Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Honor serversTransport.rootCAs for communication with ForwardAuth endpoints #7147

Open
bradjones1 opened this issue Aug 5, 2020 · 0 comments
Open

Honor serversTransport.rootCAs for communication with ForwardAuth endpoints #7147

bradjones1 opened this issue Aug 5, 2020 · 0 comments
Labels
area/tls kind/proposal a proposal that needs to be discussed.

Comments

@bradjones1
Copy link
Contributor

Do you want to request a feature or report a bug?

Feature

What did you expect to see?

Traefik 2.x reveals configuration for honoring additional root CAs for backend communication; e.g., a Kubernetes cluster CA.

The ForwardAuth middleware similarly allows specifying a CA for validating TLS requests to the forward auth endpoint.

It would be helpful if the forward auth CA list expanded the list in the server transport section, instead of being independent of it.
@bradjones1 bradjones1 changed the title Honor backend Honor serversTransport.rootCAs for communication with ForwardAuth endpoints Aug 5, 2020
@jbdoumenjou jbdoumenjou added kind/proposal a proposal that needs to be discussed. area/tls and removed status/0-needs-triage labels Aug 7, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area/tls kind/proposal a proposal that needs to be discussed.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@jbdoumenjou @bradjones1 @traefiker