-
Hello! I have a tricky issue here. I am trying to enable IP whitelisting for my staging instances, but the issue is that, the IP whitelisting is also applied to the This is the relevant ingress annotation
And it generates this config file:
Any ideas, how to deny specified ips for "/" but allow them for " /.well-known/acme-challenge/..."? Thanks! EDIT: I am using |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
Hey @JanCizmar, thanks for opening the discussion, would you mind sharing you ingress yaml please?
If this doesn't works then custom templates might come in handy https://github.com/nginxinc/kubernetes-ingress/tree/v3.3.2/examples/shared-examples/custom-templates |
Beta Was this translation helpful? Give feedback.
Hey! That's not possible. Sorry I wasn't clear enough. The "..." in the location path
/.well-known/acme-challenge/...
is actually full path, so if I do the proposed, it won't work since the generated configuration is more specific. I've actually already solved this by using DNS01 Challenge Provider in the cert manager. Another possible solution would be probably using Mergeable Ingresses withoutacme.cert-manager.io/http01-edit-in-place: "true"
but I was not successful configuring it.