Skip to content

Instantly share code, notes, and snippets.

@sebnyberg
Last active September 15, 2020 15:35
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sebnyberg/df5aeb5be0c3a42ec6e0aabdaad8589d to your computer and use it in GitHub Desktop.
Save sebnyberg/df5aeb5be0c3a42ec6e0aabdaad8589d to your computer and use it in GitHub Desktop.
Example ingress protected with AD
# Source: airflow/templates/webserver/webserver-ingress.yaml
apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
name: someapp
annotations:
cert-manager.io/cluster-issuer: "letsencrypt-prod"
kubernetes.io/ingress.class: "nginx"
nginx.ingress.kubernetes.io/auth-signin: "https://$host/oauth2/start?rd=$escaped_request_uri"
nginx.ingress.kubernetes.io/auth-url: "https://$host/oauth2/auth"
spec:
tls:
- hosts:
- my.domain.com
secretName: tls-mydomain
rules:
- http:
paths:
- path:
backend:
serviceName: someapp
servicePort: 3000
host: my.domain.com
provider: azure
config:
clientID: PUT_CLIENT_ID_HERE
clientSecret: PUT_SECRET_HERE
extraArgs:
provider: azure
ingress:
enabled: true
path: /oauth2
hosts:
- my.domain.com
tls:
- hosts: [my.domain.com]
secretName: tls-mydomain
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
kubernetes.io/ingress.class: nginx
nginx.ingress.kubernetes.io/proxy-body-size: "0"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment