TLS termination and https URL

28 views

Skip to first unread message

Saheer Babu

unread,

Oct 15, 2025, 5:02:05 PM (2 days ago) Oct 15

to Repo and Gerrit Discussion

I am using gerrit k8 with istio and deployed in AWS. We need to terminate TLS at AWS Load Balancer side (much earlier than istio) so that we can attach a web application firewall.

I can TLS terminate and send the traffic to ISTIO, this is working well. But when I disable the TLS in Gerit Cluster:

  ingress:
    enabled: true
    host: review.dev.trustedfirmware.org
    ssh:
      enabled: true
    # tls:
    #   enabled: true
      # secret: gerrit-tls-certificate

In UI, the git clone link is `git clone http://review.dev.trustedfirmware.org/All-Projects`

How is that link generated? Is it possible to change the clone link in this setup? (basically, tls terminate outside ISTIO).

Thanks,

Saheer

Sven Selberg

unread,

Oct 16, 2025, 3:41:52 AM (yesterday) Oct 16

to Repo and Gerrit Discussion

I think here:
https://gerrit.googlesource.com/plugins/download-commands/+/refs/heads/master/src/main/java/com/googlesource/gerrit/plugins/download/scheme/HttpScheme.java#61

So you could fix it by setting [gerrit.gitHttpUrl](https://gerrit.googlesource.com/plugins/download-commands/+/refs/heads/master/src/main/java/com/googlesource/gerrit/plugins/download/scheme/HttpScheme.java#46) in gerrit.config.

/Sven