-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[IBCDPE-1095] Signoz move to lets encrypt #45
[IBCDPE-1095] Signoz move to lets encrypt #45
Conversation
…ignoz-move-to-lets-encrypt
- target: | ||
kind: SecurityPolicy | ||
patch: |- | ||
- op: replace | ||
path: /spec/jwt/providers | ||
value: | ||
- name: auth0 | ||
remoteJWKS: | ||
uri: ${var.auth0_jwks_uri} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This was causing us issues to apply a blanket SecurityPolicy at the gateway to require JWT be provided due to the nature of how the ACME challenge needs to be solved:
https://letsencrypt.org/docs/challenge-types/#http-01-challenge
Because JWT was required the traffic to solve the challenge was being rejected due to HTTP 401.
Instead, we will expect that security policies will be individually applied to all HTTP Routes that are created for the cluster - Like what is already in place for the telemetry endpoints: Like what is shown in this file
Merging this PR to collapse this mess of PR dependencies |
Problem:
Solution:
Testing: