Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[New feature] Enforce SSL on SPS endpoints #237

Open
LucaCinquini opened this issue Nov 21, 2024 · 2 comments
Open

[New feature] Enforce SSL on SPS endpoints #237

LucaCinquini opened this issue Nov 21, 2024 · 2 comments
Assignees
Labels

Comments

@LucaCinquini
Copy link
Collaborator

Clients have been complaining that the Airflow installation is still accessible via HTTP. We need to enforce SSL on the Airflow and OGC endpoints.

@LucaCinquini
Copy link
Collaborator Author

Brad has created a PR, which Luca has tested to successfully reach endpoints on his personal installation.
Next steps:
o Make sure integration tests still work (might need to trust the SSL certs).
o Remove Cognito login on top-level proxy or on Airflow.

@LucaCinquini
Copy link
Collaborator Author

For now, Brad has successfully re-enabled the SSO certificates on the SPS and Airflow load balancer that are reachable only within the JPL network. The SSL certs are invalid because they refer to "*.dev.mdps.mcp.nasa.gov" but these endpoints will only be used by developers, who can dismiss the warnings in the browser.
DAGs to these personal installations will have to be published via the ./post_deployment.sh script which uses CURL and ignores the SSL problems.

@jpl-btlunsfo jpl-btlunsfo moved this from In Progress to Done in Unity Project Board Dec 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: Done
Development

No branches or pull requests

2 participants