turn off http, update ssl security policy (#1796)

* turn off http, update ssl security policy

* cleanup

kustomize/overlays/demo/services/jackson-service.yaml

@@ -11,13 +11,11 @@ metadata:
     service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
     service.beta.kubernetes.io/aws-load-balancer-ssl-cert: 'arn:aws:acm:us-west-1:511214097407:certificate/3cd477cb-f54b-4701-89f1-9416216cb1c9'
     service.beta.kubernetes.io/aws-load-balancer-ssl-ports: '443'
+    service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
 spec:
   externalTrafficPolicy: Local
   type: LoadBalancer
   ports:
-    - name: http
-      port: 80
-      targetPort: 5225
     - name: https
       port: 443
       targetPort: 5225

kustomize/overlays/demo/services/mocksaml-service.yaml

@@ -11,13 +11,11 @@ metadata:
     service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
     service.beta.kubernetes.io/aws-load-balancer-ssl-cert: 'arn:aws:acm:us-west-1:511214097407:certificate/3cd477cb-f54b-4701-89f1-9416216cb1c9'
     service.beta.kubernetes.io/aws-load-balancer-ssl-ports: '443'
+    service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
 spec:
   externalTrafficPolicy: Local
   type: LoadBalancer
   ports:
-    - name: http
-      port: 80
-      targetPort: 4000
     - name: https
       port: 443
       targetPort: 4000

kustomize/overlays/prod-eu/services/jackson-service.yaml

@@ -11,13 +11,11 @@ metadata:
     service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
     service.beta.kubernetes.io/aws-load-balancer-ssl-cert: 'arn:aws:acm:eu-central-1:511214097407:certificate/3fc4272a-d97c-4bf0-8f8a-3425fda27e31'
     service.beta.kubernetes.io/aws-load-balancer-ssl-ports: '443'
+    service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
 spec:
   externalTrafficPolicy: Local
   type: LoadBalancer
   ports:
-    - name: http
-      port: 80
-      targetPort: 5225
     - name: https
       port: 443
       targetPort: 5225

kustomize/overlays/prod-eu/services/mocksaml-service.yaml

@@ -11,13 +11,11 @@ metadata:
     service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
     service.beta.kubernetes.io/aws-load-balancer-ssl-cert: 'arn:aws:acm:eu-central-1:511214097407:certificate/3fc4272a-d97c-4bf0-8f8a-3425fda27e31'
     service.beta.kubernetes.io/aws-load-balancer-ssl-ports: '443'
+    service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
 spec:
   externalTrafficPolicy: Local
   type: LoadBalancer
   ports:
-    - name: http
-      port: 80
-      targetPort: 4000
     - name: https
       port: 443
       targetPort: 4000

package.json

@@ -32,7 +32,6 @@
     "mssql:skaffold": "skaffold dev -f skaffold-mssql.yaml --status-check=false --force=true",
     "dynamodb:skaffold": "skaffold dev -f skaffold-dynamodb.yaml --status-check=false --force=true",
     "demo:skaffold": "echo 'This is only meant for BoxyHQ internal use. Please use {dbname}:skaffold instead' && skaffold run -f skaffold-demo.yaml --status-check=false",
-    "demo-services:skaffold": "echo 'This is only meant for BoxyHQ internal use. Please use {dbname}:skaffold instead' && skaffold run -f skaffold-demo-services.yaml --status-check=false",
     "prod-eu:skaffold": "echo 'This is only meant for BoxyHQ internal use. Please use {dbname}:skaffold instead' && skaffold run -f skaffold-prod-eu.yaml --status-check=false",
     "prod-eu-services:skaffold": "echo 'This is only meant for BoxyHQ internal use. Please use {dbname}:skaffold instead' && skaffold run -f skaffold-prod-eu-services.yaml --status-check=false",
     "start": "cross-env PORT=5225 NODE_OPTIONS=--dns-result-order=ipv4first node .next/standalone/server.js",