b386dbd631
The Apache 3081 proxy allows us to do layer 7 filtering on incoming requests. However, it was returning 502 errors because it proxies to https://localhost and the certificate doesn't match (see SSLProxyCheckPeerName directive). However, we can't use the full hostname in the gate because our self-signed certificate doesn't cover that. Add a variable and proxy to localhost in the gate, and the full hostname in production. This avoids us having to turn off SSLProxyCheckPeerName. Change-Id: Ie12178a692f81781b848beb231f9035ececa3fd8 |
||
---|---|---|
.. | ||
adns.yaml.j2 | ||
afs-client.yaml.j2 | ||
all.yaml.j2 | ||
control-plane-clouds.yaml.j2 | ||
eavesdrop.yaml.j2 | ||
gitea-lb.yaml.j2 | ||
gitea.yaml.j2 | ||
jvb.yaml.j2 | ||
letsencrypt.yaml.j2 | ||
meetpad.yaml.j2 | ||
nodepool-launcher.yaml.j2 | ||
nodepool.yaml.j2 | ||
ns.yaml.j2 | ||
registry.yaml.j2 | ||
review-dev.yaml.j2 | ||
review.yaml.j2 | ||
zuul-executor.yaml.j2 | ||
zuul-merger.yaml.j2 | ||
zuul-scheduler.yaml.j2 | ||
zuul-web.yaml.j2 | ||
zuul.yaml.j2 |