commit | ce5c1b55a07fe09307c85869b94fe16d3acc3969 | [log] [tgz] |
---|---|---|
author | Dariusz Luksza <dariusz.luksza@gmail.com> | Fri Oct 27 17:45:17 2023 +0100 |
committer | Dariusz Luksza <dariusz.luksza@gmail.com> | Fri Oct 27 17:45:17 2023 +0100 |
tree | 3e0ced287abe1e634b30ddbbaa6d6c41e0b01d0c | |
parent | 0c815ffa9efa6ca611b64a61a80d07f96475e2c5 [diff] |
Copy server port number from paren cannonical URL When `gerrit.cannonicalWebUrl` contains port number it also must be copied to the virutal host HTTP cannonical web url, otherwise redirection URLs in Gerrit will not work. Bug: Issue 307967275 Change-Id: Ic472438dbad44ae83445c257b7d6a859130dd431
Gerrit lib module to split the projects' space into virtual hosts similarly of what you would do with an HTTP Server and different domain names.
Build this module as it was a Gerrit plugin:
virtualhost
directory to Gerrit /plugins/virtualhost
bazel build plugins/virtualhost
virtualhost.jar
module is generated under /bazel-genfiles/plugins/virtualhost/
Copy virtualhost.jar
library to Gerrit /lib
and add the following two extra settings to gerrit.config
:
[gerrit] installModule = com.gerritforge.gerrit.modules.virtualhost.GuiceModule [httpd] filterClass = com.gerritforge.gerrit.modules.virtualhost.VirtualHostFilter
X-Forwarded-Host
Header:When Gerrit is hidden behind multiple service layers (eg. reverse-proxy and load balancer), it is essential to ensure the propagation from the upstream proxy of the header X-Forwarded-Host from the upstream proxy.
/etc/virtualhost.config contains the definition of the virtual hosts and the set of projects included.
Each server
section defines a virtual host and contains a set of projects included. Projects are defined using Gerrit ref-matching expressions and can be repeated multiple times to include multiple matchers.
Example to include all the projects starting with team1/
and the ones starting with the username:
[server "team1.mycompany.com"] projects = team1/* projects = ${username}/*
For all the other server names that are not defined and for SSH access, there is a special default section that lists of visible projects.
Example to include all the projects by default:
[default] projects = ^.*