable domain name (example myairy.customer.com)

@ljupcovangelski
Copy link
Contributor

ljupcovangelski commented Jun 11, 2021

When trying to create Airy Core on Google Cloud, we realized that the HTTPS approach we have in the docs for AWS works completely different for Google.

So in my opinion we should again explore the option of adding HTTPS capabilities to our Traefik ingress (possibly also including Let's Encrypt), so that we can unify the process for different types of cloud providers.

@ljupcovangelski ljupcovangelski moved this from To do to In progress in Engineering WIP Jul 8, 2021
@ljupcovangelski ljupcovangelski moved this from In progress to To do in Engineering WIP Jul 8, 2021
@ljupcovangelski
Copy link
Contributor

This is done.

Engineering WIP automation moved this from To do to Done Sep 17, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

No branches or pull requests

2 participants