Files
buun-stack/longhorn/ingressroute.gomplate.yaml
2025-08-14 16:11:30 +09:00

33 lines
886 B
YAML

# ForwardAuth with static upstreams configuration
# https://oauth2-proxy.github.io/oauth2-proxy/configuration/integration/#forwardauth-with-static-upstreams-configuration
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: oauth-auth
spec:
forwardAuth:
address: "http://oauth2-proxy.{{ .Env.LONGHORN_NAMESPACE }}" # w/ redirect
# address: "http://oauth2-proxy.{{ .Env.LONGHORN_NAMESPACE }}/oauth2/auth" # w/o redirect
trustForwardHeader: true
authResponseHeaders:
- X-Auth-Request-Access-Token
- Authorization
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: longhorn
spec:
entryPoints:
- websecure
routes:
- match: "Host(`{{ .Env.LONGHORN_HOST }}`)"
kind: Rule
services:
- name: longhorn-frontend
port: 80
middlewares:
- name: oauth-auth