Skip to content

"auth-proxy-set-headers" should accept a configmap name without namespace #12996

Open
@isihu

Description

@isihu

What happened:
When specifying a configmap for extra headers to send to the auth-proxy living in the same namespace I couldn't reach my service anymore.

# works
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: hello-world
  namespace: foo
  annotations:
    nginx.ingress.kubernetes.io/auth-url: http://auth.default.svc.cluster.local:8080/get
    nginx.ingress.kubernetes.io/auth-proxy-set-headers: foo/bar
# doesn't work
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: hello-world
  namespace: foo
  annotations:
    nginx.ingress.kubernetes.io/auth-url: http://auth.default.svc.cluster.local:8080/get
    nginx.ingress.kubernetes.io/auth-proxy-set-headers: bar

What you expected to happen:
Nginx should be able to read the name of the configmap living in the same namespace as stated in the docs.

Image

NGINX Ingress controller version

-------------------------------------------------------------------------------
NGINX Ingress controller
  Release:       v1.9.4
  Build:         846d251814a09d8a5d8d28e2e604bfc7749bcb49
  Repository:    https://github.com/kubernetes/ingress-nginx
  nginx version: nginx/1.21.6

-------------------------------------------------------------------------------

PR that fixes this issue
#12997

Activity

added
kind/bugCategorizes issue or PR as related to a bug.
on Mar 18, 2025
added
needs-triageIndicates an issue or PR lacks a `triage/foo` label and requires one.
on Mar 18, 2025
k8s-ci-robot

k8s-ci-robot commented on Mar 18, 2025

@k8s-ci-robot
Contributor

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

github-actions

github-actions commented on Apr 18, 2025

@github-actions

This is stale, but we won't close it automatically, just bare in mind the maintainers may be busy with other tasks and will reach your issue ASAP. If you have any question or request to prioritize this, please reach #ingress-nginx-dev on Kubernetes Slack.

added
lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.
on Apr 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes issue or PR as related to a bug.lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.needs-priorityneeds-triageIndicates an issue or PR lacks a `triage/foo` label and requires one.

    Type

    No type

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

      Participants

      @k8s-ci-robot@isihu

      Issue actions

        "auth-proxy-set-headers" should accept a configmap name without namespace · Issue #12996 · kubernetes/ingress-nginx