如何处理 jenkins http -> https 重定向？

Question

I currently have jenkins set up with AWS fargate with ECS. There is a classic load balancer in front.

Things i have tried:

• Putting nginx onto the core jenkins image and issuing a re-direct but I do not use nginx for anything else so I am against this solution.

• I have switched to an application load balancer but this does not work as I use the fargate plugin for my jenkins job with their own agents. The agents traffic is on tcp 5050. Perhaps I am doing something wrong here?

I have looked into using Jetty to issue the redirect. I noticed winstone supports this and it has been included in Jenkins 2.243

• Winstone 5.10: Add --httpsRedirectHttp option that activates automatic HTTP request redirects to HTTPs. (pull 4811)

I have already defined some options in my core jenkins container

ENV JAVA_OPTS="-Djenkins.install.runSetupWizard=false -Djava.awt.headless=true -Xmx2048m ${JAVA_OPTS:-}"

How would I extend this to include the http -> https functionallity included in jenkins 2.243?

Answer 1

I am also facing the same issue, I tried with multiple versions, but didn't see it working.

I am using an external load balancer with Jenkins deployed in Kubernetes in GCP. some times the Jenkins redirects from HTTPS to HTTP, where we have blocked the HTTP request on the load balancer, and Jenkins is not able to load the pages.

this should be fixed by jenkins.

Answer 2

According to https://github.com/jenkinsci/winstone/pull/98 , I added --httpsRedirectHttp. It works!

-Xrs -Xmx256m -Dhudson.lifecycle=hudson.lifecycle.WindowsServiceLifecycle -jar "D:\Program Files\Jenkins\jenkins.war" --httpPort=80 --httpsPort=443 --httpsRedirectHttp --httpsKeyStore="%LocalAppData%\Jenkins\my.jks" --httpsKeyStorePassword= --webroot="%LocalAppData%\Jenkins\war"