Comments (5)
你好,请问采用annotation方式来配置ingress后是否需要额外手动安装auth wasm 插件?
from higress.
你好,请问采用annotation方式来配置ingress后是否需要额外手动安装auth wasm 插件?
不需要,这个basic auth功能已经内置了
from higress.
当对foo ingress采用如下annotations时
Annotations:
nginx.ingress.kubernetes.io/auth-realm: Authentication Required - foo
nginx.ingress.kubernetes.io/auth-secret: basic-auth
nginx.ingress.kubernetes.io/auth-type: basic
auth没有生效,controller日志打印如下:
nce stable[11] 1 for config EnvoyFilter/higress-system/istio-autogenerated-k8s-ingress-basic-auth: 100.950583ms since last change, 100.949875ms since last push, full=true
ng:2023-02-20T12:35:57Z/9 Services:6 ConnectedEndpoints:1 Version:2023-02-20T12:35:57Z/9
for node:higress-gateway-5dc84b8cc4-6k79l.higress-system resources:15 size:5.7kB cached:0/14
for node:higress-gateway-5dc84b8cc4-6k79l.higress-system resources:14 size:2.5kB empty:0 cached:14/14
for node:higress-gateway-5dc84b8cc4-6k79l.higress-system resources:1 size:4.1kB
for node:higress-gateway-5dc84b8cc4-6k79l.higress-system resources:1 size:937B cached:0/0
CK ERROR higress-gateway-5dc84b8cc4-6k79l.higress-system-1 Internal:Error adding/updating listener(s) 0.0.0.0_80: Unable to create Wasm HTTP filter basic-auth
gateway 日志如下:
] [2023-02-20 12:35:57.084][17][warning][config] gRPC config for type.googleapis.com/envoy.config.listener.v3.Listener rejected: Error adding/updating listener(s) 0.0.0.0_80: Unable t
calhost","bytes_received":"0","bytes_sent":"4","downstream_local_address":"10.1.0.25:80","downstream_remote_address":"192.168.65.3:64306","duration":"16","istio_policy_status":"-","me
] [2023-02-20 12:36:43.550][17][error][wasm] Wasm VM failed Failed to load NullVM plugin
] [2023-02-20 12:36:43.550][17][error][wasm] Wasm VM failed Failed to load Wasm code
请问是否哪里配置不正确?
from higress.
@fizos 是basic auth的nullvm plugin没有被编译进来,需要调整下envoy的编译参数,我后续修复下
from higress.
@fizos 1.0.0-rc 版本已修复此问题 可以执行 helm upgrade/install --devel 升级到最新rc版本
from higress.
Related Issues (20)
- 新增podmonitor对higress-gateway
- Support summary output for route/cluster/listener in hgctl gateway-config command
- istio对于virtualservice转换envoy配置合并域名的机制,希望higress进行优化 HOT 5
- Http转dubbo的返回值中不能正确解析引用的对象 HOT 3
- 使用higress.io/auth-tls-secret配置客户端证书未生效 HOT 5
- 从请求的url参数里读取key-value并将这个value值作为目的地址进行转发
- 使用 Higress + LobeChat 快速搭建私人GPT助理 HOT 30
- macos 13.6下kind部署使用wasm插件后envoy奔溃 HOT 5
- 弃用较老的 TLS 版本 HOT 1
- Higress Wasm 插件中 redis-cli 支持 Scan HOT 6
- Higress WasmPlugin CRD 不支持自签名证书的HTTPS的镜像仓库
- higress1.3.3不兼容ingress迁移过来的路由规则 HOT 2
- higress 域名配置如何支持非80、443端口 HOT 1
- 【开源之夏】实现基于向量相似度实现LLM结果召回的WASM插件
- 【GLCC】AI 缓存 Wasm 插件对接更多向量数据库/向量存储、搜索组件
- 【GLCC】Higress Console 支持 Gateway API HOT 2
- 【GLCC】Higress Console 支持通过表单配置 Wasm 插件
- 是否有计划支持service-weight注解 HOT 3
- support aws eks HOT 6
- 支持通过 GitHub Actions 来构建和发布 Wasm 插件镜像
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from higress.