Make chectl deploy Che with ssl by default #15325
Labels
area/chectl
Issues related to chectl, the CLI of Che
kind/task
Internal things, technical debt, and to-do tasks to be performed.
status/duplicate
Issue identified as a duplicate of another issue
Is your task related to a problem? Please describe.
Recently, some components of Eclipse Theia were reimplemented to work only with secured connection, i.e. they work only with https protocol. After that changes we have a batch of issues on Che Theia side.
Describe the solution you'd like
We should deploy Che with SSL by default. Chectl should take care about sertificates on its own without a batch of manual actions.
Ideally, would be great to use some free (say Let's Encrypt) service to get certificates.
Also option to provide own certificate should be present.
Would be nice to have documented the flow.
Describe alternatives you've considered
We may start from self-signed certificates as it is the simplest solution (however chectl should do it instead of user).
Maybe we should consider a common certificate for all dev instances (it might be not really secure, but Che will work on https by default).
Additional context
As for now to make everything work we need to do many manual steps to deploy Che with SSL. Here is some instructions how one may try to do it. However, there are some other issues which makes development in local Che instance not friendly, even complicated.
The text was updated successfully, but these errors were encountered: