Skip to content
This repository has been archived by the owner on Sep 27, 2024. It is now read-only.

v2.0.0

Latest
Latest
Compare
Choose a tag to compare
@ahayden ahayden released this 01 Jul 23:10
· 87 commits to master since this release
v2.0.0
d0bf9a2
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

This release:

  • Moves the rstudio server to hxxp://localhost:8787 and adds a proxy listening on HTTPS/443 for connections from an ALB. The ALB adds a header called 'X-Amzn-Oidc-Data', which is an objected signed by an AWS public key. The proxy validates the signature and forwards to the traffic to the internal rstudio server if the userid claim within the X-Amzn-Oidc-Data header matches the userid component of the Protected/AccessApprovedCaller tag on the instance.
  • Disables local authentication on the rstudio server, instead relying on authentication by the proxy.

Because of the proxy logic, this image can only be used behind an AWS ALB.

Assets 2
Loading