Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support https backend when ingress_type = ingress #1898

Open
3 tasks done
HarishAmeen opened this issue Jun 11, 2024 · 0 comments
Open
3 tasks done

Support https backend when ingress_type = ingress #1898

HarishAmeen opened this issue Jun 11, 2024 · 0 comments

Comments

@HarishAmeen
Copy link

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

Hi Team,

The ingress today supported in awx-operator only allows http-based backend (except for when type is route). As most of the ingress controllers support https backend, the ingress manifests should also support it to route the traffic over https to the backend awx service.

Example service:

apiVersion: v1
kind: Service
metadata:
  name: '{{ ansible_operator_meta.name }}-service'
  namespace: '{{ ansible_operator_meta.namespace }}'
spec:
  selector:
    app.kubernetes.io/name: '{{ ansible_operator_meta.name }}-web'
    app.kubernetes.io/managed-by: '{{ deployment_type }}-operator'
    app.kubernetes.io/component: '{{ deployment_type }}'
  ports:
  - protocol: TCP
    port: 443
    targetPort: 8053

Ingress definition:
cat << EOF | kubectl apply -f -

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: website-ingress
  annotations:
    kubernetes.io/ingress.class: azure/application-gateway
    appgw.ingress.kubernetes.io/ssl-redirect: "true"
    appgw.ingress.kubernetes.io/backend-protocol: "https"
    appgw.ingress.kubernetes.io/backend-hostname: "backend"
    appgw.ingress.kubernetes.io/appgw-trusted-root-certificate: "backend-tls"
spec:
  tls:
    - secretName: frontend-tls
      hosts:
        - awx.com
  rules:
    - host: awx.com
      http:
        paths:
        - path: /
          backend:
            service:
              name: '{{ ansible_operator_meta.name }}-service'
              port:
                number: 443
          pathType: Exact
EOF

Currently its not possible to turn on https backend without setting ingress_type = route.

@TheRealHaoLiu TheRealHaoLiu added help wanted Extra attention is needed type:enhancement New feature or request and removed help wanted Extra attention is needed labels Jun 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants