TLS check for external ssl offloading

[JesusRo]

Hey there,

First at all, thanks for the app. I was maintaining something manually and this just fits right so good!

I was sondering if someone could be on same case than me.
I have an external LB doing SSL offloading in front of k8s, so even when the ingress itself is "TLS off" the site is actually "TLS on".

Would be posible to add an annotation for that particular case?
Or make the tool to check the actual url? (which always returns a redirect to https)

It would be nice to have the cert expiration details.

[reddec]

Hello @JesusRo,

Thanks for the feedback!

• You can see expiration details as a tooltip (just move the mouse on top of "TLS"). Also, in case of soon expiration (a few weeks before), it will change the text.
• I can add annotation ingress-dashboard/check-tls-url where you can set arbitrary URL which will be used as URL for TLS information. Implies "TLS on"
• Another (softer) annotation could be ingress-dashboard/assume-tls which will forcefully set "TLS on", so ingress-dashboard will follow the general procedure of TLS checking.

WDYT?

[JesusRo]

Hi @reddec ,

I think it would make sense to go with the second annotation of TLS flag that adds the https prefix, and then the rest of the workflow continues

That would be the easiest update for me, as it's the same anotation for all my ingresses instead to have to write each one with its full URL

On the other hand, I believe that having an annotation to override the url can be useful. Not only for TLS purposes but also in cases where the ingress is accessed via a cname or similar, not related/shown on the ingress resource itself

I'm not sure how hard/easy the implementations are. I just started to learn go to understand it a bit more 😅

[reddec]

@JesusRo try v0.2.0 (you will need assume-tls-force-tls)

[reddec]

Sorry, v0.2.1 will be better (UI fixes) 😅

[JesusRo]

Hi, I just tested and it´s working like a charm.
The urls appears https and the tls stuff with the expiration

tons of thanks!