Different endpoints for different groups
dignajar opened this issue · 4 comments
Hi,
It's possible to generate different endpoint with different authentication configuration ?
For example.
nginx.ingress.kubernetes.io/auth-url: http://nginx-ldap-auth.default.svc.cluster.local:5555/config1
nginx.ingress.kubernetes.io/auth-url: http://nginx-ldap-auth.default.svc.cluster.local:5555/config2
So each endpoint has a different authentication filters.
Yes, it is possible, simple duplicate the yaml and change it's name:
nginx.ingress.kubernetes.io/auth-url: http://nginx-ldap-auth-1.default.svc.cluster.local:5555
nginx.ingress.kubernetes.io/auth-url: http://nginx-ldap-auth-2.default.svc.cluster.local:5555
It will solve your problem.
Hi, is ok that solution but I going to have duplicated deployment/service just for change the filters rules, maybe would be good to have different endpoints in the same container. Just a suggestion as new feature for next versions.
It is planned to have conditional validation over headers on issue #5, once the URI is passed through a header from nginx to the authenticator, it should help you, but will match against LDAP users and groups only, if you intend to match on other LDAP server the solution is still duplicating the authenticator.