Skip to content

chore: run the key server in dev backend#21267

Merged
sfoster1 merged 2 commits intoedgefrom
exec-2524-dev-backend
Apr 15, 2026
Merged

chore: run the key server in dev backend#21267
sfoster1 merged 2 commits intoedgefrom
exec-2524-dev-backend

Conversation

@sfoster1
Copy link
Copy Markdown
Member

We can use mitmproxy to terminate tls! the best way is to run a second mitmproxy, like we run a second nginx, and feed it the certs generated by the key-server. We need a little stuff in the key-server to support this because mitmproxy wants the whole bundle of tls cert, tls key, and ca cert in a single PEM (one PEM can contain multiple entities) and then we can "notify" of configuration changes by touching the main mitmproxy script since it has hot module reload. Probably. Nobody's going to run their dev backend instance for 3 years anyway.

Closes EXEC-2524

Test Plan and Hands on Testing

  • run dev-backend
  • go to https://localhost:32313/health
  • note that it works and you are using the flex certs! whee!

@sfoster1 sfoster1 requested a review from SyntaxColoring April 14, 2026 20:37
@codecov
Copy link
Copy Markdown

codecov bot commented Apr 14, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.27%. Comparing base (fd113e0) to head (2ad847e).
⚠️ Report is 1 commits behind head on edge.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             edge   #21267   +/-   ##
=======================================
  Coverage   57.27%   57.27%           
=======================================
  Files        3991     3991           
  Lines      327280   327280           
  Branches    46563    46563           
=======================================
  Hits       187451   187451           
  Misses     139610   139610           
  Partials      219      219           
Flag Coverage Δ
app 44.96% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copy link
Copy Markdown
Contributor

@SyntaxColoring SyntaxColoring left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cool, thank you!

Comment thread Makefile Outdated
Base automatically changed from exec-2476-think-about-it to edge April 15, 2026 18:39
We can use mitmproxy to terminate tls! the best way is to run a second
mitmproxy, like we run a second nginx, and feed it the certs generated
by the key-server. We need a little stuff in the key-server to support
this because mitmproxy wants the whole bundle of tls cert, tls key, and
ca cert in a single PEM (one PEM can contain multiple entities) and then
we can "notify" of configuration changes by touching the main mitmproxy
script since it has hot module reload. Probably. Nobody's going to run
their dev backend instance for 3 years anyway.

Closes EXEC-2524
@sfoster1 sfoster1 force-pushed the exec-2524-dev-backend branch from ac79b5a to 16da6b4 Compare April 15, 2026 18:40
@sfoster1 sfoster1 merged commit 6ce2aee into edge Apr 15, 2026
117 checks passed
@sfoster1 sfoster1 deleted the exec-2524-dev-backend branch April 15, 2026 19:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants