Feature #17209
open
Controller forwards web requests to crunch worker nodes
Added by Tom Clegg about 4 years ago.
Updated almost 2 years ago.
Release relationship:
Auto
Description
Controller checks authorization, looks up the addr:port of the relevant crunch-run process, and forwards the request there.
Details on #17207
Related issues
2 (2 open — 0 closed)
- Related to Story #17207: External access to web services running in containers added
- Status changed from New to In Progress
- Assigned To set to Tom Clegg
This provides the basic functionality of forwarding external requests to https://{uuid}-{port}.zzzzz.example.com/foo through Nginx+controller to http://{container}:{port}/foo on the worker node:
17209-http-forward @ bb050a077ae014a8db2e58589f1b62dc6462afe2 -- developer-run-tests: #2469 
Todo:
- Upgrade notes (add wildcard to nginx conf)
- Documentation (as usual I could use some help with this)
- Config knob to enable/disable (currently follows "shell access" configs, right up to the error messages "shell access is disabled in config")
- Tests for "not permitted/configured" and "missing/invalid token" cases
- Tests for redirect-with-cookie behavior (and rename the query param from "arvados_api_token" to "api_token" to match other places where we do this)
- Tracker changed from Feature to Task
- Estimated time set to 0.00 h
- Tracker changed from Task to Feature
- Related to Feature #17206: crunch-run reverse proxies HTTP requests to container added
Also available in: Atom
PDF
Updated by 
Updated by