trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

providers/proxy: always check ingress secret in kubernetes controller

Browse source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer 2021-10-03 19:14:27 +02:00
parent c720c9f41b
commit d30dcda814
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
authentik/providers/proxy/controllers/k8s/ingress.py
View file

@ -63,8 +63,15 @@ class IngressReconciler(KubernetesObjectReconciler[NetworkingV1beta1Ingress]):
have_hosts_tls = [] have_hosts_tls = []
if current.spec.tls: if current.spec.tls:
for tls_config in current.spec.tls: for tls_config in current.spec.tls:
if tls_config and tls_config.hosts: if not tls_config:
continue
if tls_config.hosts:
have_hosts_tls += tls_config.hosts have_hosts_tls += tls_config.hosts
if (
tls_config.secret_name
!= self.controller.outpost.config.kubernetes_ingress_secret_name
):
raise NeedsUpdate()
have_hosts_tls.sort() have_hosts_tls.sort()
if have_hosts != expected_hosts: if have_hosts != expected_hosts: