Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added config for OAuth login/logout URIs #1696

Merged
merged 1 commit into from Apr 27, 2020

Conversation

plnordquist
Copy link
Contributor

Description of the change

These changes allow overriding the OAuth Login and Logout URIs which is useful when deploying the chart under a sub path. For my deployment, I set the ingress to rewrite urls and change a few other values to properly know about the sub path. I've included some sample values below however the sample values would need extra configuration to fully configure the authProxy service.

  • Relevant Sample Values:
authProxy:
  enabled: true
  additionalFlags:
  - -redirect-url=https://<hostname>/kubeapps/oauth2/callback
  - -cookie-path=/kubeapps
  oauthLoginURI: /kubeapps/oauth2/start?rd=/kubeapps/
  oauthLogoutURI: /kubeapps/oauth2/sign_out
ingress:
  enabled: true
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /$2
  extraHosts:
  - name: <hostname>
    path: /kubeapps(/|$)(.*)
  extraTls:
  - hosts:
    - <hostname>
    secretName: <hostname>-cert

Benefits

  • Allow configuring the locations that Kubeapps should redirect a user to when logging in or out with authProxy.enabled=true

Possible drawbacks

Applicable issues

Additional information

Copy link
Contributor

@absoludity absoludity left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Excellent, thanks @plnordquist . That improves things either way.

@absoludity absoludity merged commit f76c14d into vmware-tanzu:master Apr 27, 2020
@plnordquist plnordquist deleted the uri-fixes branch April 27, 2020 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants