search

2i2c-org / unnamed-thingity-thing

https://2i2c.org/unnamed-thingity-thing/
BSD 3-Clause "New" or "Revised" License
0 stars 1 forks source link

Setup HTTPS for the staging and production deployments #61

Open yuvipanda opened 1 day ago

yuvipanda commented 1 day ago

The staging and production deployments are both on HTTP now.

They should be using HTTPS.

- [ ] Enable the deployer to install cert-manager [similar to the infra repo](https://github.com/2i2c-org/infrastructure/blob/6dac9d9acaf28c6c39c766a846c52a2fa26a71b9/deployer/infra_components/cluster.py#L42-L66)
- [ ] Set up a ClusterIssuer with Let's Encrypt like in this [infrastructure example](https://github.com/2i2c-org/infrastructure/blob/6dac9d9acaf28c6c39c766a846c52a2fa26a71b9/helm-charts/support/templates/issuer.yaml#L2)
- [ ] Update the ingress resource to use the certificate generated by let's encrypt via something similar to [this](https://github.com/2i2c-org/infrastructure/blob/6dac9d9acaf28c6c39c766a846c52a2fa26a71b9/helm-charts/basehub/values.yaml#L19)
- [ ] enable tls domains on the ingress

Definition of done