Enabling TLS on selenium grid using custom org managed certificates root ca

[nikhil-rajan-neu]

I have trying to enable tls on the selelnium grid , but the current documentation is not very clear to me .
I have followed this
helm upgrade -i $RELEASENAME -n $NAMESPACE docker-selenium/selenium-grid
--set tls.enabled=true
--set-file tls.secretFiles.tls.crt=/path/to/your/tls.crt
--set-file tls.secretFiles.tls.key=/path/to/your/tls.key
--set-file tls.secretFiles.server.jks=/path/to/your/server.jks

But my node registration is failing with 401

[VietND96]

Hi, there is a delay so the new chart version for this doc has not been published yet.
Are you cloning the project and using the source for your trial?

[nikhil-rajan-neu]

Yes .. i got the certificates figured out. But my hub ui is not loading when port forwarding Sent from Outlook for Android<https://aka.ms/AAb9ysg>

…

________________________________ From: Viet Nguyen Duc ***@***.***> Sent: Wednesday, July 17, 2024 6:41:03 pm To: SeleniumHQ/docker-selenium ***@***.***> Cc: Nikhil Rajan ***@***.***>; Author ***@***.***> Subject: Re: [SeleniumHQ/docker-selenium] Enabling TLS on selenium grid using custom org managed certificates root ca (Discussion #2307) CAUTION: This email originated from outside of Neudesic. Please ensure that this sender is authentic before engaging in correspondence or clicking on files or links contained below. Hi, there is a delay so the new chart version for this doc has not been published yet. Are you cloning the project and using the source for your trial? — Reply to this email directly, view it on GitHub<#2307 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ATOF373SNR6DTFIVESIGGQDZMZUN3AVCNFSM6AAAAABK7F32HKVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTAMBXGM3DEMA>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[VietND96]

I would understand more about port forwarding. Did you access Hub UI via URL something like https://your_public_ip/ui/? If yes, can you try https://your_public_ip or https://your_public_ip/ui

[nikhil-rajan-neu]

@VietND96 yes i am trying to access using the ingress url
i see that i have this error in my ingress logs
SSL fake certificate created" file="/etc/ingress-controller/ssl/default-fake-certificate.pem
looks like for some reason its not taking the certificate i am providing

[VietND96]

So, how did you deploy the ingress nginx? using its helm chart? If yes, I think you can refer helm/charts#1495
set default-ssl-certificate mount the same selenium TLS secret.
In here I also mentioned: https://github.com/SeleniumHQ/docker-selenium/blob/trunk/charts/selenium-grid/README.md#secure-connection-to-selenium-grid-components

[nikhil-rajan-neu]

Yes i am passing that .. here is my values file

basicAuth: enabled: true edgeNode: enabled: false firefoxNode: enabled: false global: seleniumGrid: defaultNodeStartupProbe: httpGet hub: livenessProbe: enabled: false ingress: hostname: selenium.xxx.int ingress-nginx: controller: extraArgs: default-ssl-certificate: selenium-grid/seleniumgrid-selenium-tls-secret service: annotations: service.beta.kubernetes.io/azure-load-balancer-internal: true loadBalancerIP: 10.84.1.112 enabled: true tls: enabled: true ingress: enabled: true

[nikhil-rajan-neu]

@VietND96 .. i cloned whats in trunk and deployed . did not explicitly install nginx .. used what is available in the selenium grid helm chart