Skip to content
This repository was archived by the owner on Jan 26, 2023. It is now read-only.

Add Redis Auth and mTLS support#14

Merged
beautifulentropy merged 19 commits intomainfrom
mTLS-and-Password-Support
Dec 9, 2021
Merged

Add Redis Auth and mTLS support#14
beautifulentropy merged 19 commits intomainfrom
mTLS-and-Password-Support

Conversation

@beautifulentropy
Copy link
Copy Markdown
Member

@beautifulentropy beautifulentropy commented Dec 7, 2021

This commit adds support for Redis Auth and mTLS to both attache-check and
attache-control. The number of configuration flags being added in this commit
necessitated a little bit of reorganization and cleanup to the config validation
code.

Similar to the aforementioned config cleanup, the large amount of new vars being
added to the example/job-specification.hcl necessitated the creation of an
hcl vars-file at example/vars-file.hcl. All new vars being added to the job
specification have been fully commented as well.

Fixes #7
Fixes #8
Part of #11

Comment thread .gitignore
Comment thread src/redis/config/config.go
Comment thread src/redis/config/config.go
Copy link
Copy Markdown

@jsha jsha left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we don't need auth-enable and tls-enable flags. We should treat auth and TLS as always-on features, and fail out if the needed flags (username, password, certs, etc) are not provided.

Comment thread cmd/attache-control/config.go
Comment thread example/vars-file.hcl
Comment thread example/vars-file.hcl Outdated
Comment thread src/redis/config/config.go Outdated
Comment thread src/redis/config/config.go Outdated
@jsha
Copy link
Copy Markdown

jsha commented Dec 8, 2021

(related to the above- I believe the code as currently written would allow you to pass the cert file and key file flags, but if you failed to also pass the enablement flags, it would silently ignore those, which would be bad)

@beautifulentropy
Copy link
Copy Markdown
Member Author

(related to the above- I believe the code as currently written would allow you to pass the cert file and key file flags, but if you failed to also pass the enablement flags, it would silently ignore those, which would be bad)

Yeah, I can totally see how that would be confusing.

@beautifulentropy beautifulentropy requested a review from jsha December 9, 2021 23:13
@beautifulentropy beautifulentropy merged commit 41ffb2a into main Dec 9, 2021
@beautifulentropy beautifulentropy deleted the mTLS-and-Password-Support branch December 9, 2021 23:53
beautifulentropy added a commit that referenced this pull request Dec 10, 2021
This commit adds support for Redis Auth and mTLS to both `attache-check` and
`attache-control`. The number of configuration flags being added in this commit
necessitated a little bit of reorganization and cleanup to the config validation
code.

Similar to the aforementioned config cleanup, the large amount of new vars being
added to the `example/job-specification.hcl` necessitated the creation of an
`hcl` vars-file at `example/vars-file.hcl`. All new vars being added to the job
specification have been fully commented as well.

Fixes #7
Fixes #8
Part of #11
beautifulentropy added a commit that referenced this pull request Dec 10, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add mTLS support for the redis/client and redis/cli Add password support for the redis/client and redis/cli

3 participants