Uploaded image for project: 'Red Hat OpenShift Data Science'
  1. Red Hat OpenShift Data Science
  2. RHODS-5811

[SSL Proxy]Jupyter Notebook need to support PROXY and a custom certificate

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Normal Normal
    • RHODS_1.21.0_GA
    • None
    • None
    • None
    • False
    • None
    • False
    • Hide

      The following commands must work from jupyter notebook

      # External access via Proxy
      curl -v https://via.placeholder.com/150
      # Local access to apache that is using a self-signed certificate
      curl -O https://local-apche.example.com/a.txt
      # git clone
      git clone https://github.com/Jooho/ansible-cheat-sheet
      # Pip installation
      pip install ansible
      Show
      The following commands must work from jupyter notebook # External access via Proxy curl -v https: //via.placeholder.com/150 # Local access to apache that is using a self-signed certificate curl -O https: //local-apche.example.com/a.txt # git clone git clone https: //github.com/Jooho/ansible-cheat-sheet # Pip installation pip install ansible
    • Testable
    • No
    • 1.21.0-z
    • No
    • No
    • Pending
    • None
    • RHODS 1.21

      OpenShift Cluster can set cluster-wide proxy settings but RHODS jupyter notebook does not honor the configuration. In order to support SSL PROXY server, Jupyter Notebook object needs to set HTTP_PROXY/HTTPS_PROXY/NO_PROXY as an environmental variable and needs to inject ca certificate into the container.

      For a better understanding, please refer to this doc.

      https://docs.google.com/document/d/1ngBb6v428ywr1ZXSzslPotFezd9iVwh0zX2DGeJ1H4M/edit#

      Required changes:

        • For PIP, one env needs to be set
          • env:
              - name: PIP_CERT
                value: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem 
      • ODH-MANIFESTS
        • Create a ConfigMap
        • Add a label config.openshift.io/inject-trusted-cabundle="true"

            vhire Vaishnavi Hire
            rhn-support-jlee JOOHO LEE
            Pablo Felix Pablo Felix
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: