Skip to content

Commit 0c1771a

Browse files
committed
Switch off https redirect on non-ssl connections
Make sure https redirect is switched off if ssl is removed
1 parent 80a9b43 commit 0c1771a

File tree

2 files changed

+34
-8
lines changed

2 files changed

+34
-8
lines changed

brightbox/load_balancer.go

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -158,6 +158,8 @@ var (
158158
loadBalancerProxyV2Ssl: true,
159159
loadBalancerProxyV2SslCn: true,
160160
}
161+
truevar = true
162+
falsevar = false
161163
)
162164

163165
// Return a name that is 'name'.'namespace'.'clusterName'
@@ -545,7 +547,6 @@ func (c *cloud) ensureLoadBalancerFromService(name string, apiservice *v1.Servic
545547
func buildLoadBalancerOptions(name string, apiservice *v1.Service, nodes []*v1.Node) *brightbox.LoadBalancerOptions {
546548
klog.V(4).Infof("buildLoadBalancerOptions(%v)", name)
547549
temp := grokLoadBalancerName(name)
548-
truevar := true
549550
result := &brightbox.LoadBalancerOptions{
550551
Name: &temp,
551552
Nodes: buildLoadBalancerNodes(nodes),
@@ -562,6 +563,8 @@ func buildLoadBalancerOptions(name string, apiservice *v1.Service, nodes []*v1.N
562563
}
563564
if result.Domains != nil {
564565
result.HttpsRedirect = &truevar
566+
} else {
567+
result.HttpsRedirect = &falsevar
565568
}
566569
return result
567570
}

brightbox/load_balancer_test.go

Lines changed: 30 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,8 @@ var (
5555
lbname string = "a9bde5f3313794b8c877a777f5da4d76.default." + clusterName
5656
lberror string = "888888f3313794b8c877a777f5da4d76.default." + clusterName
5757
testPolicy string = "round-robin"
58-
redirectTrue bool = true
58+
trueVar bool = true
59+
falseVar bool = false
5960
groklbname string = grokLoadBalancerName(lbname)
6061
groknewlbname string = grokLoadBalancerName(newlbname)
6162
bufferSize int = 16384
@@ -1007,7 +1008,7 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
10071008
},
10081009
BufferSize: &bufferSize,
10091010
Policy: &testPolicy,
1010-
HttpsRedirect: &redirectTrue,
1011+
HttpsRedirect: &trueVar,
10111012
},
10121013
},
10131014
"standard_proxy_protocol": {
@@ -1093,7 +1094,7 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
10931094
},
10941095
BufferSize: &bufferSize,
10951096
Policy: &testPolicy,
1096-
HttpsRedirect: &redirectTrue,
1097+
HttpsRedirect: &trueVar,
10971098
},
10981099
},
10991100
"websocket": {
@@ -1176,7 +1177,7 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
11761177
},
11771178
BufferSize: &bufferSize,
11781179
Policy: &testPolicy,
1179-
HttpsRedirect: &redirectTrue,
1180+
HttpsRedirect: &trueVar,
11801181
},
11811182
},
11821183
"extraSSLports": {
@@ -1286,7 +1287,7 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
12861287
},
12871288
BufferSize: &bufferSize,
12881289
Policy: &testPolicy,
1289-
HttpsRedirect: &redirectTrue,
1290+
HttpsRedirect: &trueVar,
12901291
},
12911292
},
12921293
"OverrideToTcpListener": {
@@ -1352,8 +1353,9 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
13521353
Port: 31348,
13531354
Request: "/",
13541355
},
1355-
BufferSize: &bufferSize,
1356-
Policy: &testPolicy,
1356+
BufferSize: &bufferSize,
1357+
Policy: &testPolicy,
1358+
HttpsRedirect: &falseVar,
13571359
},
13581360
},
13591361
"overrideToHttpHealthcheck": {
@@ -1436,6 +1438,7 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
14361438
ThresholdUp: 4,
14371439
ThresholdDown: 5,
14381440
},
1441+
HttpsRedirect: &falsevar,
14391442
},
14401443
},
14411444
"httphealthcheck": {
@@ -1507,6 +1510,7 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
15071510
Port: 8080,
15081511
Request: "/healthz",
15091512
},
1513+
HttpsRedirect: &falsevar,
15101514
},
15111515
},
15121516
"overrideToTcpHealthcheck": {
@@ -1581,6 +1585,7 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
15811585
Port: 8080,
15821586
Request: "/",
15831587
},
1588+
HttpsRedirect: &falsevar,
15841589
},
15851590
},
15861591
"empty": {
@@ -1605,6 +1610,7 @@ func TestBuildLoadBalancerOptions(t *testing.T) {
16051610
Port: 80,
16061611
Request: "/healthz",
16071612
},
1613+
HttpsRedirect: &falsevar,
16081614
},
16091615
},
16101616
}
@@ -2016,6 +2022,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
20162022
Port: 8080,
20172023
Request: "/healthz",
20182024
},
2025+
HttpsRedirect: &falsevar,
20192026
},
20202027
expected: false,
20212028
},
@@ -2084,6 +2091,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
20842091
Port: 8080,
20852092
Request: "/healthz",
20862093
},
2094+
HttpsRedirect: &falsevar,
20872095
},
20882096
expected: false,
20892097
},
@@ -2152,6 +2160,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
21522160
Port: 8080,
21532161
Request: "/healthz",
21542162
},
2163+
HttpsRedirect: &falsevar,
21552164
},
21562165
expected: true,
21572166
},
@@ -2220,6 +2229,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
22202229
Port: 8080,
22212230
Request: "/healthz",
22222231
},
2232+
HttpsRedirect: &falsevar,
22232233
},
22242234
expected: true,
22252235
},
@@ -2288,6 +2298,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
22882298
Port: 8080,
22892299
Request: "/healthz",
22902300
},
2301+
HttpsRedirect: &falsevar,
22912302
},
22922303
expected: true,
22932304
},
@@ -2343,6 +2354,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
23432354
Port: 8080,
23442355
Request: "/healthz",
23452356
},
2357+
HttpsRedirect: &falsevar,
23462358
},
23472359
expected: false,
23482360
},
@@ -2403,6 +2415,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
24032415
Port: 8080,
24042416
Request: "/healthz",
24052417
},
2418+
HttpsRedirect: &falsevar,
24062419
},
24072420
expected: true,
24082421
},
@@ -2453,6 +2466,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
24532466
Port: 8080,
24542467
Request: "/healthz",
24552468
},
2469+
HttpsRedirect: &falsevar,
24562470
},
24572471
expected: true,
24582472
},
@@ -2508,6 +2522,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
25082522
Port: 8080,
25092523
Request: "/healthz",
25102524
},
2525+
HttpsRedirect: &falsevar,
25112526
},
25122527
expected: true,
25132528
},
@@ -2565,6 +2580,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
25652580
Port: 8080,
25662581
Request: "/healthz",
25672582
},
2583+
HttpsRedirect: &falsevar,
25682584
},
25692585
expected: true,
25702586
},
@@ -2622,6 +2638,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
26222638
Port: 8080,
26232639
Request: "/healthz",
26242640
},
2641+
HttpsRedirect: &falsevar,
26252642
},
26262643
expected: true,
26272644
},
@@ -2681,6 +2698,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
26812698
Port: 8080,
26822699
Request: "/healthz",
26832700
},
2701+
HttpsRedirect: &falsevar,
26842702
},
26852703
expected: true,
26862704
},
@@ -2736,6 +2754,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
27362754
Port: 8080,
27372755
Request: "/healthz",
27382756
},
2757+
HttpsRedirect: &falsevar,
27392758
},
27402759
expected: true,
27412760
},
@@ -2787,6 +2806,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
27872806
Port: 8080,
27882807
Request: "/healthz",
27892808
},
2809+
HttpsRedirect: &falsevar,
27902810
},
27912811
expected: true,
27922812
},
@@ -2842,6 +2862,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
28422862
Port: 8080,
28432863
Request: "/healthz",
28442864
},
2865+
HttpsRedirect: &falsevar,
28452866
},
28462867
expected: true,
28472868
},
@@ -2900,6 +2921,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
29002921
Port: 8080,
29012922
Request: "/healthz",
29022923
},
2924+
HttpsRedirect: &falsevar,
29032925
},
29042926
expected: true,
29052927
},
@@ -2955,6 +2977,7 @@ func TestUpdateLoadBalancerCheck(t *testing.T) {
29552977
Port: 8080,
29562978
Request: "/check",
29572979
},
2980+
HttpsRedirect: &falsevar,
29582981
},
29592982
expected: true,
29602983
},

0 commit comments

Comments
 (0)