Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resolve CSP issue blocking Sentry requests in Traefik configuration #1218

Closed
placek opened this issue Jun 10, 2024 · 2 comments · Fixed by #1362
Closed

Resolve CSP issue blocking Sentry requests in Traefik configuration #1218

placek opened this issue Jun 10, 2024 · 2 comments · Fixed by #1362
Assignees
Labels
🐛 Bug Something isn't working 🏗 Infrastructure

Comments

@placek
Copy link
Contributor

placek commented Jun 10, 2024

User Story: As a frontend developer, I want to fix the Content Security Policy (CSP) issue that is blocking Sentry requests in the Traefik configuration so that error tracking and monitoring using Sentry can function correctly.

Summary: The frontend service is encountering a CSP-related problem, where requests to send data to Sentry are being blocked by client-side security mechanisms, as indicated by the error message. This issue is stemming from the configuration of Traefik, a popular reverse proxy and load balancer, which is preventing these requests from reaching the Sentry platform. Resolving this issue is crucial to ensure that error logging and monitoring through Sentry can operate effectively and provide necessary insights for troubleshooting.

Acceptance Criteria:

  1. Analyze the current CSP settings in Traefik to identify the specific rule or configuration that is blocking requests to Sentry.
  2. Adjust the CSP configuration in Traefik to allow requests to the Sentry endpoint, specifically permitting POST requests to the Sentry API.
  3. Test the updated configuration to confirm that Sentry requests are no longer blocked and that error data can be successfully transmitted to the Sentry platform.
  4. Ensure that the CSP changes do not compromise the security of the frontend service and adhere to best practices for content security policies.
  5. Document the modifications made to the Traefik configuration for future reference and maintainability.
@MSzalowski
Copy link
Contributor

Reopening this issue as sentry is still being blocked

@bosko-m
Copy link
Contributor

bosko-m commented Aug 28, 2024

@MSzalowski @placek Is this still relevant?

@bosko-m bosko-m closed this as completed Nov 3, 2024
@github-project-automation github-project-automation bot moved this from To do to Done in Govtool all Nov 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🐛 Bug Something isn't working 🏗 Infrastructure
Projects
Status: Done
Development

Successfully merging a pull request may close this issue.

3 participants