Investigate why NGINX doesn't work

Question

Investigate why NGINX doesn't work

JoshVanL opened this issue 5 years ago · 5 comments

JoshVanL commented 5 years ago

When deploying behind an nginx, the kube-oidc-proxy becomes unreachable - due to some streaming error.

This is basically a requirement for a cert-manager cert bootstrap.

Logs TBD.

Answer 1 · 2019-03-11T10:10:26.000Z

We won't support kube-oidc-proxy behind nginx

/close

Answer 2 · 2019-03-11T10:10:26.000Z

How come this is required for certificate bootstrapping? We shouldn’t be using let’s encrypt or ACME based CAs for TLS, in favour of the ‘selfsigned’ and ‘ca’ issuer types (using a hard coded trusted root ca)

…

On Mon, 11 Mar 2019 at 08:58, Joshua Van Leeuwen ***@***.***> wrote: When deploying behind an nginx, the kube-oidc-proxy becomes unreachable - due to some streaming error. This is basically a requirement for a cert-manager cert bootstrap. Logs TBD. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#9>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAMbP83pGj1DOeiHXWwcJ1q8L8lMAp9Mks5vVhqbgaJpZM4boFnC> .

Answer 3 · 2019-03-11T10:10:28.000Z

@JoshVanL: Closing this issue.

In response to this:

We won't support kube-oidc-proxy behind nginx

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Answer 4 · 2019-03-11T10:19:04.000Z

@munnerz Yes exactly, we discussed this in the meeting just now which is why we are closing the issue.

That is worded very badly by me ^

This is basically a requirement for a cert-manager cert bootstrap with nginx < (obviously!)

Answer 5 · 2019-10-16T21:20:46.000Z

I'm confused and am having trouble deploying oidc-proxy behind an nginx ingress controller. Is this not possible, will it ever be, use X instead?