HTTPS is required for unifi gui (#19612)

* HTTPS is required for unifi gui

Signed-off-by: Wayne Pascoe <wayne@penguinpowered.org>

* Removed new annotation in values.yaml
Added instructions in README

Signed-off-by: Wayne Pascoe <wayne+github@penguinpowered.org>
This commit is contained in:
WTPascoe 2019-12-15 16:17:37 +00:00 committed by Jeff Billimek
parent 0a221f5297
commit 0322acc6fe
No known key found for this signature in database
GPG Key ID: 214B3EF39B4956B7
3 changed files with 15 additions and 1 deletions

View File

@ -2,7 +2,7 @@ apiVersion: v1
appVersion: 5.11.50 appVersion: 5.11.50
description: Ubiquiti Network's Unifi Controller description: Ubiquiti Network's Unifi Controller
name: unifi name: unifi
version: 0.5.1 version: 0.5.2
keywords: keywords:
- ubiquiti - ubiquiti
- unifi - unifi

View File

@ -132,9 +132,22 @@ Read through the [values.yaml](values.yaml) file. It has several commented out s
with the controller using UDP. See [this article][ubnt 3] and [this other with the controller using UDP. See [this article][ubnt 3] and [this other
article][ubnt 4] for more information. article][ubnt 4] for more information.
## Ingress and HTTPS
Unifi does [not support HTTP][unifi] so if you wish to use the guiService, you
need to ensure that you use a backend transport of HTTPS.
An example entry in `values.yaml` to achieve this is as follows:
```
ingress:
enabled: true
annotations:
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
```
[docker]: https://hub.docker.com/r/jacobalberty/unifi/tags/ [docker]: https://hub.docker.com/r/jacobalberty/unifi/tags/
[github]: https://github.com/jacobalberty/unifi-docker [github]: https://github.com/jacobalberty/unifi-docker
[ubnt]: https://www.ubnt.com/ [ubnt]: https://www.ubnt.com/
[ubnt 2]: https://unifi-sdn.ubnt.com/ [ubnt 2]: https://unifi-sdn.ubnt.com/
[ubnt 3]: https://help.ubnt.com/hc/en-us/articles/204976094-UniFi-What-protocol-does-the-controller-use-to-communicate-with-the-UAP- [ubnt 3]: https://help.ubnt.com/hc/en-us/articles/204976094-UniFi-What-protocol-does-the-controller-use-to-communicate-with-the-UAP-
[ubnt 4]: https://help.ubnt.com/hc/en-us/articles/115015457668-UniFi-Troubleshooting-STUN-Communication-Errors [ubnt 4]: https://help.ubnt.com/hc/en-us/articles/115015457668-UniFi-Troubleshooting-STUN-Communication-Errors
[unifi]: https://community.ui.com/questions/Controller-how-to-deactivate-http-to-https/c5e247d8-b5b9-4c84-a3bb-28a90fd65668

View File

@ -125,6 +125,7 @@ discoveryService:
ingress: ingress:
enabled: false enabled: false
annotations: {} annotations: {}
# nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
# kubernetes.io/ingress.class: nginx # kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
path: / path: /