"How do you apply SSL to CDS API?" -> we configure a LB (haproxy, what you want) with ssl
it's not configured directly on CDS Api for now
About ES: you need to create index yes. It's used to stored two things: timeline (to persist) and vulnerabilities computed on CDS Application. There is some documentation about what is it on this PR: https://github.com/ovh/cds/pull/4562/files, it will be merged after release 0.42
issue created to add some doc about it: ovh/cds#4601
TLS on engine is planned on the refactor branch about authentication here: ovh/cds#4556 If you want TLS today between service, you have to use LB in front of them
[api.http]
# Listen HTTP address without port, example: 127.0.0.1
addr = "127.0.0.1"
port = 8081
you can configure that on all services
@Smithx10 "For some reason, a User can Create a Project but they can't click the create workflow button etc" -> yes, today, everybody can create a project. About the restriction with creating workflow, the user has write access to the project?
the create thingie was greyed out
@yesnault Is there a git issue or a branch about doing TLS to the API servers?
I can probably handle that
I was also thinking about adding "GITEA" as a VCS
I'm curious if because it differs from the index you created*
@Smithx10 about the ES Index "Event" data -> We'll start a
engine start kpi this week, this will let user to configure a ES on a project, or administrator on a whole CDS. This will be develop as an "integration". The index "creation" will be documented with this new uservice. This new service let user (or CDS administrator of course) do some graphs with kibana, this will be much more useful than today.
@Smithx10 and about last question about run conditions -> you can add run conditions on a Stage or on a node of a workflow (pipeline, hook, etc...)
@matspitz1 about the job queued -> it can be many things, but some checks to do: do you have a worker model with "need registration=false"? If yes, do you have binary prerequisite on job, and theses binary are there available in the worker model? Do you have a default OS / Arch ? If yes, the hatchery launched runs workers with the same os /arch?
@matspitz1 and about Github. The 404 page is on GitHub on is it the callback on your CDS UI? I'm available in private if you want me to debug something (and probably improve some docs about that)
i keep getting errors when adding my URL when running
engine start vcs --config vcs-config.toml
Unable to register: Register: internal server error (caused by: Post http://localhost:8081/services/register: dial tcp [::1]:8081: connect: connection refused)
Service has been stopped: vcs Register: internal server error (caused by: Post http://localhost:8081/services/register: dial tcp [::1]:8081: connect: connection refused)
Service has been stopped: vcs Register: internal server error (caused by: Post http://localhost:8081/services/register: dial tcp [::1]:8081: connect: connection refused)
@matspitz1 the vcs.api.http -> must be the url of the CDS API. Your CDS API is running and listening on http://localhost:8081 ?
however when i am running a step script with ssh, i am continuously running into issues when trying to install the key
i have added this to my step script
eval $(worker key install --env proj-mykey)echo $PKEY # variable $PKEY will contains the path of the SSH private key
Next step in private message for debugging
When I try to clone an environment (in UI) having "password" variables, I get an error "Bad request" "valeur du secret non spécifiée"
Does it mean I can't clone an environment that has password variables ?
hum, sorry, I'd just understand the question