Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: TLS passthrough #67

Open
wants to merge 21 commits into
base: main
Choose a base branch
from
Open

feat: TLS passthrough #67

wants to merge 21 commits into from

Commits on Oct 3, 2024

  1. Add prompt for ssl certificate and key for HAProxy, add to tf variabl… 

    …es. Set tls config via settings yaml crts directory.

Add instructions for TLS termination to README
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    56ce685 View commit details
    Browse the repository at this point in the history

  2. Use separate terraform variable to set services yaml

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    478f512 View commit details
    Browse the repository at this point in the history

  3. Formatting

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    3e921df View commit details
    Browse the repository at this point in the history

  4. suggestions

    @skatsaounis @wyattrees
    skatsaounis authored and wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    8fcfb81 View commit details
    Browse the repository at this point in the history

  5. Add https redirect, bind agent service to IP address in local network… 

    …, add acl for access to port 80
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    6b924f3 View commit details
    Browse the repository at this point in the history

  6. get management cdirs from database. better error handling around veri… 

    …fying cert/key files
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    6318e35 View commit details
    Browse the repository at this point in the history

  7. Add configuration option for maas-region to setup TLS Termination on … 

    …it's end. Change agent-service to agent_service to comply with underscore convention
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    b89840d View commit details
    Browse the repository at this point in the history

  8. Add question for tls mode

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    480cc4d View commit details
    Browse the repository at this point in the history

  9. Pass ssl_cert and ssl_key from haproxy question bank to maas-region c… 

    …harm config
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    ad221dd View commit details
    Browse the repository at this point in the history

  10. Pass contents of ssl key/cert to maas-region variables instead of fil… 

    …epath. Let maas-region handle creating the files in the proper place
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    f46eb28 View commit details
    Browse the repository at this point in the history

  11. Merge cleanup

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    fb2f7dd View commit details
    Browse the repository at this point in the history

  12. remove duplicate tls_mode variable in maas-region variables.tf

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    d0f7b3c View commit details
    Browse the repository at this point in the history

  13. revert default values for ssl_cert and ssl_key question answers to em… 

    …pty string instead of None. Make default tls_mode value 'disabled' instead of empty string
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    022f124 View commit details
    Browse the repository at this point in the history

  14. Save ssl_cert and ssl_key in variables, load content in extra_tfvars

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    9acb0ec View commit details
    Browse the repository at this point in the history

  15. Ask tls questions during maas-region init step if haproxy unit is not… 

    … to be installed. Add ssl_cacert variable
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    32c57db View commit details
    Browse the repository at this point in the history

  16. Allow empty string for ssl cert/key, question prompt for tls mode dis… 

    …plays valid tls modes based on roles
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    c925753 View commit details
    Browse the repository at this point in the history

  17. lint

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    907c7d7 View commit details
    Browse the repository at this point in the history

  18. check file existence in try/catch block instead of using os.path.is_file

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    fd8e317 View commit details
    Browse the repository at this point in the history

  19. add back in basic validation for CA cert chain. Include tls questions… 

    … in preseed and manifest, and create section for maas-region in preseed/manifest. do not pass CA cert to ha proxy charm variables
    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    cc11be7 View commit details
    Browse the repository at this point in the history

  20. Cleanup

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    0886324 View commit details
    Browse the repository at this point in the history

  21. Revert maas-region version

    @wyattrees
    wyattrees committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    e626f2a View commit details
    Browse the repository at this point in the history