Skip to content
Snippets Groups Projects
Verified Commit dbd73c12 authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

fix(monitoring): Resolve 502 after successful login on oauth2-proxy

This patch finally fixes the issue of a successful oauth2-proxy login
failing directly afterwards due to some issues with the cookie.

This patch enabled "minimal session cookies" and by that resolved the
issue.

References:
https://github.com/oauth2-proxy/oauth2-proxy/issues/941#issuecomment-747108519
parent 2a69831e
No related branches found
No related tags found
No related merge requests found
...@@ -12,8 +12,8 @@ sops: ...@@ -12,8 +12,8 @@ sops:
azure_kv: [] azure_kv: []
hc_vault: [] hc_vault: []
age: [] age: []
lastmodified: "2022-02-02T20:51:11Z" lastmodified: "2022-02-02T21:27:59Z"
mac: ENC[AES256_GCM,data:/B3phyaqukaNzg5XayRgxqQCm9Jb+rxhBfmQDFrfaZZhDRSi5+iuLro2Wk6vFq903hijHWElA03c7a5MoxoUhC/RUB4X4dDQxjsr5XnsrWdxD/z2mwCg98sBIJOsZuhyapeg3TSWlzhm2GcFYyYqEcTtat6eLVfbtcG21fZLC9c=,iv:DlmypVGFdu4Y13vpwCIptAkFIwfvPg94hE8v69XqKvQ=,tag:J7d+KAtCR/i80tVd4MIR4A==,type:str] mac: ENC[AES256_GCM,data:hjDzDvx2owVZgLIQqwqHRnrKZpM3MmHdiPu/DUbAbe/8ctWSZwIII/+LSlfnsK8+aud33xeMkZBqzAo7NwQObU9mod/3fuIexprhx/RwIWUlzOWnIZJvQ0eLRSxdFZWEUf2UkRaOElnCerUdAUn7t6tUkTwmPPXj5vXAP8lRtW4=,iv:z1evvp3+t8RYa6NCGRdmEyGtximRSrTwRTbcF/1iWw4=,tag:ZwkJdu10P370L2Lyy7eZOw==,type:str]
pgp: pgp:
- created_at: "2022-01-22T04:06:16Z" - created_at: "2022-01-22T04:06:16Z"
enc: |- enc: |-
...@@ -89,6 +89,7 @@ spec: ...@@ -89,6 +89,7 @@ spec:
oidc-issuer-url: ENC[AES256_GCM,data:cjpWCSaUohFnsNuTQglIASmY2DrdmRoNFUu6f8UiqLjTNMRWdPgGhliZxsL6u56Jmw2Ec4yj9lKuNJfA,iv:vKIdjDG4FZWJMlVqoeeu1USEy+Ig3UZdMKXPkZqWTro=,tag:9EBs55eqkItBnJ7JNFMnLA==,type:str] oidc-issuer-url: ENC[AES256_GCM,data:cjpWCSaUohFnsNuTQglIASmY2DrdmRoNFUu6f8UiqLjTNMRWdPgGhliZxsL6u56Jmw2Ec4yj9lKuNJfA,iv:vKIdjDG4FZWJMlVqoeeu1USEy+Ig3UZdMKXPkZqWTro=,tag:9EBs55eqkItBnJ7JNFMnLA==,type:str]
allowed-role: monitoring-k8s01:admin allowed-role: monitoring-k8s01:admin
whitelist-domain: ENC[AES256_GCM,data:lPjezumXqntAyndo5dw8UlcN53AYvlTjH107otM=,iv:zq1ufpUpHAbSBhyZ9QOuU/1rROgtzpeBNFskOFQU6f0=,tag:qUNLlVDmPVUoEeotjumqFg==,type:str] whitelist-domain: ENC[AES256_GCM,data:lPjezumXqntAyndo5dw8UlcN53AYvlTjH107otM=,iv:zq1ufpUpHAbSBhyZ9QOuU/1rROgtzpeBNFskOFQU6f0=,tag:qUNLlVDmPVUoEeotjumqFg==,type:str]
session-cookie-minimal: true
replicaCount: 1 replicaCount: 1
securityContext: securityContext:
enabled: true enabled: true
...@@ -126,8 +127,8 @@ sops: ...@@ -126,8 +127,8 @@ sops:
azure_kv: [] azure_kv: []
hc_vault: [] hc_vault: []
age: [] age: []
lastmodified: "2022-02-02T20:51:11Z" lastmodified: "2022-02-02T21:27:59Z"
mac: ENC[AES256_GCM,data:/B3phyaqukaNzg5XayRgxqQCm9Jb+rxhBfmQDFrfaZZhDRSi5+iuLro2Wk6vFq903hijHWElA03c7a5MoxoUhC/RUB4X4dDQxjsr5XnsrWdxD/z2mwCg98sBIJOsZuhyapeg3TSWlzhm2GcFYyYqEcTtat6eLVfbtcG21fZLC9c=,iv:DlmypVGFdu4Y13vpwCIptAkFIwfvPg94hE8v69XqKvQ=,tag:J7d+KAtCR/i80tVd4MIR4A==,type:str] mac: ENC[AES256_GCM,data:hjDzDvx2owVZgLIQqwqHRnrKZpM3MmHdiPu/DUbAbe/8ctWSZwIII/+LSlfnsK8+aud33xeMkZBqzAo7NwQObU9mod/3fuIexprhx/RwIWUlzOWnIZJvQ0eLRSxdFZWEUf2UkRaOElnCerUdAUn7t6tUkTwmPPXj5vXAP8lRtW4=,iv:z1evvp3+t8RYa6NCGRdmEyGtximRSrTwRTbcF/1iWw4=,tag:ZwkJdu10P370L2Lyy7eZOw==,type:str]
pgp: pgp:
- created_at: "2022-01-22T04:06:16Z" - created_at: "2022-01-22T04:06:16Z"
enc: |- enc: |-
...@@ -193,8 +194,8 @@ sops: ...@@ -193,8 +194,8 @@ sops:
azure_kv: [] azure_kv: []
hc_vault: [] hc_vault: []
age: [] age: []
lastmodified: "2022-02-02T20:51:11Z" lastmodified: "2022-02-02T21:27:59Z"
mac: ENC[AES256_GCM,data:/B3phyaqukaNzg5XayRgxqQCm9Jb+rxhBfmQDFrfaZZhDRSi5+iuLro2Wk6vFq903hijHWElA03c7a5MoxoUhC/RUB4X4dDQxjsr5XnsrWdxD/z2mwCg98sBIJOsZuhyapeg3TSWlzhm2GcFYyYqEcTtat6eLVfbtcG21fZLC9c=,iv:DlmypVGFdu4Y13vpwCIptAkFIwfvPg94hE8v69XqKvQ=,tag:J7d+KAtCR/i80tVd4MIR4A==,type:str] mac: ENC[AES256_GCM,data:hjDzDvx2owVZgLIQqwqHRnrKZpM3MmHdiPu/DUbAbe/8ctWSZwIII/+LSlfnsK8+aud33xeMkZBqzAo7NwQObU9mod/3fuIexprhx/RwIWUlzOWnIZJvQ0eLRSxdFZWEUf2UkRaOElnCerUdAUn7t6tUkTwmPPXj5vXAP8lRtW4=,iv:z1evvp3+t8RYa6NCGRdmEyGtximRSrTwRTbcF/1iWw4=,tag:ZwkJdu10P370L2Lyy7eZOw==,type:str]
pgp: pgp:
- created_at: "2022-01-22T04:06:16Z" - created_at: "2022-01-22T04:06:16Z"
enc: |- enc: |-
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment