Jenkins X: a CI/CD solution for cloud applications on Kubernetes

tuananh wrote: post #3

nodesocket wrote: post #2

No TLS on jenkins-x.com, tisk tisk.

it's using github pages for the main website i think so i'm not sure if it's possible to setup custom domain + custom ssl cert for it?

I've used cloudflare to do SSL for a custom github pages domain before.

Re: Jenkins X: a CI/CD solution for cloud applications on Kubernetes

#5

Post by nodesocket » Tue, Apr 24, 2018, 4:01 AM UTC

tuananh wrote: post #3

nodesocket wrote: post #2

No TLS on jenkins-x.com, tisk tisk.

it's using github pages for the main website i think so i'm not sure if it's possible to setup custom domain + custom ssl cert for it?

Should be able to use CloudFlare and "flexible" SSL setup. CNAME at the apex pointing to GitHub pages.

Re: Jenkins X: a CI/CD solution for cloud applications on Kubernetes

#6

Post by samridh90 » Tue, Apr 24, 2018, 4:03 AM UTC

tuananh wrote: post #3

nodesocket wrote: post #2

No TLS on jenkins-x.com, tisk tisk.

it's using github pages for the main website i think so i'm not sure if it's possible to setup custom domain + custom ssl cert for it?

It's possible but not very straightforward. Reference for anyone else trying to setup ssl cert for github pages: https://www.jonathan-petitcolas.com/2017/01/13/using-https-w...

Re: Jenkins X: a CI/CD solution for cloud applications on Kubernetes

#7

Post by LethargicStud » Tue, Apr 24, 2018, 4:05 AM UTC

nodesocket wrote: post #5

tuananh wrote: post #3

Earlier quoted context omitted.

it's using github pages for the main website i think so i'm not sure if it's possible to setup custom domain + custom ssl cert for it?

Should be able to use CloudFlare and "flexible" SSL setup. CNAME at the apex pointing to GitHub pages.

Please don't do this. It gives the user the illusion that their connection is secure, but the connection between Cloudflare and the site is not secure. Arguably it's better to encrypt some of the route rather than none of it, but also giving people a false sense of security comes with its own drawbacks.

Re: Jenkins X: a CI/CD solution for cloud applications on Kubernetes

#8

Post by nodesocket » Tue, Apr 24, 2018, 4:09 AM UTC

LethargicStud wrote: post #7

nodesocket wrote: post #5

Earlier quoted context omitted.

Should be able to use CloudFlare and "flexible" SSL setup. CNAME at the apex pointing to GitHub pages.

Please don't do this. It gives the user the illusion that their connection is secure, but the connection between Cloudflare and the site is not secure. Arguably it's better to encrypt some of the route rather than none of it, but also giving people a false sense of security comes with its own drawbacks.

Actually "flexible" might not be needed, "full" without strict should work. Traffic is still over TLS, but a valid named certificate is not required.

Re: Jenkins X: a CI/CD solution for cloud applications on Kubernetes

#9

Post by spockz » Tue, Apr 24, 2018, 4:12 AM UTC

nodesocket wrote: post #2

No TLS on jenkins-x.com, tisk tisk.

I’m using netlify[1] to host my site and it supports tls on public domains - through let’s encrypt - and http2 out of the box.

[1]: https://www.netlify.com/

Re: Jenkins X: a CI/CD solution for cloud applications on Kubernetes

#10

Post by ku6pk » Tue, Apr 24, 2018, 4:16 AM UTC

In no attempt to bash OP at all, but what is the HN policy on links that have been posted before?

Edit: Previous posts for reference

https://news.ycombinator.com/item?id=16622215

https://news.ycombinator.com/item?id=16626765

https://news.ycombinator.com/item?id=16628313

https://news.ycombinator.com/item?id=16658640