mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-20 23:16:49 +00:00
Scooby HuskyandClaude Opus 4.6
fb0ed0071f
Dashboard runs with ssl: false behind TLS-terminating proxy, so SAML library sees http:// URLs and rejects responses expecting https://. Explicitly set X-Forwarded-Proto: https on both Istio VirtualService and Envoy Gateway HTTPRoute so the SAML ACS URL matches. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
22 lines
461 B
YAML
22 lines
461 B
YAML
apiVersion: networking.istio.io/v1beta1
|
|
kind: VirtualService
|
|
metadata:
|
|
name: ceph-dashboard
|
|
namespace: rook-ceph
|
|
spec:
|
|
hosts:
|
|
- ceph.kube.huskypup.net
|
|
gateways:
|
|
- istio-system/edge
|
|
http:
|
|
- headers:
|
|
request:
|
|
set:
|
|
x-forwarded-proto: https
|
|
timeout: 3600s
|
|
route:
|
|
- destination:
|
|
host: rook-ceph-mgr-dashboard.rook-ceph.svc.cluster.local
|
|
port:
|
|
number: 7000
|