riotpiao-poimen/homelab-frontend
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(gateway): fetch JWKS from the in-cluster ZITADEL service #69

Merged
rock merged 1 commits from feat/gateway-jwks-incluster into main 2026-10-27 08:28:24 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
poimen commented 2026-10-27 08:28:12 +00:00
Member
Copy Link
Copy Source

Public host JWKS fetch timed out through ingress-nginx; use the service endpoint on 8080, already allowed by the NetworkPolicy.

Public host JWKS fetch timed out through ingress-nginx; use the service endpoint on 8080, already allowed by the NetworkPolicy.
poimen added 1 commit 2026-10-27 08:28:13 +00:00
fix(gateway): fetch JWKS from the in-cluster ZITADEL service
CI / CI (pull_request) Successful in 2m7s
Details
CI / CI (push) Successful in 3m26s
Details
6acaec4a5c 
The public host resolves through the CoreDNS rewrite to ingress-nginx and the
fetch timed out, so the validator answered 403 with a context-deadline error on
every caller. Point jwksUrl at zitadel.iam.svc.cluster.local:8080, which the
NetworkPolicy already allows.
rock merged commit 6acaec4a5c into main 2026-10-27 08:28:24 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area/auth
Authentication & authorization
 area/authentik
Authentik OIDC provider config
 area/downstream
Downstream service changes
 area/gateway
API gateway code
 priority/high
Must have
 priority/low
Nice to have
 priority/medium
Should have
 status/blocked
Blocked by dependency
 status/done
Completed
 status/in-progress
Currently being worked on
 status/review
Ready for review
 status/todo
Not started
 type/docs
Documentation
 type/feature
New feature
 type/infra
Infrastructure change
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
poimen rock (Rock)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab-frontend#69