Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Non-TLS traffic through ingress shouldn't be allowed when TLS is enabled #397

Open
michaeldmitry opened this issue Sep 5, 2024 · 2 comments

Comments

@michaeldmitry
Copy link
Contributor

Bug Description

Currently, when TLS is enabled, users can still hit the the ingress endpoint using http and Traefik charm would allow it.

To Reproduce

  1. Deploy Traefik
  2. Deploy any app (e.g: Tempo)
  3. Integrate Traefik and Tempo over traefik_route
  4. Deploy SSC
  5. Integrate Traefik and SSC
  6. Curl any valid Tempo endpoint using Traefik's ingress URL but use http://<endpoint> not https://<endpoint>

Environment

microk8s 1.28.13
juju 3.4.5

Relevant log output

N/A

Additional context

No response

@dstathis
Copy link
Contributor

Let's see if this is for traefik route only or if it applies for all traffic relations. If it is for traefik route only, we should not fix it as this can be configured by the consumer. If this exists for other traefik relations, then we should automatically upgrade the connection.

@dstathis
Copy link
Contributor

This will likely be handled by #430.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants