feat(chart): Simplify to enable HTTPS/TLS in Selenium Grid on Kuberne…

…tes (#2080) * feat(chart): Simplify to enable HTTPS/TLS in Selenium Grid on Kubernetes * feat(chart): Simplify to enable node registration secret --------- Signed-off-by: Viet Nguyen Duc <nguyenducviet4496@gmail.com>
SeleniumHQ · Jan 5, 2024 · ac2897e · ac2897e
1 parent 7c47784
commit ac2897e
Show file tree

Hide file tree

Showing 41 changed files with 848 additions and 68 deletions.
diff --git a/.github/workflows/helm-chart-test.yml b/.github/workflows/helm-chart-test.yml
@@ -13,8 +13,9 @@ jobs:
     name: Test Helm charts
     runs-on: ubuntu-latest
     strategy:
+      fail-fast: false
       matrix:
-        test-strategy: [chart_test, chart_test_parallel_autoscaling]
+        test-strategy: [chart_test, chart_test_parallel_autoscaling, chart_test_https_tls]
     steps:
       - uses: actions/checkout@v4
       - name: Output Docker info
@@ -24,6 +25,11 @@ jobs:
         with:
           python-version: '3.11'
           check-latest: true
+      - name: Install CA certificates
+        run: |
+          sudo apt install openssl -y
+          sudo apt install ca-certificates -y
+          sudo update-ca-certificates --fresh
       - name: Get branch name (only for push to branch)
         if: github.event_name == 'push'
         run: echo "BRANCH=$(echo ${PUSH_BRANCH##*/})" >> $GITHUB_ENV

diff --git a/Distributor/start-selenium-grid-distributor.sh b/Distributor/start-selenium-grid-distributor.sh
@@ -59,6 +59,35 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
+if [ ! -z "$SE_REGISTRATION_SECRET" ]; then
+  echo "Appending Selenium options: --registration-secret ${SE_REGISTRATION_SECRET}"
+  SE_OPTS="$SE_OPTS --registration-secret ${SE_REGISTRATION_SECRET}"
+fi
+
 EXTRA_LIBS=""
 
 if [ ! -z "$SE_ENABLE_TRACING" ]; then

diff --git a/EventBus/start-selenium-grid-eventbus.sh b/EventBus/start-selenium-grid-eventbus.sh
@@ -24,6 +24,30 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
 EXTRA_LIBS=""
 
 if [ ! -z "$SE_ENABLE_TRACING" ]; then

diff --git a/Hub/start-selenium-grid-hub.sh b/Hub/start-selenium-grid-hub.sh
@@ -27,6 +27,35 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
+if [ ! -z "$SE_REGISTRATION_SECRET" ]; then
+  echo "Appending Selenium options: --registration-secret ${SE_REGISTRATION_SECRET}"
+  SE_OPTS="$SE_OPTS --registration-secret ${SE_REGISTRATION_SECRET}"
+fi
+
 EXTRA_LIBS=""
 
 if [ ! -z "$SE_ENABLE_TRACING" ]; then

diff --git a/Makefile b/Makefile
@@ -397,6 +397,10 @@ chart_test_edge:
 chart_test_parallel_autoscaling:
 	VERSION=$(TAG_VERSION) NAMESPACE=$(NAMESPACE) ./tests/charts/make/chart_test.sh JobAutoscaling
 
+chart_test_https_tls:
+	VERSION=$(TAG_VERSION) NAMESPACE=$(NAMESPACE) SELENIUM_GRID_PROTOCOL=https SELENIUM_GRID_PORT=443 \
+	./tests/charts/make/chart_test.sh JobAutoscaling
+
 .PHONY: \
 	all \
 	base \

diff --git a/NodeBase/start-selenium-node.sh b/NodeBase/start-selenium-node.sh
@@ -32,15 +32,44 @@ if [ ! -z "$SE_OPTS" ]; then
 fi
 
 if [ ! -z "$SE_NODE_SESSION_TIMEOUT" ]; then
-  SE_OPTS="$SE_OPTS --session-timeout $SE_NODE_SESSION_TIMEOUT"
-  echo "Appending Selenium node session timeout via SE_OPTS: ${SE_OPTS}"
+  echo "Appending Selenium options: --session-timeout ${SE_NODE_SESSION_TIMEOUT}"
+  SE_OPTS="$SE_OPTS --session-timeout ${SE_NODE_SESSION_TIMEOUT}"
 fi
 
 if [ ! -z "$SE_LOG_LEVEL" ]; then
   echo "Appending Selenium options: --log-level ${SE_LOG_LEVEL}"
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
+if [ ! -z "$SE_REGISTRATION_SECRET" ]; then
+  echo "Appending Selenium options: --registration-secret ${SE_REGISTRATION_SECRET}"
+  SE_OPTS="$SE_OPTS --registration-secret ${SE_REGISTRATION_SECRET}"
+fi
+
 if [ "$GENERATE_CONFIG" = true ]; then
   echo "Generating Selenium Config"
   /opt/bin/generate_config

diff --git a/NodeDocker/start-selenium-grid-docker.sh b/NodeDocker/start-selenium-grid-docker.sh
@@ -34,6 +34,30 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
 EXTRA_LIBS=""
 
 if [ ! -z "$SE_ENABLE_TRACING" ]; then

diff --git a/Router/start-selenium-grid-router.sh b/Router/start-selenium-grid-router.sh
@@ -59,6 +59,35 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
+if [ ! -z "$SE_REGISTRATION_SECRET" ]; then
+  echo "Appending Selenium options: --registration-secret ${SE_REGISTRATION_SECRET}"
+  SE_OPTS="$SE_OPTS --registration-secret ${SE_REGISTRATION_SECRET}"
+fi
+
 EXTRA_LIBS=""
 
 if [ ! -z "$SE_ENABLE_TRACING" ]; then

diff --git a/SessionQueue/start-selenium-grid-session-queue.sh b/SessionQueue/start-selenium-grid-session-queue.sh
@@ -24,6 +24,30 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
 EXTRA_LIBS=""
 
 if [ ! -z "$SE_ENABLE_TRACING" ]; then

diff --git a/Sessions/start-selenium-grid-sessions.sh b/Sessions/start-selenium-grid-sessions.sh
@@ -39,6 +39,30 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
 EXTRA_LIBS=""
 
 if [ ! -z "$SE_ENABLE_TRACING" ]; then

diff --git a/Standalone/start-selenium-standalone.sh b/Standalone/start-selenium-standalone.sh
@@ -16,6 +16,30 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
 /opt/bin/generate_config
 
 echo "Selenium Grid Standalone configuration: "

diff --git a/StandaloneDocker/start-selenium-grid-docker.sh b/StandaloneDocker/start-selenium-grid-docker.sh
@@ -19,6 +19,30 @@ if [ ! -z "$SE_LOG_LEVEL" ]; then
   SE_OPTS="$SE_OPTS --log-level ${SE_LOG_LEVEL}"
 fi
 
+if [ ! -z "$SE_EXTERNAL_URL" ]; then
+  echo "Appending Selenium options: --external-url ${SE_EXTERNAL_URL}"
+  SE_OPTS="$SE_OPTS --external-url ${SE_EXTERNAL_URL}"
+fi
+
+if [ ! -z "$SE_HTTPS_CERTIFICATE" ]; then
+  echo "Appending Selenium options: --https-certificate ${SE_HTTPS_CERTIFICATE}"
+  SE_OPTS="$SE_OPTS --https-certificate ${SE_HTTPS_CERTIFICATE}"
+fi
+
+if [ ! -z "$SE_HTTPS_PRIVATE_KEY" ]; then
+  echo "Appending Selenium options: --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+  SE_OPTS="$SE_OPTS --https-private-key ${SE_HTTPS_PRIVATE_KEY}"
+fi
+
+if [ ! -z "$SE_JAVA_SSL_TRUST_STORE" ]; then
+  echo "Appending Java options: -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStore=${SE_JAVA_SSL_TRUST_STORE}"
+  echo "Appending Java options: -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djavax.net.ssl.trustStorePassword=${SE_JAVA_SSL_TRUST_STORE_PASSWORD}"
+  echo "Appending Java options: -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+  SE_JAVA_OPTS="$SE_JAVA_OPTS -Djdk.internal.httpclient.disableHostnameVerification=${SE_JAVA_DISABLE_HOSTNAME_VERIFICATION:-true}"
+fi
+
 EXTRA_LIBS=""
 
 if [ ! -z "$SE_ENABLE_TRACING" ]; then