console icon indicating copy to clipboard operation
console copied to clipboard

Base path stripped from request url for /security/acls request, causes 405 response code

Open radu-gabrielpatrascu opened this issue 1 month ago • 0 comments

Hello,

We have an issue accessing Security Access Control ACLs tab (/security/acl), in redpanda-console interface. Access to redpanda-console is facilitated through a nginx reverse proxy, having a location where X-Forwarded-Prefix header is set to: /redpanda-console. In redpanda-console config we use: server: setBasePathFromXForwardedPrefix: true

Example of header for a succesful request (http code 200): Request URL Header: https://gfme-dev.ing.net/redpanda-console/api/topics Referer Header: https://gfme-dev.ing.net/redpanda-console/topics

Example of Request URL Header, for ACLs tab request (http code 405): Request URL Header: https://gfme-dev.ing.net/redpanda.api.dataplane.v1.ACLService/ListACLs Referer Header: https://gfme-dev.ing.net/redpanda-console/security/acls

As you can see, for /security/acls, the base path prefix is stripped from the request URL.

We are using redpanda-console 3.3.1. This issue is present in 3.2.1 also.

Can you clarify what the cause is, and if you can deliver a fix for this?

Thank you, Gabriel Patrascu

radu-gabrielpatrascu avatar Nov 21 '25 14:11 radu-gabrielpatrascu