Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@slavachy
Copy link
Collaborator

Description

Add SSL/HTTPS support for worker and triggerer log servers to enable secure log transmission in production deployments.

Changes

Configuration

  • Add worker_log_server_ssl_cert - path to SSL certificate
  • Add worker_log_server_ssl_key - path to SSL private key
  • Add worker_log_server_ssl_verify - SSL verification control (True/False/path to CA bundle)

Implementation

  • Update serve_logs.py to configure Gunicorn with SSL certificates
  • Update file_task_handler.py to use HTTPS URLs when SSL is configured
  • Automatic protocol detection (HTTP/HTTPS) based on SSL config

Testing

  • Add comprehensive SSL configuration tests
  • Add tests for SSL certificate verification
  • Add tests for error handling (missing cert/key files)

Documentation

  • Add "Securing log server with SSL" section to logging-tasks.rst
  • Add SSL configuration examples
  • Add deployment considerations and security warnings
  • Add SSL section to security/webserver.rst

Copy link
Collaborator

@luserg luserg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@slavachy slavachy merged commit 8e2db42 into 2.10.5-develop Dec 23, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants