Skip to content
Snippets Groups Projects
Commit 2cf715e9 authored by Nico P's avatar Nico P
Browse files

fixed auth-service-service-profile

parent 45207c1a
No related branches found
No related tags found
No related merge requests found
Showing
with 2 additions and 224 deletions
......@@ -11,4 +11,4 @@ spec:
pathRegex: /login
name: POST /login
isRetryable: true
timeout 200ms
timeout: 200ms
apiVersion: apps/v1
kind: Deployment
metadata:
name: client-test-deployment
spec:
replicas: 1
selector:
matchLabels:
app: client-test
template:
metadata:
annotations:
linkerd.io/inject: enabled
labels:
app: client-test
spec:
containers:
- name: client
image: ginyanote/client-test:1.0.0
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8081
env:
- name: SERVER_HOST
value: "server-test-service"
apiVersion: apps/v1
kind: Deployment
metadata:
name: server-test-deployment
spec:
replicas: 3
selector:
matchLabels:
app: server-test
template:
metadata:
annotations:
linkerd.io/inject: enabled
labels:
app: server-test
spec:
containers:
- name: server
image: ginyanote/server-test:1.0.0
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8080
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
annotations:
kubernetes.io/ingress.class: traefik
creationTimestamp: null
name: ingress-no-auth
namespace: default
spec:
routes:
- kind: Rule
match: PathPrefix(`/health`)
services:
- kind: Service
name: client-test-service
namespace: default
port: 8081
- kind: Rule
match: PathPrefix(`/user`)
services:
- kind: Service
name: auth-service-service
namespace: default
port: 5000
- kind: Rule
match: PathPrefix(`/login`)
services:
- kind: Service
name: auth-service-service
namespace: default
port: 5000
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
annotations:
kubernetes.io/ingress.class: traefik
creationTimestamp: null
name: ingress-with-auth
namespace: default
spec:
routes:
- kind: Rule
match: PathPrefix(`/message`)
middlewares:
- name: auth-4917873474387576508
namespace: default
services:
- kind: Service
name: client-test-service
namespace: default
port: 8081
- kind: Rule
match: PathPrefix(`/logout`)
middlewares:
- name: auth-4917873474387576508
namespace: default
services:
- kind: Service
name: auth-service-service
namespace: default
port: 5000
- kind: Rule
match: PathPrefix(`/blacklist/cleanup`)
middlewares:
- name: auth-4917873474387576508
namespace: default
services:
- kind: Service
name: auth-service-service
namespace: default
port: 5000
---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
creationTimestamp: null
name: auth-4917873474387576508
namespace: default
spec:
forwardAuth:
address: http://auth-service-service.default.svc.cluster.local:5000/verify
authResponseHeaders:
- UserID
- IsAdmin
- UserRoles
tls: {}
apiVersion: v1
kind: Secret
type: Opaque
metadata:
name: web-ingress-auth
namespace: linkerd-viz
data:
auth: YWRtaW46JGFwcjEkbjdDdTZnSGwkRTQ3b2dmN0NPOE5SWWpFakJPa1dNLgoK
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
annotations:
kubernetes.io/ingress.class: traefik
creationTimestamp: null
name: web-ingress
namespace: linkerd-viz
spec:
routes:
- kind: Rule
match: PathPrefix(`/`)
middlewares:
- name: auth-12615798825126772440
namespace: linkerd-viz
- name: headers-15820832024145736740
namespace: linkerd-viz
services:
- kind: Service
name: web
namespace: linkerd-viz
port: 8084
---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
creationTimestamp: null
name: auth-12615798825126772440
namespace: linkerd-viz
spec:
basicAuth:
secret: web-ingress-auth
---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
creationTimestamp: null
name: headers-15820832024145736740
namespace: linkerd-viz
spec:
headers:
customRequestHeaders:
L5d-Dst-Override: web.linkerd-viz.svc.cluster.local:8084
apiVersion: v1
kind: Service
metadata:
name: client-test-service
spec:
selector:
app: client-test
ports:
- protocol: TCP
port: 8081
targetPort: 8081
type: ClusterIP
\ No newline at end of file
apiVersion: v1
kind: Service
metadata:
name: server-test-service
spec:
selector:
app: server-test
ports:
- protocol: TCP
port: 8080
targetPort: 8080
type: ClusterIP
\ No newline at end of file
......@@ -11,4 +11,4 @@ spec:
pathRegex: /login
name: POST /login
isRetryable: true
timeout 200ms
timeout: 200ms
apiVersion: linkerd.io/v1alpha2
kind: ServiceProfile
metadata:
creationTimestamp: null
name: server-test-service-profile
namespace: default
spec:
routes:
- condition:
method: POST
pathRegex: /message
name: POST /message
isRetryable: true
\ No newline at end of file
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment