OpenCHAMI / deployment-recipes

Ochami deployment recipes
MIT License
8 stars 10 forks source link

Njones/krakend tls #32

Closed njones-lanl closed 5 months ago

njones-lanl commented 5 months ago

This merge request adds TLS to the frontend of krakend, with automatic renewal via the ACME protocol.

It also adds unit tests to cover TLS certificate generation with ACME, and the health endpoint of the krakend service.

This merge request does include use a custom container for both the ACME provider (step-ca, which didn't have a great container for our use cases), and the ACME client (krakend, which needs the ACME provider loaded inside the container due to docker compose limitations)