mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-20 23:16:49 +00:00
Scooby HuskyandClaude Opus 4.6
fb0ed0071f
Dashboard runs with ssl: false behind TLS-terminating proxy, so SAML library sees http:// URLs and rejects responses expecting https://. Explicitly set X-Forwarded-Proto: https on both Istio VirtualService and Envoy Gateway HTTPRoute so the SAML ACS URL matches. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
31 lines
696 B
YAML
31 lines
696 B
YAML
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: ceph-dashboard
|
|
namespace: rook-ceph
|
|
spec:
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: edge
|
|
namespace: gateway
|
|
sectionName: https
|
|
hostnames:
|
|
- ceph.kube.huskypup.net
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
filters:
|
|
- type: RequestHeaderModifier
|
|
requestHeaderModifier:
|
|
set:
|
|
- name: X-Forwarded-Proto
|
|
value: https
|
|
backendRefs:
|
|
- group: gateway.envoyproxy.io
|
|
kind: Backend
|
|
name: ceph-dashboard
|
|
weight: 1
|