Skip to content

Cluster manager proof of concept for reverse tunnel [spike]#801

Draft
edlerd wants to merge 1 commit intocanonical:mainfrom
edlerd:websocket
Draft

Cluster manager proof of concept for reverse tunnel [spike]#801
edlerd wants to merge 1 commit intocanonical:mainfrom
edlerd:websocket

Conversation

@edlerd
Copy link
Contributor

@edlerd edlerd commented May 26, 2025

Done

  • added reverse tunnel to cluster manager
  • proxy endpoint to serve the LXD-UI through the tunnel

Draft because this only qualifies as a spike and is by no means complete

}

tlsConfig := shared.InitTLSConfig()
tlsConfig.InsecureSkipVerify = true // todo For testing purposes, skip verification of the server's certificate

Check failure

Code scanning / CodeQL

Disabled TLS certificate check High

InsecureSkipVerify should not be used in production code.
},
}
httpClient.Transport = transport
httpResp, err := httpClient.Do(httpReq)

Check failure

Code scanning / CodeQL

Uncontrolled data used in network request Critical

The
URL
of this request depends on a
user-provided value
.
@edlerd edlerd force-pushed the websocket branch 6 times, most recently from b22ffde to 1d36035 Compare May 27, 2025 08:42
Signed-off-by: David Edler <david.edler@canonical.com>
@roosterfish
Copy link
Contributor

@edlerd can this PR be closed?

@edlerd
Copy link
Contributor Author

edlerd commented Jul 24, 2025

@edlerd can this PR be closed?

We might want to use this approach at a later time, so I'd keep it open in draft state.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants