trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

providers/proxy: add traefik.ingress.kubernetes.io/router.tls annotation for ingress 

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer 2021-12-20 22:24:42 +01:00
parent eca2ef20d0
commit dfbf7027bc
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
authentik/providers/proxy/controllers/k8s/ingress.py
View File

@ -89,8 +89,11 @@ class IngressReconciler(KubernetesObjectReconciler[V1Ingress]):
# goes to the same pod # goes to the same pod
"nginx.ingress.kubernetes.io/affinity": "cookie", "nginx.ingress.kubernetes.io/affinity": "cookie",
"traefik.ingress.kubernetes.io/affinity": "true", "traefik.ingress.kubernetes.io/affinity": "true",
# Buffer sizes for large headers with JWTs
"nginx.ingress.kubernetes.io/proxy-buffers-number": "4", "nginx.ingress.kubernetes.io/proxy-buffers-number": "4",
"nginx.ingress.kubernetes.io/proxy-buffer-size": "16k", "nginx.ingress.kubernetes.io/proxy-buffer-size": "16k",
# Ensure ingress can receive TLS traffic
"traefik.ingress.kubernetes.io/router.tls": "true",
} }
annotations.update(self.controller.outpost.config.kubernetes_ingress_annotations) annotations.update(self.controller.outpost.config.kubernetes_ingress_annotations)
return annotations return annotations