Skip to content

Conversation

@cesnietor
Copy link
Collaborator

fixes https://github.com/minio/console/issues/418

Changes were done on websocket implementations and on UI.
Screen Shot 2020-11-25 at 12 40 17 PM
Screen Shot 2020-11-25 at 12 40 28 PM

Should be testing deploying console as console operator on a kubernetes environment.

@cesnietor cesnietor self-assigned this Nov 25, 2020
@cesnietor cesnietor force-pushed the move-watch-heal-operator branch from 794f8ef to 07703ea Compare November 25, 2020 22:29
Copy link
Contributor

@Alevsk Alevsk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will test and make sure there's no TLS issues with websockets

@Alevsk
Copy link
Contributor

Alevsk commented Nov 25, 2020

On the watch screen when I select a bucket and then click start im seeing the TLS verification Error (MinIO is running with TLS enabled), ill quickly debug this and send a pr to your branch @cesnietor

│ 2020/11/25 23:34:28 watch started                                                                                                                          │
│ 2020/11/25 23:34:28 error on watch: Get "https://minio.default.svc.cluster.local/songs/?location=": x509: certificate signed by unknown authority          │
│ 2020/11/25 23:34:28 watch stopped                                                                                                                          │
│ 2020/11/25 23:34:28 error on ReadMessage: read tcp 127.0.0.1:9443->127.0.0.1:47990: use of closed network connection

Alevsk added a commit to Alevsk/console that referenced this pull request Nov 28, 2020
…TP clients

- We preserve the insecure parameter in the  `newS3Config` and  `NewAdminClientWithInsecure` functions for debugging and testing purposes.
- By default InsecureSkipVerify is false, therefore in order for Operator-Console to verify the TLS connections to MinIO tenants with self-signed certificates it requires the `ca.crt` or the `public.crt` of the tenant to exists under `~/.console/certs/CAs` which is the right way to do it.

This PR depends on:

- minio#449
- https://github.com/cesnietor/console/pull/3/files
Alevsk added a commit to Alevsk/console that referenced this pull request Nov 28, 2020
Use insecure: true in the meantime so the wss/watch endpoint works while
we add support for custotm TLS transport in the S3 client library.

Removed "InsecureSkipVerify: true" from s3AdminClient and s3Client HTTP clients

- We preserve the insecure parameter in the  `newS3Config` and  `NewAdminClientWithInsecure` functions for debugging and testing purposes.
- By default InsecureSkipVerify is false, therefore in order for Operator-Console to verify the TLS connections to MinIO tenants with self-signed certificates it requires the `ca.crt` or the `public.crt` of the tenant to exists under `~/.console/certs/CAs` which is the right way to do it.

This PR depends on:

- minio#449
@Alevsk
Copy link
Contributor

Alevsk commented Nov 30, 2020

On the watch screen when I select a bucket and then click start im seeing the TLS verification Error (MinIO is running with TLS enabled), ill quickly debug this and send a pr to your branch @cesnietor

│ 2020/11/25 23:34:28 watch started                                                                                                                          │
│ 2020/11/25 23:34:28 error on watch: Get "https://minio.default.svc.cluster.local/songs/?location=": x509: certificate signed by unknown authority          │
│ 2020/11/25 23:34:28 watch stopped                                                                                                                          │
│ 2020/11/25 23:34:28 error on ReadMessage: read tcp 127.0.0.1:9443->127.0.0.1:47990: use of closed network connection

I sent a PR to fix the above issue @cesnietor cesnietor#3, then I have a second PR cesnietor#4 but this one requires a release on mc.

@cesnietor cesnietor requested a review from Alevsk November 30, 2020 17:50
Use insecure: true in the meantime so the wss/watch endpoint works while
we add support for custotm TLS transport in the S3 client library.
Removed "InsecureSkipVerify: true" from s3AdminClient and s3Client HTTP clients
@cesnietor cesnietor force-pushed the move-watch-heal-operator branch from 3ed5eac to 4629b6f Compare November 30, 2020 18:42
Copy link
Contributor

@Alevsk Alevsk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested LGTM

@cesnietor cesnietor merged commit 4a27ef4 into minio:master Nov 30, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Move Heal and Watch to Operator Console

3 participants