Skip to content
This repository has been archived by the owner on Apr 17, 2019. It is now read-only.

[Nginx ingress controller] Ability to exclude routes from auth #1950

Closed
kop opened this issue Oct 29, 2016 · 2 comments
Closed

[Nginx ingress controller] Ability to exclude routes from auth #1950

kop opened this issue Oct 29, 2016 · 2 comments

Comments

@kop
Copy link

kop commented Oct 29, 2016

A little proposal for the authentication system.

It would be very helpful to have an ability to set a list of URI's (or a list of regular expressions) that should not use authentication system (both basic and external).

For example, in my current scenario, I need to limit access to our internal cluster services for users, but still be able to accept webhooks from third party systems.

@aledbf
Copy link
Contributor

aledbf commented Oct 29, 2016

@kop you can do that now creating two ingress

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    ingress.kubernetes.io/auth-url: https://httpbin.org/basic-auth/user/passwd
  name: foo
  namespace: default
spec:
  rules:
  - host: foo.bar.com
    http:
      paths:
      - backend:
          serviceName: echoheaders-x
          servicePort: 80
        path: /

---

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: foo-noauth
  namespace: default
spec:
  rules:
  - host: foo.bar.com
    http:
      paths:
      - backend:
          serviceName: echoheaders-x
          servicePort: 80
        path: /webhooks        

@kop
Copy link
Author

kop commented Oct 29, 2016

@aledbf, that's a good idea, thank you. Fo some reason I did not think about it.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants