mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-20 23:16:49 +00:00
Scooby HuskyandClaude Opus 4.6
0c16785116
Traffic goes through Istio (not Envoy Gateway), so cookie-based consistent hashing must be on the Istio DestinationRule. Removes the unused Envoy Gateway BackendTrafficPolicy. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
35 lines
879 B
YAML
35 lines
879 B
YAML
apiVersion: networking.istio.io/v1beta1
|
|
kind: VirtualService
|
|
metadata:
|
|
name: guacamole
|
|
namespace: guacamole
|
|
spec:
|
|
hosts:
|
|
- guacamole.kube.huskypup.net
|
|
gateways:
|
|
- istio-system/edge
|
|
http:
|
|
- route:
|
|
- destination:
|
|
host: guacamole.guacamole.svc.cluster.local
|
|
port:
|
|
number: 8080
|
|
|
|
---
|
|
# Cookie-based session persistence so OIDC nonce validation works across 2 replicas.
|
|
# Without this, the OIDC callback can hit a different pod than the one that generated
|
|
# the nonce, causing "Rejected OpenID token with invalid/old nonce" errors.
|
|
apiVersion: networking.istio.io/v1
|
|
kind: DestinationRule
|
|
metadata:
|
|
name: guacamole
|
|
namespace: guacamole
|
|
spec:
|
|
host: guacamole.guacamole.svc.cluster.local
|
|
trafficPolicy:
|
|
loadBalancer:
|
|
consistentHash:
|
|
httpCookie:
|
|
name: GUAC_ROUTE
|
|
ttl: 3600s
|