NativeX Web Onboarding and CNAMEs

[solocommand]

Upcoming changes

• *.stories.native-x.io and stories.native-x.io should point to new IP 52.22.250.140 DNS in progress
• Remove duplicative routing from nativex/balancer

Client onboard flow

Name: "Ficticious Client"
Key: "FICTION"

• Rancher clone nativex/graph-example to nativex/graph-fiction (update ACCOUNT_KEY to "fiction")
• Rancher clone nativex/web-example to nativex/web-fiction (update key to "fiction")
• Rancher nativex/balancer additions
  • Public,HTTPS,fiction.native-x.io,443,,nativex/graph-fiction,8100
  • Public,HTTP,fiction.native-x.io,80,/placement,nativex/graph-fiction,8100
• Rancher nativex-clients/balancer additions
  • Public,HTTPS,fiction.stories.native-x.io,443,/graph,nativex/graph-fiction,8100
  • Public,HTTPS,fiction.stories.native-x.io,443,/graph,nativex/web-fiction,3005

Client CNAME Procedure

Name: "Ficticious Client"
Key: "FICTION"
CNAME: "itsjustfiction.net"

• Client creates CNAME from itsjustfiction.net to fiction.stories.native-x.io.

• Client inputs new domain in mgmt UI -- mgmt page should explain process

  • clone Rancher nativex-clients/le-example to nativex-clients/le-fiction with new domain

  • Add to nativex-clients/balancer

    • Public,HTTP,itsjustfiction.net,80,/graph,nativex/graph-fiction,80
    • Public,HTTP,itsjustfiction.net,80,.well-known/acme-challenge,nativex-clients/le-fiction,80

  • User notified DNS and SSL Cert are pending. Check these items every 30m for 48h, email on fail.

    • Check DNS propogation for requested CNAME to stories instance
      • (http://itsjustfiction.net/graph?query={ping}) (ignore cert validation)
    • Check for Rancher cert from le container.

  • Once complte, update Rancher nativex-clients/balancer to include new cert under SNI

  • Add to nativex-clients/balancer

    • Public,HTTPS,itsjustfiction.net,443,/graph,nativex/graph-fiction,8100
    • Public,HTTPS,itsjustfiction.net,443,,nativex/web-fiction,3005

  • Check https://itsjustfiction.net/graph?query={ping} + verify SSL

• Notify client via email when complete, failed, or timed out