Comments (3)
Hi @cbell38,
Could you please share the following items :
custom-values-new.yaml
- Is it a fresh install or upgrade? If it is an upgrade please provide the previous chart version
- Please share a k8s version, Is it the open-shift cluster?
from charts.
Hi @cbell38,
Still waiting for your details, for more details regarding this issue please check :
#1860 (comment)
from charts.
This was an upgrade. We are running on AKS with k8s version 1.25.6.
We wound up being able to resolve the issue. Typically we have a custom ConfigMap for artifactory.conf for HTTP to HTTPS redirect following this doc https://jfrog.com/help/r/artifactory-how-to-enforce-http-to-https-redirection-in-artifactory-for-browser-access-using-nginx-and-helm-charts/step-2 but we wound up having to unset that variable in the values.yaml file and hard code the conf file to artifactoryConf in the chart. We also had to update the ports in the conf to 8080 and 8443
nginx:
artifactoryConf: |
ssl_protocols TLSv1.2 TLSv1.3;
ssl_certificate /var/opt/jfrog/nginx/ssl/tls.crt;
ssl_certificate_key /var/opt/jfrog/nginx/ssl/tls.key;
ssl_session_cache shared:SSL:1m;
ssl_prefer_server_ciphers on;
## server configuration
server {
listen 8080;
server_name ~(?<repo>.+)\.jfrt-artifactory jfrt-artifactory;
return 301 https://$host$request_uri;
}
server {
listen 8443 ssl;
server_name ~(?<repo>.+)\.artifactory-ha artifactory-ha;
if ($http_x_forwarded_proto = '') {
set $http_x_forwarded_proto $scheme;
}
## Application specific logs
## access_log /var/log/nginx/artifactory-access.log timing;
## error_log /var/log/nginx/artifactory-error.log;
rewrite ^/artifactory/?$ / redirect;
if ( $repo != "" ) {
rewrite ^/(v1|v2)/(.*) /artifactory/api/docker/$repo/$1/$2 break;
}
chunked_transfer_encoding on;
client_max_body_size 0;
location / {
proxy_read_timeout 3600;
proxy_max_temp_file_size 0;
proxy_send_timeout 3600;
proxy_pass_header Server;
proxy_cookie_path ~*^/.* /;
proxy_pass http://artifactory-ha:8082/;
proxy_set_header X-JFrog-Override-Base-Url $http_x_forwarded_proto://$host;
proxy_set_header X-Forwarded-Port $server_port;
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_request_buffering off;
proxy_buffering off;
proxy_ignore_headers "X-Accel-Buffering";
add_header Strict-Transport-Security always;
add_header Strict-Transport-Security always;
location /artifactory/ {
if ( $request_uri ~ ^/artifactory/(.*)$ ) {
proxy_pass http://artifactory-ha:8081/artifactory/$1;
}
proxy_pass http://artifactory-ha:8081/artifactory/;
}
location /pipelines/ {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $http_host;
proxy_pass http://artifactory-ha:8082;
}
}
}
from charts.
Related Issues (20)
- [Xray] can't enable loggers: can't evaluate field Values in type interface {} HOT 3
- Artifactory StatefulSet pod annoations toYaml HOT 1
- Please release jfrog platform new version HOT 1
- Jfrog Artifactory nginx pod restarting because of startup probe failed
- [Xray] Add ability to configure defaultRetentionDaysForIndexedRepo for Xray
- Missing docker image HOT 2
- Current SecurityContext settings doesnot allow to run it secure on EKS HOT 6
- Maintaining logs by days HOT 1
- 7.71.5 HOT 2
- Potentially Artifactory Frontend UI Bug-Report HOT 3
- Federation internal port should not be created when federation is disabled
- artifactory-ha helm chart has problem with join key HOT 2
- Upgrade jfrog-platform to fix security issue JA-7492 HOT 1
- artifactory-oss router does not start, reports 'Missing required services: [jfrt jfob jffe]' HOT 2
- Deploying Artifactory Pro with Helm Chart on GKE - HTTP 405 Docker HOT 2
- login with oauth error - Binding token to existing user HOT 1
- Cannot write to /opt/jfrog/router/app/router/router.pid: Permission denied HOT 13
- [FATAL] Cluster join: Failed resolving join key: failed resolving 'shared.security.joinKey' key; file does not exist: /opt/jfrog/router/var/etc/security/join.key HOT 1
- production incident: Nginx new port setup is broken HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from charts.