Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

E2E HTTPS Encryption for Jenkins #798

Open
tomvopat opened this issue Mar 2, 2023 · 1 comment
Open

E2E HTTPS Encryption for Jenkins #798

tomvopat opened this issue Mar 2, 2023 · 1 comment
Labels
enhancement New feature or request not-stale
Milestone

Comments

@tomvopat
Copy link

tomvopat commented Mar 2, 2023

Describe the solution you'd like
In order to improve security, I would like to have an end-to-end HTTPS encryption between client and Jenkins web interface. That means not to terminate HTTPS at the ingress edge. (Communication between ingress and Jenkins is then in plain HTTP.)

For that the additional HTTPS port needs to be open in the Jenkins pod. The rest configuration is done by passing arguments to Jenkins and adding secret with Java Keystore (containing HTTPS certificates). In this case the Ingress would only work as ssl-passthrough.

Describe alternatives you've considered
Terminating HTTPS encryption at the Ingress edge would be acceptable for smaller projects with lower security requirements, but it is not acceptable in a corporate environment.

Additional context
Also communication between Jenkins and Jenkins Operator pod is in plain HTTP. That could be also another improvement.

@tomvopat tomvopat added the enhancement New feature or request label Mar 2, 2023
@brokenpip3
Copy link
Collaborator

Yep we can add it but totally not a priority at the moment, sorry.
Adding this to 0.10 milestone.

@brokenpip3 brokenpip3 added this to the 0.10 milestone Mar 2, 2023
@github-actions github-actions bot added the stale label May 8, 2023
@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale May 19, 2023
@brokenpip3 brokenpip3 removed the stale label May 19, 2023
@brokenpip3 brokenpip3 reopened this Jun 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request not-stale
Projects
None yet
Development

No branches or pull requests

2 participants