skipper icon indicating copy to clipboard operation
skipper copied to clipboard

the HTTPS redirect route may cause non-deterministic route matching in Kubernetes

Open aryszka opened this issue 5 years ago • 1 comments

the HTTPS redirect feature was implemented before the custom predicates from the ingress annotations. In the redirect route we apply an assumption about the number of predicates:

	// the forwarded port and any-path (.*) is set to make sure that
	// the redirect route has a higher priority during matching than
	// the normal routes that may have max 2 predicates: path regexp
	// and host.

...that is not valid anymore. For explanation why the number of predicates matters, see the "Route matching" section.

One solution to this problem can be the solution outlined in this issue: https://github.com/zalando/skipper/issues/360

aryszka avatar Sep 19 '18 15:09 aryszka

I think this was fixed with https://github.com/zalando/skipper/pull/1877 wdyt @aryszka ?

szuecs avatar Jan 28 '22 19:01 szuecs