Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Perform ssl-redirect after matching host #691

Closed
tamalsaha opened this issue Nov 7, 2017 · 0 comments

Comments

Projects
None yet
2 participants
@tamalsaha
Copy link
Member

commented Nov 7, 2017

From Rafael Angeline in Slack:

I'm having problems with http.noTLS setting, since even when not setting a key at tls.hosts & putting http.noTLS: true at rules, those lines are generated at ConfigMap:

    bind *:80 
    mode http

    # Limit Connections
    acl is_proxy_https hdr(X-Forwarded-Proto) https
    redirect scheme https code 301 if ! is_proxy_https
    
    [...]

redirect scheme https code 301 if ! is_proxy_https this redirects my http requests with a 301 to https, which I do not think is the desired behavior - could you please advise?

Basically, I'm trying to serve this at my ingress:

    http:
      noTLS: true
      paths:
      - backend:
          serviceName: donotforget-app
          servicePort: '80'
  - host: getschema.com
    http:
      paths:
        - path: '/'
          backend:
            serviceName: app-service
            servicePort: '80'

with a tls like:

  tls:
  - hosts:
    - getschema.com
    secretName: app-service-tls

which means only getschema.com would be served with TLS and normal http to donotforgettogohome.getschema.com ~ but that's not working since it always try to redirect to HTTPS.

editing manually the configmap and removing that line ensure things act normally. So will this be fixed by a next release? Also, do not forget one main question I have about setting the external IP of the service started by Ingress.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.