Skip to content

Conversation

@slavachy
Copy link
Collaborator

Description

Add SSL/HTTPS support for worker and triggerer log servers to enable secure log transmission in production deployments.

Changes

Configuration

  • Add worker_log_server_ssl_cert - path to SSL certificate
  • Add worker_log_server_ssl_key - path to SSL private key
  • Add worker_log_server_ssl_verify - SSL verification control (True/False/path to CA bundle)

Implementation

  • Update serve_logs.py to configure Gunicorn with SSL certificates
  • Update file_task_handler.py to use HTTPS URLs when SSL is configured
  • Automatic protocol detection (HTTP/HTTPS) based on SSL config

Testing

  • Add comprehensive SSL configuration tests
  • Add tests for SSL certificate verification
  • Add tests for error handling (missing cert/key files)

Documentation

  • Add "Securing log server with SSL" section to logging-tasks.rst
  • Add SSL configuration examples
  • Add deployment considerations and security warnings
  • Add SSL section to security/webserver.rst

@luserg
Copy link
Collaborator

luserg commented Dec 22, 2025

You need to make sure the parent branch is the correct 2.10.5-develop branch and not another one.
2.10.5-develop -> ado-320(rename plz, e.g. feature/worker-log-server-security ) -> feature/ado-348

@slavachy
Copy link
Collaborator Author

duplicate, final branch changed

@slavachy slavachy closed this Dec 23, 2025
@slavachy slavachy deleted the feature/ado-348 branch December 23, 2025 10:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants