global-auth-url configuration does not work

[barakakha]

Is this a request for help? (If yes, you should use our troubleshooting guide and community support channels, see https://kubernetes.io/docs/tasks/debug-application-cluster/troubleshooting/.):
No

What keywords did you search in NGINX Ingress controller issues before filing this one? (If you have found any duplicates, you should instead reply there.):

• global-auth-url

---

Is this a BUG REPORT or FEATURE REQUEST? (choose one):
BUG REPORT

NGINX Ingress controller version:
0.24.1

Kubernetes version (use kubectl version):
Client Version: version.Info{Major:"1", Minor:"12", GitVersion:"v1.12.1", GitCommit:"4ed3216f3ec431b140b1d899130a69fc671678f4", GitTreeState:"clean", BuildDate:"2018-10-05T16:46:06Z", GoVersion:"go1.10.4", Compiler:"gc", Platform:"windows/amd64"}
Server Version: version.Info{Major:"1", Minor:"14", GitVersion:"v1.14.3", GitCommit:"5e53fd6bc17c0dec8434817e69b04a25d8ae0ff0", GitTreeState:"clean", BuildDate:"2019-06-06T01:36:19Z", GoVersion:"go1.12.5", Compiler:"gc", Platform:"linux/amd64"}

What happened:
i tried to use the global-auth-url configuration from the config map but it doesnt change anything and the requests are not redirected to the auth url. when using annotation we do see the nginx config change and the auth working as expected.
we tried to change other configurations in the ConfigMap and it did change the nginx configuration so the nginx listen to the ConfigMap changes.

What you expected to happen:
i expect the nginx config to change and add global auth url to every ingress rule the same as annotation.

How to reproduce it (as minimally and precisely as possible):
install nginx 0.24.1
try to configure and use global-auth-url

Anything else we need to know:
according to the change log it does not seem to have the change that added this feature so i wonder if the change log is wrong and if not why this feature already out in the documentation.

[aledbf]

Closing. This feature is not released yet #3506
To be released in the next version 0.25.0

[aledbf]

In the meantime, you can use the dev image quay.io/kubernetes-ingress-controller/nginx-ingress-controller:dev

[barakakha]

1. Why this feature is already in the documentation and without declaimer that its not been released yet?
2. when will version 0.25.0 be release?

[aledbf]

Why this feature is already in the documentation and without declaimer that its not been released yet?

Because we don't have versioned version of the docs or tags in the feature. Apologies for that

when will version 0.25.0 be release?

End of the week (the dev image contains what we are testing to release)

[raix]

Is global auth released / working?

Adding the annotation on ingress works fine:

kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/auth-url: http://auth-service.localtest.svc.cluster.local:80/auth/check

But adding this configuration to the config map did not work for us:

kind: ConfigMap
data:
  global-auth-url: http://auth-service.localtest.svc.cluster.local:80/auth/check

Also tried setting global-external-auth

kind: ConfigMap
data:
  global-external-auth: '{"url": "http://auth-service.localtest.svc.cluster.local:80/auth/check"}'

kind regards Morten

[raix]

It seems like

kind: ConfigMap
data:
  global-auth-url: http://auth-service.localtest.svc.cluster.local:80/auth/check

Is working when starting up a clean kubernetes using only the debug setup and our auth check service.