search

engineyard / engineyard-jenkins

This project is deprecated in favour of eycloud-app-jenkins.
https://github.com/engineyard/eycloud-app-jenkins/
28 stars 6 forks source link

SSL support for hudson #1

Open adamcooper opened 13 years ago

adamcooper commented 13 years ago

Hi,

We just started using this hudson integration and found it doesn't have ssl support yet. I noticed it as a todo here:

https://github.com/engineyard/engineyard-hudson/blob/master/lib/engineyard-hudson/cli/install_server/templates/cookbooks/hudson_master/templates/default/proxy.conf.erb#L2

I'm wondering when/if there is a plan to add this to the project?

This is something that is pretty important to us as the full source code of the workspace is visible from the web interface. We've locked it down using a username/password but would also like to enable (actually, I want to force) ssl.

I envision the change sharing alot of the same chef code as a rails application setup code. The only difference I would want to see is that if there is an added ssl certificate on the hudson master then it only enables https. Ie. disables http access.

Let me know if there is anything I can do to help.

Thanks, Adam

bramswenson commented 13 years ago

I forced SSL and basic auth by modifying the template directly. This causes another issue in that the slaves can no longer talk to the server. This modification is going to require some slave modifications as well. Looks like jenkins.rb supports authentication, just need to figure out how to pass it through via ey-jenkins. Will update when I have more.