Fix basicauth issue (finaly)

This commit is contained in:
Aaron Riedel 2023-04-23 04:34:05 +02:00
parent 7cc71f7ccd
commit 02a123fe1f
Signed by: aaron
GPG key ID: 643004654D40D577
2 changed files with 18 additions and 13 deletions

View file

@ -68,10 +68,12 @@ metadata:
name: example-ingress
namespace: example
annotations:
kubernetes.io/ingress.class: "nginx"
spec.ingressClassName: "nginx"
cert-manager.io/cluster-issuer: letsencrypt-prod
acme.cert-manager.io/http01-edit-in-place: "true"
acme.cert-manager.io/http01-edit-in-place: "false"
ingress.kubernetes.io/ssl-redirect: "false"
# Use for Basic auth:
#nginx.org/basic-auth-secret: example-basic-auth-secret
# Use the following annotation if the backend only speaks HTTPS (fill out the service name accordingly):
#nginx.org/ssl-services: "example-service"
spec:
@ -90,3 +92,14 @@ spec:
- hosts:
- example.apps.yolokube.de
secretName: example-cert
# Use for Basic auth:
#---
#kind: Secret
#metadata:
# name: example-basic-auth-secret
# namespace: example
#apiVersion: v1
#type: nginx.org/htpasswd
#stringData:
# htpasswd: |
#test:$apr1$2XMU6EMv$f1MJ7zxqTS079YsB7Z.CX/

View file

@ -7,12 +7,8 @@ metadata:
annotations:
kubernetes.io/ingress.class: "nginx"
cert-manager.io/cluster-issuer: letsencrypt-prod
acme.cert-manager.io/http01-edit-in-place: "true"
acme.cert-manager.io/http01-edit-in-place: "false"
ingress.kubernetes.io/ssl-redirect: "false"
nginx.org/server-snippets: |
location ~ /.well-known/acme-challenge/(.*) {
auth_basic off;
}
nginx.org/basic-auth-secret: prometheus-basic-auth-secret
#nginx.org/ssl-services: "prometheus-server"
spec:
@ -40,12 +36,8 @@ metadata:
annotations:
kubernetes.io/ingress.class: "nginx"
cert-manager.io/cluster-issuer: letsencrypt-prod
acme.cert-manager.io/http01-edit-in-place: "true"
acme.cert-manager.io/http01-edit-in-place: "false"
ingress.kubernetes.io/ssl-redirect: "false"
nginx.org/server-snippets: |
location ~ /.well-known/acme-challenge/(.*) {
auth_basic off;
}
nginx.org/basic-auth-secret: prometheus-basic-auth-secret
#nginx.org/ssl-services: "prometheus-server"
spec: