Laurens

I'm trying to avoid hardcoding labels like this as it might cause issues with our deployment tools. While the release name can easily be configured through our tools, overriding those...

I took a look at how the [Keycloak helm chart](https://github.com/codecentric/helm-charts/tree/master/charts/keycloak) handles this. They process the affinity field as a string instead of a map, the following is their default value...

`"/oauth2/start?rd=https%3A%2F%2Fexample.com%2F"` is the only relevant line I can find, at first glance. ``` [2021/09/06 12:26:54] [stored_session.go:76] Error loading cookied session: cookie "_oauth2_proxy" not present, removing session 10.244.2.1 - 531acacd-ae45-44e6-a2c8-b8009f2d2e16 -...

I have the 'whitelist_domains' set to our main domain, starting with a dot to allow subdomains (`.maindomain.com`), as per the docs. Just to make sure, I've now tested it with...

I replaced `/oauth2/sign_in` with `/oauth2/start` in the `oauth-errors` middleware. From the user's point of view, nothing has changed, except that instead of a graphic and a login button, there now...

I was still being redirected to the root, i.e. subdomain.example.com. Are you referring to https://github.com/oauth2-proxy/oauth2-proxy/issues/1322 ? That issue mentions the skip-provider-button configuration option, so I tried: setting it to false,...

I've posted the issue over at [Traefik's forum](https://community.traefik.io/t/redirected-to-root-after-login-using-oauth2-proxy/12156), but looking at the lack of response on similar issues over there, I don't exactly have high hopes for a meaningful reply....

@JoelSpeed I haven't had the time to investigate this further properly, but unless I'm reading things incorrectly, you've suggested `/oauth2/start` instead of `/oauth2/sign_in` earlier in this thread (https://github.com/oauth2-proxy/oauth2-proxy/issues/1297#issuecomment-933555649) already, which...

@ADN182 Glad to hear you got something working. How did you configure your ingress and middlewares? Could you share the manifests? I've tested your config with the forwardedHeaders flag in...

@ADN182 thanks! I've manged to get it working using the static upstreams configuration and the forwardedHeaders flag. As I'm not completely sure what the consequences are of trusting forwarded headers...