Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Paf 49 test cert 2 #112

Open
wants to merge 100 commits into
base: master
Choose a base branch
from
Open

Paf 49 test cert 2 #112

wants to merge 100 commits into from

Conversation

JHoldergov
Copy link
Contributor

@JHoldergov JHoldergov commented Jan 16, 2024

What?

To access PRP1 we have to access the link via a secure way. So we have a self-signing certificate provided.

Why?

This is the most secure way for the services to talk to each other, we have set the NODE_AUTH=0 because as a self signing cert it does not have a recognised authority hence why we keep the following in the ims reolver deployment

        - name: NODE_OPTIONS
              value: "--use-openssl-ca"

            {{ if or (eq .KUBE_NAMESPACE .BRANCH_ENV) (eq .KUBE_NAMESPACE .UAT_ENV) }}
            - name: NODE_TLS_REJECT_UNAUTHORIZED
              value: "0"

We will need to add prod option in there.

How?

So the best way for Node is to mount a config map as a persistent storage to store the cert then mount the config map as a volume in/etc/ss/certs and call it in the PAF app.

Testing?

@shamiluwais had a look and will do some further verification that everything is as it is as we are currently facing a 504 and the logs are attached below

Screenshots (optional)

image
image

Anything Else? (optional)

We are waiting for the error 504 to be resolved and then we can test but prior to this we did have a case id

Screenshots (optional)

Anything Else? (optional)

let me know if you need anything - so as for the cert we have it stored securely in hof-services config as a base64 encoded cert and called it via the deploy.sh script

@sulthan-ahmed
Copy link
Contributor

can’t approve til it’s tested

@@ -184,4 +190,4 @@ spec:
runAsNonRoot: true
volumes:
- name: public
emptyDir: {}
emptyDir: {}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

new line

@sulthan-ahmed
Copy link
Contributor

Just fixed your PR, the headings weren't showing. You had your backtiks in the wrong place

@@ -1,4 +1,3 @@
/* eslint-disable node/no-deprecated-api */
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is there a reason why node/no-deprecated-api */ this was removed?

JHoldergov and others added 29 commits January 31, 2024 14:54
- Add element ids to side-nav html
- Set current url and class list for navigation sections in assets/js/index.js
- Add css styling for highlighting navigation sections in assets/css/app.scss

Co-authored-by: muthrajan <[email protected]>
…try textbox. (#96)

* PAF-128 & PAF-129 Added validation for phone and country textbox

[PAF- 129](https://collaboration.homeoffice.gov.uk/jira/browse/PAF-129) All 'Country' fields allow any text without the use of drop down list

[PAF-128](https://collaboration.homeoffice.gov.uk/jira/browse/PAF-128 URL's are being accepted in all free text fields

- added validation rules to all countries fields in field/index.js

- added dependent property to avoid error message when yes  is selected on another location

Tested manually

* add behaviour to unset values
* PAF-61 Update ims-resolver deployment to use branch image

* Deploy with image containing PAF-61 changes
* Update resolver configmap to use correct value
* Add Keycloak variables to ims resolver deployment env from secret

* PAF-61 Update resolver image to latest for ticket.
* Add missing deploys to delete
* Alter get pr branch command to be more like other new repos
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
WIP Work in progress
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants