You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2022/01/04 16:16:12 UTC

[GitHub] [airflow] andormarkus commented on issue #16010: Helm chart: How to enable HTTPS connection

andormarkus commented on issue #16010:
URL: https://github.com/apache/airflow/issues/16010#issuecomment-1004944901


   Hi
   
   We are using this config with helm 1.3.0
   
   ```yaml
   config:
     webserver:
       base_url: "http://dataengineering.acme.com/airflow"
   
   ingress:
     enabled: true
     web:
       precedingPaths:
         - path: "/*"
           pathType: "ImplementationSpecific"
           serviceName: "ssl-redirect"
           servicePort: "use-annotation"
       path: "/airflow/*"
   
       annotations:
         external-dns.alpha.kubernetes.io/hostname: ${web_url}
         kubernetes.io/ingress.class: alb
         alb.ingress.kubernetes.io/group.name: dataengineering
         alb.ingress.kubernetes.io/group.order: '10'
         alb.ingress.kubernetes.io/scheme: internal
         alb.ingress.kubernetes.io/target-type: ip
         alb.ingress.kubernetes.io/target-group-attributes: stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=3600
   
         alb.ingress.kubernetes.io/certificate-arn: ${aws_acm_certificate_arn}
         alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]'
         alb.ingress.kubernetes.io/actions.ssl-redirect: '{"Type": "redirect", "RedirectConfig": { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}'
   ```
   
   I think your `config.webserver.base_url` is incorrect, it needs to be a valid private/public URL


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org