https://www.ory.sh/ logo
#talk-hydra
Title
# talk-hydra
f

few-lighter-57337

03/09/2022, 9:03 AM
Hello!! Someone have experience using hydra with istio? Right now my problem is that the virtualservice is not configuring the headers i provide, this is the definition (we are using TLS termination):
Copy code
---
apiVersion: <http://networking.istio.io/v1beta1|networking.istio.io/v1beta1>
kind: VirtualService
metadata:
  name: {{ include "hydra.fullname" . }}-vs-admin-internal
spec:
  hosts:
  - hydra-admin.ory.svc.cluster.local
  gateways:
  - mesh
  http:
  - headers:
      request:
        set:
          X-Forwarded-Proto: "https"
    route:
    - destination:
        host: hydra-admin.ory.svc.cluster.local
        port:
          number: 4445
Using curl directly to this endpoint i receive:
Copy code
/app # curl <http://hydra-admin.ory.svc.cluster.local:4445/clients>
{"error":"error","error_description":"The error is unrecognizable"}
But when I use the same command with --headers with the https, it works perfectly…it should be done in the virtualservice for all the requests….right?
m

magnificent-energy-493

03/09/2022, 9:14 AM
Hey Ramon, I do not have much experience with Istio personally, but will ask around. Also here is a bit older discussion (more on Oathkeeper, but also involving Hydra) that might be of some help: https://github.com/ory/oathkeeper/issues/624
f

few-lighter-57337

03/09/2022, 9:17 AM
is this a problem related with my version of istio? we are in 1.8.1
😮
m

magnificent-energy-493

03/09/2022, 9:19 AM
I dont think that is the issue, but maybe I am missing something - what lead you to that assumption?
f

few-lighter-57337

03/09/2022, 9:22 AM
just thinking about what can happen, i’m creating the custom headers as the documentation says….
2 Views