Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EKS deployment does not accept https requests, only http #747

Open
ferancona opened this issue Aug 19, 2022 · 0 comments
Open

EKS deployment does not accept https requests, only http #747

ferancona opened this issue Aug 19, 2022 · 0 comments

Comments

@ferancona
Copy link

Steps to reproduce the issue

  1. Create EKS cluster: eksctl create cluster --name test-cluster-1 --region eu-central-1 --node-type t2.large --nodes 1
  2. Label nodes: kubectl label nodes --all openwhisk-role=invoker
  3. Install Helm chart: helm install owdev openwhisk-deploy-kube/helm/openwhisk -n openwhisk --create-namespace -f mycluster.yaml
  4. Setup WSK CLI as the docs say, using the load balancer's DNS: wsk -i property set --apihost https://<load-balancer-DNS>:443
  5. Run WSK command: wsk list -v

Observations

  • Output of wsk list -v:
    image
  • Load balancer's info from AWS Console:
    image
  • Api calls work when setting up the WSK CLI using http instead of https.

mycluster.yaml

k8s:
  persistence:
    enabled: false

whisk:
  ingress:
    type: LoadBalancer
    annotations:
      service.beta.kubernetes.io/aws-load-balancer-internal: 0.0.0.0/0
      service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:iam::XXXXXXXXXXXX:server-certificate/ow-self-signed

whisk:
  ingress:
    awsSSL: "true"
    type: LoadBalancer
    annotations:
      service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
      service.beta.kubernetes.io/aws-load-balancer-ssl-ports: https-api
      service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:eu-central-1:XXXXXXXXXXXX:certificate/YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY # AWS Certificate Manager (ow-self-signed).

Reason of interest

I want to use the OpenWhisk deployment as an endpoint for AWS EventBridge, but currently it is only possible to add API Destinations that use https endpoints.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant