bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth: add 401 redirect middleware to oauth2-proxy

Browse Source
This commit is contained in:
Brad Stein 2025-12-07 11:14:25 -03:00
parent 5e59f20bc3
commit 20bb776625
5 changed files with 18 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
infrastructure/longhorn/ui-ingress/ingress.yaml
View File

@ -7,7 +7,7 @@ metadata:
annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.middlewares: longhorn-system-longhorn-forward-auth@kubernetescrd,longhorn-system-longhorn-headers@kubernetescrd
traefik.ingress.kubernetes.io/router.middlewares: longhorn-system-longhorn-forward-auth@kubernetescrd,sso-oauth2-proxy-errors@kubernetescrd,longhorn-system-longhorn-headers@kubernetescrd
spec:
ingressClassName: traefik
tls:

1
services/oauth2-proxy/kustomization.yaml
View File

@ -7,3 +7,4 @@ resources:
- service.yaml
- ingress.yaml
- middleware.yaml
- middleware-errors.yaml

14
services/oauth2-proxy/middleware-errors.yaml Normal file
View File

@ -0,0 +1,14 @@
# services/oauth2-proxy/middleware-errors.yaml
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: oauth2-proxy-errors
namespace: sso
spec:
errors:
status:
- "401"
service:
name: oauth2-proxy
port: 80
query: /oauth2/start?rd={url}

2
services/vault/ingress.yaml
View File

@ -7,7 +7,7 @@ metadata:
annotations:
kubernetes.io/ingress.class: traefik
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.middlewares: vault-vault-forward-auth@kubernetescrd
traefik.ingress.kubernetes.io/router.middlewares: vault-vault-forward-auth@kubernetescrd,sso-oauth2-proxy-errors@kubernetescrd
traefik.ingress.kubernetes.io/service.serversscheme: https
traefik.ingress.kubernetes.io/service.serversTransport: vault-vault-to-https@kubernetescrd
spec:

2
services/zot/ingress.yaml
View File

@ -8,7 +8,7 @@ metadata:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.middlewares: zot-zot-forward-auth@kubernetescrd,zot-zot-resp-headers@kubernetescrd
traefik.ingress.kubernetes.io/router.middlewares: zot-zot-forward-auth@kubernetescrd,sso-oauth2-proxy-errors@kubernetescrd,zot-zot-resp-headers@kubernetescrd
spec:
ingressClassName: traefik
tls: