Needs a https redirect feature

[ibuildthecloud]

Need to be able to redirect from http to https easily to force specific services/path to https only.

[lucidprogrammer]

Say you created a service like this,

rio run --name sample -p 80:80 nginx:alpine

rio ps
NAME      IMAGE          ENDPOINT                                     PORTS     SCALE     WEIGHT    CREATED          DETAIL
sample    nginx:alpine   https://sample-v0-default.somewhere.on-rio.io   80        1         100%      16 seconds ago  

Check the virtualservices you got

kubectl get vs
NAME                                 AGE
sample                               110s
sample-tls-somewhere.on-rio.io-tls      110s
sample-v0                            110s
sample-v0-tls-somewhere.on-rio.io-tls   110s

Ok, now we need every request coming on the version of your choosing to go to https.

kubectl edit vs sample-v0

Add the following snippet, under the routes.

- matcher:
        prefix: /
      redirectAction:
        httpsRedirect: true
      routePlugins: {}

Once applied, your spec part of the virtualservice will look something like this

spec:
  virtualHost:
    domains:
    - sample-v0-default.somewhere.on-rio.io
    routes:
    - matcher:
        prefix: /
      redirectAction:
        httpsRedirect: true
      routePlugins: {}
    - matcher:
        prefix: /
      routeAction:
        single:
          kube:
            port: 80
            ref:
              name: sample-v0
              namespace: default

[StrongMonkey]

We are going to add this in router.

To add a router with HTTPS redirect, run

rio router add --https-redirect work to sample_service

Then check endpoints of router, access http endpoint will give you redirect link to https

$ curl -i http://xxx.on-rio-io          
HTTP/1.1 301 Moved Permanently
location: https://xxx.on-rio-io 
date: Tue, 17 Dec 2019 22:46:04 GMT
server: envoy
content-length: 0

To add https redirect to your publicdomain, then register public domain to this router

rio route register foo.bar router/work

[lucidprogrammer]

Thank you @StrongMonkey

[rancher-max]

Validated above is working. Small correction to the domain register command: rio domain register foo.bar router/work