56 Commits

Author SHA1 Message Date
Devon Mackay
d741c4e37c Add pod spec for debuggable ATST container 2018-08-12 14:17:18 -04:00
Devon Mackay
6f1cd6276d Update deployed code version 2018-08-12 14:17:17 -04:00
Devon Mackay
0619e02042 Pull ca-chain.pem from Kubernetes 2018-08-12 14:17:17 -04:00
Devon Mackay
bfe3e18531 Update atst code version 2018-08-12 14:17:17 -04:00
Devon Mackay
e098dc8619 Fix file path 2018-08-12 14:17:17 -04:00
Devon Mackay
be653fd702 Fix reference 2018-08-12 14:17:17 -04:00
Devon Mackay
323eefd121 Update code version deployed 2018-08-12 14:17:17 -04:00
Devon Mackay
c00db63f40 Enable client cert validation 2018-08-12 14:17:17 -04:00
Devon Mackay
5bd39e1a15 Add client ca bundle to nginx container 2018-08-12 14:17:17 -04:00
Devon Mackay
bad0e1f098 Add script for managing client ca bundle 2018-08-12 14:17:17 -04:00
Devon Mackay
df6c563262 Enable redirects for login route and non-ssl traffic 2018-08-08 10:49:26 -04:00
Devon Mackay
5c647a5c41 Switch htpasswd to use a secret 2018-08-08 10:12:46 -04:00
Devon Mackay
3277386ae1 Add reference script for setting the htpasswd file contents 2018-08-08 10:10:37 -04:00
Devon Mackay
aecb310a9b Set gid for mounted files to 101 (nginx) 2018-08-08 10:05:01 -04:00
Devon Mackay
ae2c6b01ff Enable basic auth for /login-dev 2018-08-08 10:05:01 -04:00
Devon Mackay
2822ff16c5 Set FLASK_DEV to dev for staging 2018-08-08 10:05:01 -04:00
Devon Mackay
bde339871a Add delete secret before recreating 2018-08-08 10:05:01 -04:00
Devon Mackay
3a377dcb11 Convert atst ini config into a secret 2018-08-08 10:05:01 -04:00
Devon Mackay
e5567bf3c3 Switch to passing in the file name 2018-08-08 10:05:01 -04:00
Devon Mackay
880b145747 Make helper scripts executable 2018-08-08 10:05:01 -04:00
Devon Mackay
e1a49b2e72 Switch auth.atat to direct nodeport service 2018-08-08 10:05:01 -04:00
Devon Mackay
84b0bda701 Move atst ini config into secret 2018-08-08 10:05:01 -04:00
Devon Mackay
f628460001 Rename reference script 2018-08-08 10:05:01 -04:00
Devon Mackay
e9c43f61e3 Temp: remove basic auth for testing 2018-08-08 10:05:01 -04:00
Devon Mackay
b83b62aea0 Downgrade from http2 for testing 2018-08-08 10:05:01 -04:00
Devon Mackay
d746097981 Allow nginx and atst socket access 2018-08-08 10:05:01 -04:00
Devon Mackay
9cb5f88239 Move http traffic to port 8442 2018-08-08 10:05:01 -04:00
Devon Mackay
55c08d1188 Fix typo 2018-08-08 10:05:01 -04:00
Devon Mackay
10efcb98b8 Fix mountPath to be file not directory 2018-08-08 10:05:01 -04:00
Devon Mackay
35be729378 Update config file paths 2018-08-08 10:05:01 -04:00
Devon Mackay
bddb59630e Add missing semi-colons 2018-08-08 10:05:01 -04:00
Devon Mackay
23d6f6bf52 Update uwsgi socket location 2018-08-08 10:05:01 -04:00
Devon Mackay
97569985a8 Fix mount paths and typos 2018-08-08 10:05:01 -04:00
Devon Mackay
a53c480b58 Add missing semicolons 2018-08-08 10:05:01 -04:00
Devon Mackay
fb155fbc61 Switch nginx listeners to proper ports 2018-08-08 10:05:01 -04:00
Devon Mackay
c7c812be05 Fix collisions and typos 2018-08-08 10:05:01 -04:00
Devon Mackay
6e6dddb507 Fix module name and set venv location 2018-08-08 10:05:01 -04:00
Devon Mackay
91857d7779 Switch to generic alpine for base image and fix python dirs 2018-08-08 10:05:01 -04:00
Devon Mackay
c995a232c6 Add local/bin files to the container so pipenv works 2018-08-08 10:05:01 -04:00
Devon Mackay
609719025f Add FLASK_ENV var 2018-08-08 10:05:01 -04:00
Devon Mackay
a86eb405ea Add configmap for atst env vars 2018-08-08 10:05:01 -04:00
Devon Mackay
2eeb492c5c Fix types; add uwsgi config; add env vars 2018-08-08 10:05:01 -04:00
Devon Mackay
f17fe77e4d Rearrange keys (alpha) 2018-08-08 10:05:01 -04:00
Devon Mackay
319ac897a7 Update entry to launch uwsgi server 2018-08-08 10:05:01 -04:00
Devon Mackay
2369d839e4 Add nginx container and volume mounts 2018-08-08 10:05:01 -04:00
Devon Mackay
d7cf09decc Add helperscript showing dhparam secret creation 2018-08-08 10:05:01 -04:00
Devon Mackay
9262c0f346 Add configmap for nginx settings and config 2018-08-08 10:05:01 -04:00
Devon Mackay
ea853a7b28 Add configmap for ATST settings and env vars 2018-08-08 10:05:01 -04:00
Devon Mackay
91d56fff0e Switch client cert checking subdomain to auth (from cac) 2018-08-08 10:05:01 -04:00
Devon Mackay
87f3c1117e Add second ingress for atst that is passthrough
Used for CAC auth so SSL termination and client cert validation can be
done by the app
2018-08-08 10:05:01 -04:00