Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(redis) enable ssl #45

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 17 additions & 3 deletions docker/docker-compose.yml.sh
Original file line number Diff line number Diff line change
Expand Up @@ -102,7 +102,10 @@ cat << EOF
KONG_TEST_PG_HOST: ${KONG_TEST_PG_HOST:-db}
KONG_TEST_PG_DATABASE: ${KONG_TEST_PG_DATABASE:-kong_tests}
KONG_TEST_CASSANDRA_CONTACT_POINTS: ${KONG_TEST_CASSANDRA_CONTACT_POINTS:-db}
KONG_SPEC_REDIS_HOST: ${KONG_SPEC_REDIS_HOST:-redis}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If updates are being made to the spec/helpers.lua file in Kong Gateway to add _TEST_ for these variables we can't simply remove this one as it would break older versions of Kong Gateway.

KONG_SPEC_TEST_REDIS_HOST: ${KONG_SPEC_TEST_REDIS_HOST:-redis}
KONG_SPEC_TEST_REDIS_PORT: ${KONG_SPEC_TEST_REDIS_PORT:-6379}
KONG_SPEC_TEST_REDIS_SSL_PORT: ${KONG_SPEC_TEST_REDIS_SSL_PORT:-6380}
KONG_SPEC_TEST_REDIS_SSL_SNI: ${KONG_SPEC_TESR_REDIS_SSL_SNI:-test-redis.example.com}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Environment default is misspelled and test-redis.exaple.com isn't consistent with other CN naming for this environment (see comment in server.crt).

Suggested change
KONG_SPEC_TEST_REDIS_SSL_SNI: ${KONG_SPEC_TESR_REDIS_SSL_SNI:-test-redis.example.com}
KONG_SPEC_TEST_REDIS_SSL_SNI: ${KONG_SPEC_TEST_REDIS_SSL_SNI:-kong_redis_ssl}

# DNS resolution on docker always has this ip. Since we have a qualified
# name for the db server, we need to set up the DNS resolver, is set
# to 8.8.8.8 on the spec conf
Expand Down Expand Up @@ -233,13 +236,14 @@ fi
if [[ -n $GOJIRA_REDIS ]]; then
cat << EOF
redis:
image: redis:${REDIS_VERSION:-5.0.4-alpine}
image: redis:${REDIS_VERSION:-6.2.6-alpine}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's keep the default on the 6.0 line; it can still be overridden with an env variable)

Suggested change
image: redis:${REDIS_VERSION:-6.2.6-alpine}
image: redis:${REDIS_VERSION:-6.0.16-alpine}

EOF

if [ "$GOJIRA_NETWORK_MODE" != "host" ]; then
cat << EOF
ports:
- 6379
- 6380
EOF
fi

Expand All @@ -262,7 +266,7 @@ EOF
fi
cat << EOF
volumes:
- ${DOCKER_CTX}/redis-cluster.sh:/usr/local/bin/redis-cluster.sh
- ${DOCKER_CTX}/redis/cluster.sh:/usr/local/bin/redis-cluster.sh
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

File was not moved, this will not work as currently implemented.

command: ["sh", "/usr/local/bin/redis-cluster.sh"]
healthcheck:
test: ["CMD", "redis-cli", "-p", "7005", "ping"]
Expand All @@ -272,6 +276,16 @@ cat << EOF
EOF
else
cat << EOF
volumes:
- ${DOCKER_CTX}/redis/server.crt:/usr/local/etc/redis/server.crt
- ${DOCKER_CTX}/redis/server.key:/usr/local/etc/redis/server.key
command: >-
--tls-port 6380
--tls-cert-file /usr/local/etc/redis/server.crt
--tls-key-file /usr/local/etc/redis/server.key
--tls-cluster no
--tls-replication no
--tls-auth-clients no
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 5s
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should isolate all these docker-compose changes into its own extra (e.g. redis-ssl) and then eggs can be applied to update the redis section of the docker-compose. This will also isolate the generation of the certs into extras/redis-ssl/keys directory.

Expand Down
28 changes: 28 additions & 0 deletions docker/redis/ca.crt
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
-----BEGIN CERTIFICATE-----
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These certs should be generated and for consistency follow the same pattern that the hybrid extra uses:

  • Generate the keys if they do not exists
  • Expire them after 365 days (the current certs expires Aug 1 01:03:35 3021 GMT which is excessive for generated certs)
  • Update .gitignore to ignore the generated certs
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==
-----END CERTIFICATE-----
51 changes: 51 additions & 0 deletions docker/redis/ca.key
Original file line number Diff line number Diff line change
@@ -0,0 +1,51 @@
-----BEGIN RSA PRIVATE KEY-----
MIIJKQIBAAKCAgEAnEczUETUFuCjMb3vIUeQndf1n/Mm/hY6Ls+Olg292C+M2k50
ezNpQ692jHz8FNWHQbQLnE4DbbXwlDkhlh8e2bdGhdG+1W8ESMW0WyZeJrzgdwZN
kYasnGogzUu5kOV0BCekbtoXPY+b6iBcnMjBBsX7XJyI6YCq0txT3T0hEnAYDt3i
syoBT3CtfoJekW1WdS+VOQnH+rmmL2DlcCelJk43hRdV1R0JU834LyYoRrSZLHXU
l+aR+LrAA76A+2pC71NqisSFL1JTLs1ETPiU2GeaT3ZSyxc0sZ4gJxvN1bgxH2HT
b9oF6jpL+R7lC+SRjdjNRXj3HFKTcYRm1RzP93IMroIFXdT5tt6d4+/nGt/9mBvc
io23CuO5/lGpNue1mDB+vgvVrJXQRQusCJZxbvlCEAFw4PqDQqsOygaAenA2pLsm
Vrjl5eegSOvO8cWlzi1JUhmx9g0NZlYkAqmawal4ujlim7olE0pH5L+Y9vVQZZ78
4UtaWecxr5k3VAJnKHTw5WqRo0WusCHOR7sVmjeYwnZm1cvEJia+rl+jzgA8doRV
LD8y/8Z3VuuD5Z7lmcBifX7H3gl4HKRNpzU+3EFVFmI230TDoVu8OlwSmfjuIqtE
EYyobwNi+wzJWZyMnr94LseweUKfagKq7UdnyTuKUJUhT67ij/XACR0AAYMCAwEA
AQKCAgEAkyXHfzEPsmrZvqBkZSWJWdZahLziXiR3rFPqogdWVhSPv45XxxllaEHy
kd2tTcCwloD83bPnLoo9eJNCuKOc3MrhMGeKFFVv50WgyKKbzEXT5L6ekwQHy09y
i1td4rzqPG9HOMlJUMHDwPOvwECW39XTFCSgFZz9O4YRwSMp3L6HKJhsON64VSB3
e8MtYClfWv/utcIr9jyP6dSGtM/fhO3pAPwz6XJpsesiYOLA0bKC94YLIuwLTfQp
kFzz/cbUN5yHmRnpfeE6SbslMIRvQkRq259B3dB/4S5OgASCD1Zbin0GJS9Ymm9B
0dPxPv18v97/iQaZRqXKBvzwBoIWniJ1UXZ8Lo+9IePLJG6KUXG/sMSZlYhCt6Qz
U4XVuNy1zDJqtSunBIYAarkY1NAg/tNfcyb5/u9wXDrvBrE6XXxte2jNrMaSbfS6
+IJJ2GRaQGn92otRNQnD+XxeRP0r5BY9h8vYC5R3sI+sXft10VmEhnAvZXdlbqrs
b6qtf+C5BvI74M7pGsfJS6uH7GWvduTf6MDMPi/YeS0ZP2KPv5IvT65sTZ3KGRoj
r4OQOkVi1jcNK37FjBTVOaIkYj7G8EMhksUm139/XZ2OUqVve7kCfTeRByK27Cna
/1MUWjSrx+bjB9vvNmFOOt70XQ2IyIE6FaRq+MET7ivAgNM7G+ECggEBAM76MHgc
CMQkN6TSTwLVJYX5YGR8Cf4pYGFmfIGgevnUq5T01hwR9UBlsKHOCmK16uijsJ50
6M+lw0lUfInIvoLA9oC44h3bMukeJvyOYS9dEMCUtwa2Nt4hyQvWd7wafSUXAP8F
Qvskg0QMIMWYTMHsNAMQhpCg+yDL2PEQ+6ELlD8W/rkIHlWbXULs2dxyDkhjvCIc
c4Mj8/dhhTYLjvfSXY/oAwpU+VFcIvaCeNfwLh1WRnqJtlWSBdbayalyPZrpCVI5
Uy3bHGWluV00+foipxaQOC/A+IoVYpaREVrF48s/JD4nMbnAKWPAfSmH/zTy4c6F
Gw6fSBpmEMsCMc8CggEBAMFK7gjK9d1cGmDjGEvHZn29QAMi/rPtUN8K8QGQGVyN
K0zFKnhI7y+PlPzxsvWpkLEPL8jAkg6O7M6wWyBqefhmTGD8+Q9necOUBBwDiVfD
M9tlg+MX46Uqwj6J37XS1ehKCPlyzjLEVnHgcLlJJTNItr33lPa3jYlEp+GYJ6I4
lT4FO5hKEoQ6msltBUTtNMviA2wdpmLiK7CsUEJoIWuvoumXJPMfNlB6urjrMpMH
0z5n68MBn7gkOXQ6ve/9nCtAbvDaVNqgPyUzB1PJU0tiiABfnzN1rjG4BsFgb2HL
hg6UNyFgtqGYU+X+BOjlya9+dogUk1zSIJzYpfsFZg0CggEAKgKSD+7wwI7xVFzz
eIm2wgipzft3M8VGML7SiqT+EPNfmC5RvwTOGLILNexSI1L1SR7gXGkyT+M/TgT9
+iFqubNc1SexjYnOPY7HLv/fLfPf0Jbex1f4rwGAgwyW5PEjcYHHy/tPaxYwJoGn
rTOKcNn2fKDAD179WdzGPbfKuxdUkbGjJf9F2O5d8ZWNarcjuwGzT+EieP21KQL8
PMn/zMFACFN5OoGg0Si4V/yHdpzjX0UBrSGChr/Ku59QyznK00R1heDoxyfwDZmj
lA2Kp4CdFXFUViz+xVgt2I29TgVYhQpd2tetuhwMyphpTyKxZBfgSUCvCzq9Mc6B
nhLl9QKCAQEAl6IEYfl2LxUVzHPal3fxuyo/kTZewR+mlZKrxiIZAzXrheoWiw4M
NS9aHaQuU/GVhJD5V29aJPmSZAKNOjzNOkRmHp/VcnQmXXs8Tg2oLKUBhVd5wyj2
eJe2kgDu8mBXVkbeC3I4uDK17de4FmJ/QGAGm7ghr/oGmmy1lpAaZ3Qj/+dy/OD+
7aRb0TApNg0vodHIBYStBl2PEKXcwHuX3DaIgt8DKYaOwUvGN1Kq9hTpbsdveCdJ
+NbSC5AZeK9nV7bQUTm131xerPv+/4esRDMjpcddyKzE3lQTWJgiSIG0xLMZHKIW
I2awSnifuWSqd3Wp3s7lW6er1d9PNkDh8QKCAQBBtPekbnFkxFFgT8Ndpwfa5la/
Sxuh4F/OBdMQe/I6uw8ZZ4pAepMCbrDjIjPIOnWsXlJ9fDi1Nwh1dkLtdRu/Xxn5
jleGCqh+FRFXbHdKuvUXg05eIS/DjT/RLeOGH/GuBpGmpok5HusdpsIsawEAh183
s0+wCcu2Y/dP3DKsZTfcm6LHCjk+z6sS/RkoZvRcR4nAET8LYXPotU8FApibO/fQ
dlzOMPkbQ04pKJ96cJNaX9stah2b0eP33O8VWelkJTx9AvpO/6rvxLf0rksMqAEC
J7j6yeKgzUNVg+karxE5EtGJuBR2L1ixzq8dX1Ie3Smy3Jhh/3+cWhhp054o
-----END RSA PRIVATE KEY-----
File renamed without changes.
28 changes: 28 additions & 0 deletions docker/redis/server.crt
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The CN test-redis.example.com should be changed to something like kong_redis_ssl; this is to stay consistent with hybrid CN naming.

51 changes: 51 additions & 0 deletions docker/redis/server.key
Original file line number Diff line number Diff line change
@@ -0,0 +1,51 @@
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
5 changes: 4 additions & 1 deletion extra/host-mode.yml.sh
Original file line number Diff line number Diff line change
Expand Up @@ -11,5 +11,8 @@ services:

KONG_TEST_PG_HOST: ${KONG_PG_HOST:-localhost}
KONG_TEST_CASSANDRA_CONTACT_POINTS: ${KONG_CASSANDRA_CONTACT_POINTS:-localhost}
KONG_SPEC_REDIS_HOST: ${KONG_SPEC_REDIS_HOST:-localhost}
KONG_SPEC_TEST_REDIS_HOST: ${KONG_SPEC_TEST_REDIS_HOST:-localhost}
KONG_SPEC_TEST_REDIS_PORT: ${KONG_SPEC_TESR_REDIS_PORTT:-6379}
KONG_SPEC_TEST_REDIS_SSL_PORT: ${KONG_SPEC_TESR_REDIS_SSL_PORT:-6380}
KONG_SPEC_TEST_REDIS_SSL_SNI: ${KONG_SPEC_TESR_REDIS_SSL_SNI:-test-redis.example.com}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
KONG_SPEC_TEST_REDIS_SSL_SNI: ${KONG_SPEC_TESR_REDIS_SSL_SNI:-test-redis.example.com}
KONG_SPEC_TEST_REDIS_SSL_SNI: ${KONG_SPEC_TEST_REDIS_SSL_SNI:-kong_redis_ssl}

EOF