From 3a42715b5d388a0b7b1d7be3c0736febbf305340 Mon Sep 17 00:00:00 2001 From: Piotr Biernat Date: Wed, 14 Jun 2023 00:33:27 +0200 Subject: [PATCH] turn off Traefik forward auth plugin --- consul/discovery.go | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/consul/discovery.go b/consul/discovery.go index 35115c2..3f3c612 100644 --- a/consul/discovery.go +++ b/consul/discovery.go @@ -149,14 +149,14 @@ func (s *Service) getTags() []string { "traefik.http.routers." + s.Name + ".entryPoints=https", "traefik.http.routers." + s.Name + ".tls=true", "traefik.http.routers." + s.Name + ".service=" + s.Name, - "traefik.http.routers." + s.Name + ".middlewares=auth_" + s.Name + ",requestid_" + s.Name + ",stripprefix_" + s.Name, + "traefik.http.routers." + s.Name + ".middlewares=requestid_" + s.Name + ",stripprefix_" + s.Name, "traefik.http.services." + s.Name + ".loadbalancer.server.scheme=http", "traefik.http.services." + s.Name + ".loadbalancer.server.port=" + strconv.Itoa(s.port), "traefik.http.services." + s.Name + ".loadbalancer.passhostheader=false", - "traefik.http.middlewares.auth_" + s.Name + ".forwardauth.address=http://identity-svc/api/v1/traefik", - "traefik.http.middlewares.auth_" + s.Name + ".forwardauth.authRequestHeaders=Cookie", - "traefik.http.middlewares.auth_" + s.Name + ".forwardauth.authResponseHeaders=Set-Cookie, Server", - "traefik.http.middlewares.auth_" + s.Name + ".forwardauth.trustForwardHeader=true", + // "traefik.http.middlewares.auth_" + s.Name + ".forwardauth.address=http://identity-svc/api/v1/traefik", + // "traefik.http.middlewares.auth_" + s.Name + ".forwardauth.authRequestHeaders=Cookie", + // "traefik.http.middlewares.auth_" + s.Name + ".forwardauth.authResponseHeaders=Set-Cookie, Server", + // "traefik.http.middlewares.auth_" + s.Name + ".forwardauth.trustForwardHeader=true", "traefik.http.middlewares.requestid_" + s.Name + ".plugin.requestid.headerName=X-Request-ID", "traefik.http.middlewares.stripprefix_" + s.Name + ".stripprefix.prefixes=" + s.pathPrefix, "traefik.tls.certificates.certfile=/certs/client.cert",