For OpenID-Connect /openid-connect is only served by mod_auth_openidc,

do not send to back-end pods.
ManageIQ · Jun 5, 2018 · 85fa9de · 85fa9de
1 parent 03d6944
commit 85fa9de
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/templates/miq-template-ext-db.yaml b/templates/miq-template-ext-db.yaml
@@ -49,6 +49,10 @@ objects:
 
         # For SAML /saml2 is only served by mod_auth_mellon in the httpd pod
         RewriteCond %{REQUEST_URI} !^/saml2
+
+        # For OpenID-Connect /openid-connect is only served by mod_auth_openidc
+        RewriteCond %{REQUEST_URI} !^/openid-connect
+
         RewriteRule ^/ http://ui:3000%{REQUEST_URI} [P,QSA,L]
         ProxyPassReverse / http://ui:3000/
 

diff --git a/templates/miq-template.yaml b/templates/miq-template.yaml
@@ -122,6 +122,10 @@ objects:
 
         # For SAML /saml2 is only served by mod_auth_mellon in the httpd pod
         RewriteCond %{REQUEST_URI} !^/saml2
+
+        # For OpenID-Connect /openid-connect is only served by mod_auth_openidc
+        RewriteCond %{REQUEST_URI} !^/openid-connect
+
         RewriteRule ^/ http://ui:3000%{REQUEST_URI} [P,QSA,L]
         ProxyPassReverse / http://ui:3000/