Just a (simple?) question: What's the recommodatio...
# all-things-deploymentb
brave-businessperson-3969
11/15/2021, 12:46 PMJust a (simple?) question: What's the recommodation to protect the GUI via https/SSL? Just put a proxy in front of the datahub-frontend-react container and terminate the HTTPS there or are there other options/recommodations?
e
early-lamp-41924
11/15/2021, 5:04 PMThat is the recommendation as of now. Unfortunately, we don’t have SSL setup in frontend directly as of now.
b
big-carpet-38439
11/15/2021, 5:46 PMCorrect - however, we'd be very interested in a contribution in this space! I think it's a matter of exposing the correct configurations in the
datahub-frontendb
brave-businessperson-3969
11/15/2021, 5:54 PMHi, thanks for the answers. Concering contributions: I'm affraied I'm not to familiar with Java in general and the DataHub codebase in particular to make any meaingful contributions in this area. But I can perhaps provide some documentation how to setup datahub with a proxy server to get https access to the frontend.
brave-businessperson-3969
11/15/2021, 5:58 PMOne additional question: Does the Rest interface (which is used to push metadata to the datahub backend) also not support TLS? All the example files for metadata ingestions use
config:
server: http://localhost:8080"
as their sink. I've found no example showing https or other targets then localhost.
m
miniature-tiger-96062
11/15/2021, 10:30 PMHi @brave-businessperson-3969,
Ingestion does support "https". You need to setup the endpoint through ingress and then modify the recipe file.
cc: @early-lamp-41924 if I missed anything.
b
big-carpet-38439
11/16/2021, 12:54 AMSo you'd need to terminate SSL at a proxy in front of gms. I believe this can be achieved on K8s using ingress!
q
quick-animal-47381
02/09/2022, 5:36 PMHi everyone! Just wanted to follow up on whether there were any updates on the recommendation for SSL for the frontend? To my research it seems like all components of Datahub can talk to each other via SSL so this would be the last piece. Is that true? Thanks!
quick-animal-47381
08/02/2022, 6:38 PMWhat we’ve done is to setup a AWS ELB that takes incoming traffic from outside via HTTPS, and routes that traffic into internal Datahub components via HTTP.
3 Views