DavidePrette

Passbolt SSO ip not match

Problem Description:

Users are unable to use Single Sign-On (SSO) due to IP mismatch errors. The issue arises because the IP addresses don't match as expected. To resolve this, we need to configure the nginx proxy in our Kubernetes environment to set the correct headers and allow the expected IP addresses.

Solution:

We'll create a ConfigMap containing the necessary nginx configuration to set headers properly and specify the allowed IP addresses. Then, we'll mount this ConfigMap into our passbolt container.

DavidePrette

Kubernetes DaemonSet and Service Configuration with HAProxy in front

Controller Configuration

controller:
  config:
    compute-full-forwarded-for: "true"
 use-forwarded-headers: "true"

DavidePrette

Modifying MountOptions for CephCSI Volumes (v3.9.0+)

This document outlines the process of adjusting MountOptions for CephCSI volumes after the v3.9.0 release. This update introduces stricter compatibility requirements for mount options, requiring them to be valid during both NodeStageVolume and NodePublishVolume operations. Setting invalid options, like "debug", can cause mounting failures.

Important Notes:

• Backup: Before proceeding, ensure you have a complete backup of your volumes and associated data.
• Compatibility: Carefully review the list of valid mount options in the official CephCSI documentation: https://github.com/ceph/ceph-csi/blob/v3.9.0/docs/ceph-csi-upgrade.md#24-modifying-mountoptions-in-storageclass-and-persistentvolumes
• Testing: It's strongly recommended to test this process in a non-production environment first to assess it