Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CLOUD-2367] Rename existing templates using passthrough TLS termination mode #443

Merged
merged 1 commit into from
Apr 12, 2018

Conversation

iankko
Copy link
Contributor

@iankko iankko commented Apr 4, 2018

Renamed:    sso72-mysql-persistent.json -> sso72-passthrough-mysql-persistent.json
Renamed:    sso72-mysql.json -> sso72-passthrough-mysql.json
Renamed:    sso72-postgresql-persistent.json -> sso72-passthrough-postgresql-persistent.json
Renamed:    sso72-postgresql.json -> sso72-passthrough-postgresql.json
Renamed:    sso72-https.json -> sso72-passthrough.json

Also:

  • Replace 'SSO' with 'RH-SSO' where appropriate,
  • Add 'displayName' field to MEMORY_LIMIT variable

Signed-off-by: Jan Lieskovsky jlieskov@redhat.com

Note: This is a replacement for original CLOUD-2367 one. Instead of removing the HTTP_HOSTNAME / HTTPS_HOSTNAME variables, the agreement was to:

  • Keep the HTTP_HOSTNAME / HTTPS_HOSTNAME` variables,
  • Rename the templates using passthrough TLS termination mode for routes

instead of the original approach.

@iankko
Copy link
Contributor Author

iankko commented Apr 4, 2018

@rcernich @maschmid PTAL

Copy link
Contributor

@rcernich rcernich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks okay to me. Just doc changes.

@maschmid
Copy link

maschmid commented Apr 5, 2018

The file name should be the same as the template name
The openshift.io/display-name annotation should be changed to distinguish between the normal (x509) and the passthrough ones.
also, i think it would be best to add the "hidden" tag to the passthrough ones

@iankko iankko force-pushed the CLOUD-2367 branch 2 times, most recently from 3c75ff2 to 9a323c3 Compare April 9, 2018 20:50
@iankko
Copy link
Contributor Author

iankko commented Apr 9, 2018

PR updated. @rcernich @maschmid PTAL (once got a chance).

Copy link
Contributor

@rcernich rcernich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

"version": "1.4.10",
"openshift.io/display-name": "Single Sign-On 7.2",
"openshift.io/display-name": "Red Hat Single Sign-On 7.2 (Ephemeral with re-encrypt TLS)",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd drop the "with re-encrypt TLS" ... it is the default now, not need to clutter the UI with useless information

@@ -6,10 +6,10 @@
"iconClass" : "icon-sso",
"tags" : "sso,keycloak,jboss",
"version": "1.4.10",
"openshift.io/display-name": "Single Sign-On 7.2 + MySQL",
"openshift.io/display-name": "Red Hat Single Sign-On 7.2 + MySQL (Persistent with re-encrypt TLS)",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd drop the "with re-encrypt TLS", same as above

@@ -6,10 +6,10 @@
"iconClass" : "icon-sso",
"tags" : "sso,keycloak,jboss",
"version": "1.4.10",
"openshift.io/display-name": "Single Sign-On 7.2 + PostgreSQL",
"openshift.io/display-name": "Red Hat Single Sign-On 7.2 + PostgreSQL (Persistent with re-encrypt TLS)",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

..and here...

RH-SSO templates to highlight underlying TLS termination mode used
by them (either passthrough, or re-encrypt)

Add the 'hidden' tag to:
* sso72-mysql-persistent.json and
* sso72-postgresql-persistent.json
templates, and remove it from:
* sso72-x509-https.json
template

Also:
* Replace 'SSO' with 'RH-SSO', and
* Add 'displayName' field to MEMORY_LIMIT variable

where appropriate.

Per request drop "with re-encrypt TLS" from the display-name
of the x509 templates

Signed-off-by: Jan Lieskovsky <jlieskov@redhat.com>
@iankko
Copy link
Contributor Author

iankko commented Apr 10, 2018

Per request dropped the with re-encrypt TLS string from display-names of x509 templates.

@rcernich rcernich merged commit e2a9592 into jboss-openshift:master Apr 12, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants