fix: remove broken auth annotations from obsidian ingress
Bearer auth-url was misconfigured (pointed to token endpoint, not forward-auth). No Authentik outpost deployed yet. Remove for now, vault.riotpiao.com accessible directly. TODO: add forward-auth once outpost is set up.
This commit is contained in:
@@ -155,8 +155,9 @@ metadata:
|
|||||||
namespace: poimen
|
namespace: poimen
|
||||||
annotations:
|
annotations:
|
||||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||||
nginx.ingress.kubernetes.io/auth-type: bearer
|
# TODO: Add Authentik forward-auth once outpost is deployed
|
||||||
nginx.ingress.kubernetes.io/auth-url: http://authentik-server.iam.svc.cluster.local/application/o/oauth2/token/
|
# nginx.ingress.kubernetes.io/auth-url: https://<outpost>/outpost.goauthentik.io/auth/nginx
|
||||||
|
# nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.com/outpost.goauthentik.io/start?rd=$scheme://$host$request_uri
|
||||||
spec:
|
spec:
|
||||||
ingressClassName: nginx
|
ingressClassName: nginx
|
||||||
tls:
|
tls:
|
||||||
|
|||||||
Reference in New Issue
Block a user