Connect to backend/docker via tunnel

[sandstrom]

Most of our tests run a docker compose setup for end-to-end tests.

It would be nice if we could trigger Maestro cloud runs from our CI like this:

1. We build APK etc, upload to Maestro cloud.

2. Maestro CLI has some kind of tunnel feature (wireguard or similar) that we can start to connect maestro cloud with our running CI server.

3. mobile apps use this to talk with our docker compose setup running in the CI, i.e. so that the mobile clients can connect to it for it's backed.

[Fishbowler]

Sounds like you need ngrok or similar?

[sandstrom]

Yeah, but I need Maestro to do it's part, for example it needs to handle some authentication mechanism if I'm going to expose my tunnel on the internet.

https://ngrok.com/docs/universal-gateway/examples/ephemeral-workloads#4-add-authentication-to-your-previews

There are basically two approaches:

1. Maestro CLI run in CI and will open a tunnel from Maestro cloud into the CI local network.
2. I trigger Maestro cloud from CI, and tell it to use an authenticated tunnel entrypoint on the public internet, but Maestro needs to support the authentication mechanism that the tunnel uses.

I would be fine with either.j

[Fishbowler]

Maestro Cloud isn't in any way inspecting or interfering with traffic from your app. It's unclear how this ephemeral authentication would work with applications - would this OAuth token need to be on every HTTP request? If so, wouldn't that need to be done at the application layer?

Maybe a simpler route would be https://ngrok.com/docs/traffic-policy/actions/restrict-ips with https://docs.maestro.dev/maestro-cloud/advanced-features/ip-allowlist?

We'd likely add VPN support before we added any traffic interception/modification, but neither are currently on the near-term roadmap.

[sandstrom]

Thanks, I understand better.

IP address is a good idea, I also see they have JWTs validation, so maybe we can inject JWTs into the build to use (I hadn't looked at ngrok before yesterday when you suggested it).

Thanks and have a nice weekend! 🌞