Fix Traefik configuration to allow for non TLS connections (#54)

canonical · Dec 4, 2024 · d56b1a5 · d56b1a5
1 parent 6cb14c6
commit d56b1a5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 6 deletions.
diff --git a/src/traefik_route_observer.py b/src/traefik_route_observer.py
@@ -82,8 +82,7 @@ def _ingress_config(self) -> dict[str, dict[str, dict[str, typing.Any]]]:
             routers[f"juju-{self.model.name}-{self.model.app.name}-{sanitized_protocol}"] = {
                 "entryPoints": [sanitized_protocol],
                 "service": service_name,
-                "rule": "HostSNI(`*`)",
-                "tls": {"passthrough": True},
+                "rule": "ClientIP(`0.0.0.0/0`)",
             }
             services[service_name] = {
                 "loadBalancer": {

diff --git a/tests/unit/test_traefik_route_observer.py b/tests/unit/test_traefik_route_observer.py
@@ -59,14 +59,12 @@ def test_on_traefik_route_relation_joined_when_leader(monkeypatch: pytest.Monkey
                     "juju-testing-observer-charm-conn-tcp": {
                         "entryPoints": ["conn-tcp"],
                         "service": "juju-testing-observer-charm-service-conn-tcp",
-                        "rule": "HostSNI(`*`)",
-                        "tls": {"passthrough": True},
+                        "rule": "ClientIP(`0.0.0.0/0`)",
                     },
                     "juju-testing-observer-charm-enrole-tcp": {
                         "entryPoints": ["enrole-tcp"],
                         "service": "juju-testing-observer-charm-service-enrole-tcp",
-                        "rule": "HostSNI(`*`)",
-                        "tls": {"passthrough": True},
+                        "rule": "ClientIP(`0.0.0.0/0`)",
                     },
                 },
                 "services": {