tricorder-observability / Starship

Starship: next-generation Observability platform built with eBPF+WASM
GNU Affero General Public License v3.0
163 stars 25 forks source link

mgmt web ui support https #32

Open eden1018 opened 1 year ago

eden1018 commented 1 year ago

mgmt web ui 给 api-server提供的前端操作界面,让用户创建ebpf+wasm数据采集模块,并对模块进行管理。 基于 antdesign pro框架的一个应用程序。 nginx为前端静态文件的部署提供web服务,并为api-server后端访问提供反向代理。

nginx没有配置ssl, 用户在主流浏览器默认使用https访问,是异常的。用户需要修改https协议为http才可以正常使用。

希望用户可以通过https协议可以直接访问api-server ui

需要在nginx, yaml中做配置才可以正常访问,yaml暂时还不清楚在哪里调整,稍后更新

nascentcore-eng commented 1 year ago

According to an expert on Nginx, the typical method is to add ingress controller to the cluster, and let the controller terminate TLS/SSL connection, and all other apps are sitting behind the ingress controller.

So it could be that automated https access is difficult to do in practice, so people are choosing alternatives. If that's the case, we should do the same.

nascentcore-eng commented 1 year ago

https://kubernetes.github.io/ingress-nginx/examples/tls-termination/ https://help.aliyun.com/document_detail/93804.html