[Pulp-dev] How to enable HTTPS for our tests in pulpcore and all plugins?

[Fabricio Aguiar]

I started this POC: https://github.com/pulp/pulp-oci-images/pull/73
It enables https on the single container, once merged, the CI for every
plugin will run the functional tests using https.
Probably it would break the majority of the CIs, we need to discuss when is
the best moment to merge this PR or discuss alternatives

Best regards,
Fabricio Aguiar
Software Engineer, Pulp Project
Red Hat Brazil - Latam <https://www.redhat.com/>
+55 22 999000595



On Tue, Feb 9, 2021 at 10:55 AM Fabricio Aguiar <faguiard at redhat.com> wrote:

> Our nginx conf only supports http now:
> https://github.com/pulp/pulp-oci-images/blob/latest/assets/nginx.conf#L15
> For not breaking all plugins, I believe we can build a new CI image that
> supports https.
> Maybe a template_config parameter - test_https: true would switch the
> images
>
> Best regards,
> Fabricio Aguiar
> Software Engineer, Pulp Project
> Red Hat Brazil - Latam <https://www.redhat.com/>
> +55 22 999000595
>
>
>
> On Tue, Feb 9, 2021 at 5:16 AM Matthias Dellweg <mdellweg at redhat.com>
> wrote:
>
>> I believe this is at least solving the problem partially:
>>
>> https://github.com/pulp/pulp-smash/pull/1251
>>
>> On Mon, Feb 8, 2021 at 9:48 PM Brian Bouterse <bmbouter at redhat.com>
>> wrote:
>>
>>> I believe all of our plugins (and CI) require HTTP and do not work with
>>> HTTPS. I'm not well versed in what needs to be done to fix this, but I
>>> think we should fix it.
>>>
>>> Can the CI group have a 30 min call to talk over what needs to be done?
>>> Or maybe share some info here?
>>>
>>> The main issue I'm aware of is that the tests are not prepared to trust
>>> an https certificate that is self-signed. I'm not exactly sure where we can
>>> change that in one place either.
>>>
>>> Thanks!
>>> Brian
>>>
>>>
>>>
>>> _______________________________________________
>>> Pulp-dev mailing list
>>> Pulp-dev at redhat.com
>>> https://www.redhat.com/mailman/listinfo/pulp-dev
>>>
>> _______________________________________________
>> Pulp-dev mailing list
>> Pulp-dev at redhat.com
>> https://www.redhat.com/mailman/listinfo/pulp-dev
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pulp-dev/attachments/20210426/071c9b15/attachment.htm>