fix(tls): download helm and charts over https

Downloading of charts and helm itself happened over http. This
change moves to use https as that is available with valid certs.
pull/1545/head
Matt Farina 9 years ago
parent 7a79661f0e
commit da73150ce9
No known key found for this signature in database
GPG Key ID: 563463E4AF017AB2

@ -32,9 +32,9 @@ Think of it like apt/yum/homebrew for Kubernetes.
Binary downloads of the Beta.2 Helm client can be found at the following links: Binary downloads of the Beta.2 Helm client can be found at the following links:
- [OSX](http://kubernetes-helm.storage.googleapis.com/helm-v2.0.0-beta.2-darwin-amd64.tar.gz) - [OSX](https://kubernetes-helm.storage.googleapis.com/helm-v2.0.0-beta.2-darwin-amd64.tar.gz)
- [Linux](http://kubernetes-helm.storage.googleapis.com/helm-v2.0.0-beta.2-linux-amd64.tar.gz) - [Linux](https://kubernetes-helm.storage.googleapis.com/helm-v2.0.0-beta.2-linux-amd64.tar.gz)
- [Linux 32-bit](http://kubernetes-helm.storage.googleapis.com/helm-v2.0.0-beta.2-linux-386.tar.gz) - [Linux 32-bit](https://kubernetes-helm.storage.googleapis.com/helm-v2.0.0-beta.2-linux-386.tar.gz)
Unpack the `helm` binary and add it to your PATH and you are good to go! OS X/[Cask](https://caskroom.github.io/) users can `brew cask install helm`. Unpack the `helm` binary and add it to your PATH and you are good to go! OS X/[Cask](https://caskroom.github.io/) users can `brew cask install helm`.

@ -79,7 +79,7 @@ func TestFindChartURL(t *testing.T) {
if err != nil { if err != nil {
t.Fatal(err) t.Fatal(err)
} }
if churl != "http://kubernetes-charts.storage.googleapis.com/alpine-0.1.0.tgz" { if churl != "https://kubernetes-charts.storage.googleapis.com/alpine-0.1.0.tgz" {
t.Errorf("Unexpected URL %q", churl) t.Errorf("Unexpected URL %q", churl)
} }

@ -3,7 +3,7 @@ entries:
alpine: alpine:
- name: alpine - name: alpine
urls: urls:
- http://kubernetes-charts.storage.googleapis.com/alpine-0.1.0.tgz - https://kubernetes-charts.storage.googleapis.com/alpine-0.1.0.tgz
checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d
home: https://k8s.io/helm home: https://k8s.io/helm
sources: sources:
@ -16,7 +16,7 @@ entries:
icon: "" icon: ""
- name: alpine - name: alpine
urls: urls:
- http://kubernetes-charts.storage.googleapis.com/alpine-0.2.0.tgz - https://kubernetes-charts.storage.googleapis.com/alpine-0.2.0.tgz
checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d
home: https://k8s.io/helm home: https://k8s.io/helm
sources: sources:
@ -30,7 +30,7 @@ entries:
mariadb: mariadb:
- name: mariadb - name: mariadb
urls: urls:
- http://kubernetes-charts.storage.googleapis.com/mariadb-0.3.0.tgz - https://kubernetes-charts.storage.googleapis.com/mariadb-0.3.0.tgz
checksum: 65229f6de44a2be9f215d11dbff311673fc8ba56 checksum: 65229f6de44a2be9f215d11dbff311673fc8ba56
home: https://mariadb.org home: https://mariadb.org
sources: sources:

@ -17,7 +17,7 @@ entries:
- name: alpine - name: alpine
urls: urls:
- http://example.com/alpine-0.2.0.tgz - http://example.com/alpine-0.2.0.tgz
- http://kubernetes-charts.storage.googleapis.com/alpine-0.2.0.tgz - https://kubernetes-charts.storage.googleapis.com/alpine-0.2.0.tgz
checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d
home: https://k8s.io/helm home: https://k8s.io/helm
sources: sources:

@ -55,7 +55,7 @@ To dump a manifest containing the Tiller deployment YAML, combine the
const ( const (
stableRepository = "stable" stableRepository = "stable"
localRepository = "local" localRepository = "local"
stableRepositoryURL = "http://kubernetes-charts.storage.googleapis.com/" stableRepositoryURL = "https://kubernetes-charts.storage.googleapis.com/"
// This is the IPv4 loopback, not localhost, because we have to force IPv4 // This is the IPv4 loopback, not localhost, because we have to force IPv4
// for Dockerized Helm: https://github.com/kubernetes/helm/issues/1410 // for Dockerized Helm: https://github.com/kubernetes/helm/issues/1410
localRepositoryURL = "http://127.0.0.1:8879/charts" localRepositoryURL = "http://127.0.0.1:8879/charts"

@ -2,7 +2,7 @@ apiVersion: v1
entries: entries:
alpine: alpine:
- name: alpine - name: alpine
url: http://kubernetes-charts.storage.googleapis.com/alpine-0.1.0.tgz url: https://kubernetes-charts.storage.googleapis.com/alpine-0.1.0.tgz
checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d
home: https://k8s.io/helm home: https://k8s.io/helm
sources: sources:
@ -14,7 +14,7 @@ entries:
engine: "" engine: ""
icon: "" icon: ""
- name: alpine - name: alpine
url: http://kubernetes-charts.storage.googleapis.com/alpine-0.2.0.tgz url: https://kubernetes-charts.storage.googleapis.com/alpine-0.2.0.tgz
checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d checksum: 0e6661f193211d7a5206918d42f5c2a9470b737d
home: https://k8s.io/helm home: https://k8s.io/helm
sources: sources:
@ -27,7 +27,7 @@ entries:
icon: "" icon: ""
mariadb: mariadb:
- name: mariadb - name: mariadb
url: http://kubernetes-charts.storage.googleapis.com/mariadb-0.3.0.tgz url: https://kubernetes-charts.storage.googleapis.com/mariadb-0.3.0.tgz
checksum: 65229f6de44a2be9f215d11dbff311673fc8ba56 checksum: 65229f6de44a2be9f215d11dbff311673fc8ba56
home: https://mariadb.org home: https://mariadb.org
sources: sources:

@ -1,6 +1,6 @@
apiVersion: v1 apiVersion: v1
repositories: repositories:
- name: charts - name: charts
url: "http://kubernetes-charts.storage.googleapis.com" url: "https://kubernetes-charts.storage.googleapis.com"
- name: local - name: local
url: "http://localhost:8879/charts" url: "http://localhost:8879/charts"

@ -1,5 +1,5 @@
foobar-0.1.0: foobar-0.1.0:
url: http://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz url: https://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz
name: foobar name: foobar
removed: false removed: false
chartfile: chartfile:
@ -11,7 +11,7 @@ foobar-0.1.0:
- dummy - dummy
- hokey - hokey
oddness-1.2.3: oddness-1.2.3:
url: http://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz url: https://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz
name: oddness name: oddness
removed: false removed: false
chartfile: chartfile:

@ -1,5 +1,5 @@
nginx-0.1.0: nginx-0.1.0:
url: http://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz url: https://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz
name: nginx name: nginx
removed: false removed: false
chartfile: chartfile:
@ -12,7 +12,7 @@ nginx-0.1.0:
- web server - web server
- proxy - proxy
alpine-1.0.0: alpine-1.0.0:
url: http://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz url: https://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz
name: alpine name: alpine
removed: false removed: false
chartfile: chartfile:

@ -57,7 +57,7 @@ the latest master branch. They are not official releases, and may not be
stable. However, they offer the opportunity to test the cutting edge stable. However, they offer the opportunity to test the cutting edge
features. features.
Canary Helm binaries are stored in the [Kubernetes Helm GCS bucket](http://kubernetes-helm.storage.googleapis.com). Canary Helm binaries are stored in the [Kubernetes Helm GCS bucket](https://kubernetes-helm.storage.googleapis.com).
Here are links to the common builds: Here are links to the common builds:
- [Linux AMD64](https://kubernetes-helm.storage.googleapis.com/helm-canary-linux-amd64.tar.gz) - [Linux AMD64](https://kubernetes-helm.storage.googleapis.com/helm-canary-linux-amd64.tar.gz)

@ -14,7 +14,7 @@ I want to know more about my downloading options.
**Q: I can't get to GitHub releases of the newest Helm. Where are they?** **Q: I can't get to GitHub releases of the newest Helm. Where are they?**
A: We no longer use GitHub releases. Binaries are now stored in a A: We no longer use GitHub releases. Binaries are now stored in a
[GCS public bucket](http://kubernetes-helm.storage.googleapis.com). [GCS public bucket](https://kubernetes-helm.storage.googleapis.com).
**Q: Why aren't there Debian/Fedora/... native packages of Helm?** **Q: Why aren't there Debian/Fedora/... native packages of Helm?**

@ -338,7 +338,7 @@ You can see which repositories are configured using `helm repo list`:
```console ```console
$ helm repo list $ helm repo list
NAME URL NAME URL
stable http://kubernetes-charts.storage.googleapis.com stable https://kubernetes-charts.storage.googleapis.com
local http://localhost:8879/charts local http://localhost:8879/charts
mumoshu https://mumoshu.github.io/charts mumoshu https://mumoshu.github.io/charts
``` ```

@ -188,7 +188,7 @@ func verifyLocalIndex(t *testing.T, i *IndexFile) {
Home: "https://github.com/something", Home: "https://github.com/something",
}, },
URLs: []string{ URLs: []string{
"http://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz", "https://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz",
"http://storage2.googleapis.com/kubernetes-charts/alpine-1.0.0.tgz", "http://storage2.googleapis.com/kubernetes-charts/alpine-1.0.0.tgz",
}, },
Digest: "sha256:1234567890abcdef", Digest: "sha256:1234567890abcdef",
@ -202,7 +202,7 @@ func verifyLocalIndex(t *testing.T, i *IndexFile) {
Home: "https://github.com/something/else", Home: "https://github.com/something/else",
}, },
URLs: []string{ URLs: []string{
"http://kubernetes-charts.storage.googleapis.com/nginx-0.2.0.tgz", "https://kubernetes-charts.storage.googleapis.com/nginx-0.2.0.tgz",
}, },
Digest: "sha256:1234567890abcdef", Digest: "sha256:1234567890abcdef",
}, },
@ -215,7 +215,7 @@ func verifyLocalIndex(t *testing.T, i *IndexFile) {
Home: "https://github.com/something", Home: "https://github.com/something",
}, },
URLs: []string{ URLs: []string{
"http://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz", "https://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz",
}, },
Digest: "sha256:1234567890abcdef", Digest: "sha256:1234567890abcdef",
}, },

@ -2,7 +2,7 @@ apiVersion: v1
entries: entries:
nginx: nginx:
- urls: - urls:
- http://kubernetes-charts.storage.googleapis.com/nginx-0.2.0.tgz - https://kubernetes-charts.storage.googleapis.com/nginx-0.2.0.tgz
name: nginx name: nginx
description: string description: string
version: 0.2.0 version: 0.2.0
@ -13,7 +13,7 @@ entries:
- web server - web server
- proxy - proxy
- urls: - urls:
- http://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz - https://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz
name: nginx name: nginx
description: string description: string
version: 0.1.0 version: 0.1.0
@ -25,7 +25,7 @@ entries:
- proxy - proxy
alpine: alpine:
- urls: - urls:
- http://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz - https://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz
- http://storage2.googleapis.com/kubernetes-charts/alpine-1.0.0.tgz - http://storage2.googleapis.com/kubernetes-charts/alpine-1.0.0.tgz
name: alpine name: alpine
description: string description: string

@ -2,7 +2,7 @@ apiVersion: v1
entries: entries:
nginx: nginx:
- urls: - urls:
- http://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz - https://kubernetes-charts.storage.googleapis.com/nginx-0.1.0.tgz
name: nginx name: nginx
description: string description: string
version: 0.1.0 version: 0.1.0
@ -13,7 +13,7 @@ entries:
- web server - web server
- proxy - proxy
- urls: - urls:
- http://kubernetes-charts.storage.googleapis.com/nginx-0.2.0.tgz - https://kubernetes-charts.storage.googleapis.com/nginx-0.2.0.tgz
name: nginx name: nginx
description: string description: string
version: 0.2.0 version: 0.2.0
@ -25,7 +25,7 @@ entries:
- proxy - proxy
alpine: alpine:
- urls: - urls:
- http://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz - https://kubernetes-charts.storage.googleapis.com/alpine-1.0.0.tgz
- http://storage2.googleapis.com/kubernetes-charts/alpine-1.0.0.tgz - http://storage2.googleapis.com/kubernetes-charts/alpine-1.0.0.tgz
name: alpine name: alpine
description: string description: string

@ -74,7 +74,7 @@ downloadFile() {
fi fi
HELM_DIST="helm-$TAG-$OS-$ARCH.tar.gz" HELM_DIST="helm-$TAG-$OS-$ARCH.tar.gz"
DOWNLOAD_URL="http://kubernetes-helm.storage.googleapis.com/$HELM_DIST" DOWNLOAD_URL="https://kubernetes-helm.storage.googleapis.com/$HELM_DIST"
CHECKSUM_URL="$DOWNLOAD_URL.sha256" CHECKSUM_URL="$DOWNLOAD_URL.sha256"
HELM_TMP_FILE="/tmp/$HELM_DIST" HELM_TMP_FILE="/tmp/$HELM_DIST"
HELM_SUM_FILE="/tmp/$HELM_DIST.sha256" HELM_SUM_FILE="/tmp/$HELM_DIST.sha256"

Loading…
Cancel
Save