如何在ngnix ingress中对特定的HTTP方法进行基本身份验证? [英] How can I put basic auth on specific HTTP methods in ngnix ingress?
本文介绍了如何在ngnix ingress中对特定的HTTP方法进行基本身份验证?的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!
问题描述
我可以使用基本身份验证创建入口.我遵循了来自kubernetes/ingress-nginx的模板:
I can create ingress with basic auth. I followed the template from kubernetes/ingress-nginx:
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: ingress-with-auth
annotations:
# type of authentication
nginx.ingress.kubernetes.io/auth-type: basic
# name of the secret that contains the user/password definitions
nginx.ingress.kubernetes.io/auth-secret: basic-auth
# message to display with an appropriate context why the authentication is required
nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required - foo'
spec:
rules:
- host: foo.bar.com
http:
paths:
- path: /
backend:
serviceName: http-svc
servicePort: 80
它可以正常工作,但是我需要允许没有基本身份验证的'OPTIONS'方法用于飞行前请求.有关如何执行操作的任何指示都将非常有帮助.
It works fine, but I need to allow 'OPTIONS' method without basic auth for pre-flight requests. Any pointers on how to do it will be very helpful.
推荐答案
我刚刚遇到了同样的问题.我通过使用配置代码片段来解决了这个问题.
I just encountered the same problem. I solved it by using a configuration-snippet.
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: my-cors-auth-ingress
annotations:
nginx.ingress.kubernetes.io/configuration-snippet: |
# fix cors issues of ingress when using external auth service
if ($request_method = OPTIONS) {
add_header Content-Length 0;
add_header Content-Type text/plain;
return 204;
}
more_set_headers "Access-Control-Allow-Credentials: true";
more_set_headers "Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS";
more_set_headers "Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization";
more_set_headers "Access-Control-Allow-Origin: $http_origin";
more_set_headers "Access-Control-Max-Age: 600";
nginx.ingress.kubernetes.io/auth-url: "http://auth-service.default.svc.cluster.local:80"
这篇关于如何在ngnix ingress中对特定的HTTP方法进行基本身份验证?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!
查看全文