logto-io
bug: service 3002/ redirect service 3001/unknown-session on alibaba cloud
Describe the bug
image: svhd/logto:1.31 docker compose: https://raw.githubusercontent.com/logto-io/logto/HEAD/docker-compose.yml
i deployed on aliyun ack cluster. EP= https://auth.mydomain.com ADMIN_ENDPOINT = https://auth-admin.mydomain.com when i input "https://auth-admin.mydomain.com" , it redirected to "https://auth.mydomain.com" by code 302.
apiVersion: apps/v1 kind: Deployment name: test-logto ... spec: containers: - command: - sh - '-c' - npm run cli db seed -- --swe && npm start envFrom: - configMapRef: name: test-logto image: 'svhd/logto:1.31' imagePullPolicy: IfNotPresent name: test-logto ports: - containerPort: 3001 name: tcp3001 protocol: TCP - containerPort: 3002 name: tcp3002 protocol: TCP ...
apiVersion: v1 kind: Service metadata: name: test-logto-svc namespace: dev-ns spec: ... ports: - name: tcp3001 port: 3001 protocol: TCP targetPort: 3001 - name: tcp3002 port: 3002 protocol: TCP targetPort: 3002 ...
apiVersion: networking.k8s.io/v1 kind: Ingress metadata: annotations: alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80},{"HTTPS": 443}]' labels: ingress-controller: alb name: logto-console-ingress namespace: dev-ns spec: ingressClassName: alb rules: - host: auth-admin.wispaper.ai http: paths: - backend: service: name: test-logto-svc port: number: 3002 path: / pathType: Prefix - host: auth.wispaper.ai http: paths: - backend: service: name: test-logto-svc port: number: 3001 path: / pathType: Prefix tls: - hosts: - auth-admin.wispaper.ai - auth.wispaper.ai secretName: ssl-wispaper.ai
Expected behavior
how can i open the page "https://auth-admin.mydomain.com/welcome" or "https://auth-admin.mydomain.com/console" ?
How to reproduce?
use "https://raw.githubusercontent.com/logto-io/logto/HEAD/docker-compose.yml" deploy on aliyun ack or sae .
Environment
Self-hosted (Docker image)
Screenshots
Same error as you here and still unable to fix it
Update : on my side it was because my internal redirection between cloudflare tunnel to traefik was made with http instead of https.
