curved-train-21046
10/30/2024, 3:53 PMHaving an issue with Oathkeeper + Nginx Ingress auth.
Setup:
- Nginx Ingress auth-url pointing to Oathkeeper API: `<http://oathkeeper-api:4456/decisions>`
- Oathkeeper rule matching `/decisions` path with anonymous auth
- Rule shows up in /rules endpoint correctly
Issue:
Nginx is sending auth requests to `/authenticate` path on Oathkeeper proxy (port 4455) instead of `/decisions` on API (port 4456), despite auth-url configuration.
curved-train-21046
10/30/2024, 3:54 PM{"http_request":{"headers":{"accept":"*/*","connection":"close","user-agent":"curl/8.4.0","x-auth-request-redirect":"/.wel
l-known/alive","x-forwarded-for":"127.0.0.1","x-original-method":"GET","x-original-url":"<https://api.tunnel.threadr.ai/.we>
ll-known/alive","x-real-ip":"127.0.0.1","x-request-id":"4dc8668899a19bb09bb2eb0beffc728a","x-sent-from":"nginx-ingress-con
troller"},"host":"oathkeeper-proxy.default.svc.cluster.local","method":"GET","path":"/authenticate/alive","query":null,"re
mote":"10.42.184.33:56604","scheme":"http"},"http_response":{"headers":{"content-type":"application/json","vary":"Origin"}
,"size":140,"status":404,"text_status":"Not Found","took":7029826},"level":"info","msg":"completed handling request","time
":"2024-10-30T15:49:37.217079133Z"}
curved-train-21046
10/30/2024, 3:55 PMoathkeeper-proxy
from anymore or the path to /authenticate/alive
as far as I can tell it is not in any of my k8s configs