Tobias Harnickell
Tobias Harnickell
Not sure whether you mean the OAuth2 proxy or my SSO provider (KeyCloak) when you say Auth service, but I am mostly sure that the issue isn't there. My point...
I was able to debug the issue some more on a local environment. Please keep in mind that this issue is not about authentication services, but about the `X-Auth-Request-Redirect` HTTP...
Thank you for the article. The required endpoints are found and reached without the two Annotations mentioned in the article you provided. Users always get properly redirected from the OAuth2...
Everything that happens with these annotations `auth-url` and `auth-signin` is completely up to the backend and in no way in the responsibility of the Nginx Ingress. **Regarding the `auth-url` annotation**...
Sidenote: The Annotations `auth-url` and `auth-signin` are meant to be used in combination. As mentioned in my last comment, `auth-url` has the purpose of forwarding requests without valid auth-information to...
One last thing: I created a debug-log to analyze the main topic from this ticket some more (the `auth-request-redirect` annotation): [ingress-debug.zip](https://github.com/kubernetes/ingress-nginx/files/13818819/ingress-debug.zip) In there I see that my hardcoded value `/httpbun/headers`...
I found out the root cause for the missing header. ### Nginx sub-locations When `nginx.ingress.kubernetes.io/auth-url` is defined, the Nginx controller creates corresponding sub-locations in its nginx.conf which are then linked...
Just a quick documentation for reference: [ingress-debug.zip](https://github.com/kubernetes/ingress-nginx/files/13853834/ingress-debug.zip) In there you find: - the httpbun deployment YAML with the netshoot sidecar container (access with `kubectl exec -it netshoot -- /bin/zsh`) -...
@manuartero there is indeed no widely used "Deprecated" icon or badge. Likely because it's just too easy to overlook badges in the README - especially for people who have worked...
What would be the next steps? We have introduced full parity between Cobra and Kingpin. Kingpin is still the default backend with a hidden switch to test the new Cobra-backend...