Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

https redirect config block #246

Closed
wants to merge 7 commits into from
Closed

https redirect config block #246

wants to merge 7 commits into from

Conversation

PietroPasotti
Copy link
Contributor

@PietroPasotti PietroPasotti commented Sep 15, 2023

adds config block implementing root-level https redirect

Fixes #177 (again)

manual test: cos-lite (no tls)

  • can curl prometheus: yes
  • grafana datasources healthy: NO (TLS bad MAC error)

manual test: cos-lite (+tls)

  • can curl prometheus: YES
  • grafana datasources healthy: NO (Prometheus: Post "https://192.168.0.105/clite-tls-prometheus-0/api/v1/query": x509: cannot validate certificate for 192.168.0.105 because it doesn't contain any IP SANs)
# NO-TLS bundle
bundle: kubernetes
applications:
  alertmanager:
    charm: alertmanager-k8s
    channel: edge
    revision: 86
    resources:
      alertmanager-image: 75
    scale: 1
    constraints: arch=amd64
    storage:
      data: kubernetes,1,1024M
    trust: true
  catalogue:
    charm: catalogue-k8s
    channel: edge
    revision: 24
    resources:
      catalogue-image: 25
    scale: 1
    options:
      description: "Canonical Observability Stack Lite, or COS Lite, is a light-weight,
        highly-integrated, \nJuju-based observability suite running on Kubernetes.\n"
      tagline: Model-driven Observability Stack deployed with a single command.
      title: Canonical Observability Stack
    constraints: arch=amd64
    trust: true
  grafana:
    charm: grafana-k8s
    channel: edge
    revision: 92
    resources:
      grafana-image: 62
      litestream-image: 42
    scale: 1
    constraints: arch=amd64
    storage:
      database: kubernetes,1,1024M
    trust: true
  loki:
    charm: loki-k8s
    channel: edge
    revision: 97
    resources:
      loki-image: 80
    scale: 1
    constraints: arch=amd64
    storage:
      active-index-directory: kubernetes,1,1024M
      loki-chunks: kubernetes,1,1024M
    trust: true
  prometheus:
    charm: prometheus-k8s
    channel: edge
    revision: 148
    resources:
      prometheus-image: 126
    scale: 1
    constraints: arch=amd64
    storage:
      database: kubernetes,1,1024M
    trust: true
  trfk:
    charm: local:traefik-k8s-0
    scale: 1
    constraints: arch=amd64
    storage:
      configurations: kubernetes,1,1024M
relations:
- - prometheus:alertmanager
  - alertmanager:alerting
- - grafana:grafana-source
  - prometheus:grafana-source
- - grafana:grafana-source
  - loki:grafana-source
- - grafana:grafana-source
  - alertmanager:grafana-source
- - loki:alertmanager
  - alertmanager:alerting
- - prometheus:metrics-endpoint
  - alertmanager:self-metrics-endpoint
- - prometheus:metrics-endpoint
  - loki:metrics-endpoint
- - prometheus:metrics-endpoint
  - grafana:metrics-endpoint
- - grafana:grafana-dashboard
  - loki:grafana-dashboard
- - grafana:grafana-dashboard
  - prometheus:grafana-dashboard
- - grafana:grafana-dashboard
  - alertmanager:grafana-dashboard
- - catalogue:catalogue
  - grafana:catalogue
- - catalogue:catalogue
  - prometheus:catalogue
- - catalogue:catalogue
  - alertmanager:catalogue
- - loki:logging
  - trfk:logging
- - trfk:grafana-dashboard
  - grafana:grafana-dashboard
- - trfk:metrics-endpoint
  - prometheus:metrics-endpoint
- - trfk:ingress
  - alertmanager:ingress
- - trfk:ingress
  - catalogue:ingress
- - trfk:traefik-route
  - grafana:ingress
- - trfk:ingress-per-unit
  - loki:ingress
- - trfk:ingress-per-unit
  - prometheus:ingress

@PietroPasotti
Copy link
Contributor Author

this is too stale to pick up in light of #269; opening again on top of main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

HTTP to HTTPS redirect
2 participants