This repository has been archived by the owner on Jan 8, 2024. It is now read-only.
The "waypoint server install -platform=ecs" should create HTTP target group with protocol TLS:9702 instead of TCP:9702 to allow custom domain with SSL #4855
Labels
Describe the bug
The
waypoint server install -platform=ecs
command always create the HTTP target group with protocolTCP
. This leads we can not add the Network Load Balancer listener from TLS protocol to this HTTP target group. So, we can not route the custom domain with SSL certificate to Waypoint server.This bug maybe caused from serverinstall/ecs.go#L1338
Steps to Reproduce
EC2 > Load balancers > waypoint-server-nlb
, there is a listenerTCP:9702
EC2 > Target groups > waypoint-server-http
, the detail showsProtocol:Port
isTCP:9702
waypoint-server-nlb
listener fromTCP:9702
toTLS:443
, keep forwarding towaypoint-server-http
target groupRoute 53 > Hosted zones > cc-waypoint.example.com
, add 1 more record to map towaypoint-server-nlb
curl -v -L https://cc-waypoint.example.com:443
or open browser with URLhttps://cc-waypoint.example.com:443
, it show the errorClient try to send HTTP request to HTTPS server
Expected behavior
The waypoint server install command should allow
TLS: 9702
when create new HTTP target group. By this way, we can map the custom domain with SSL certificate.Waypoint Platform Versions
Additional version and platform information to help triage the issue if
applicable:
ecs
Server: v0.11.3Additional context
TLS:9702
and register ECS containerwaypoint-server
to this target group. I can hit the custom domain with SSL certificate.The text was updated successfully, but these errors were encountered: