hbagdi
commented
4 years ago Here are the commands I execute and things work fine:
$ kubectl apply -f https://bit.ly/k8s-httpbin
$ echo '
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: demo
annotations:
konghq.com/strip-path: "true"
spec:
rules:
- http:
paths:
- path: /foo
backend:
serviceName: httpbin
servicePort: 80
' | kubectl apply -f -
➜ kic git:(master) http :8000 <<<
HTTP/1.1 404 Not Found
Connection: keep-alive
Content-Length: 48
Content-Type: application/json; charset=utf-8
Date: Wed, 26 Aug 2020 17:25:52 GMT
Server: kong/2.0.4
X-Kong-Response-Latency: 1
{
"message": "no Route matched with those values"
}
➜ kic git:(master) export PROXY_IP=localhost:8000
➜ kic git:(master) curl -i $PROXY_IP/foo/status/200
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Server: gunicorn/19.9.0
Date: Wed, 26 Aug 2020 17:26:10 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
X-Kong-Upstream-Latency: 5
X-Kong-Proxy-Latency: 26
Via: kong/2.0.4
➜ kic git:(master) echo "
apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
name: httpbin-auth
plugin: basic-auth
" | kubectl apply -f -
kongplugin.configuration.konghq.com/httpbin-auth created
➜ kic git:(master) echo '
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: demo
annotations:
konghq.com/strip-path: "true"
konghq.com/plugins: httpbin-auth
spec:
rules:
- http:
paths:
- path: /foo
backend:
serviceName: httpbin
servicePort: 80
' | kubectl apply -f -
ingress.extensions/demo configured
➜ kic git:(master) curl -i $PROXY_IP/foo/status/200
HTTP/1.1 401 Unauthorized
Date: Wed, 26 Aug 2020 17:26:42 GMT
Content-Type: application/json; charset=utf-8
Connection: keep-alive
WWW-Authenticate: Basic realm="kong"
Content-Length: 26
X-Kong-Response-Latency: 0
Server: kong/2.0.4
{"message":"Unauthorized"}% ➜ kic git:(master) echo "apiVersion: configuration.konghq.com/v1
kind: KongConsumer
metadata:
name: harry
username: harry" | kubectl apply -f -
kongconsumer.configuration.konghq.com/harry created
➜ kic git:(master) kubectl create secret generic harry-basicauth \
--from-literal=kongCredType=basic-auth \
--from-literal=username=harry \
--from-literal=password=foo
secret/harry-basicauth created
➜ kic git:(master) echo "apiVersion: configuration.konghq.com/v1
kind: KongConsumer
metadata:
name: harry
username: harry
credentials:
- harry-basicauth" | kubectl apply -f -
kongconsumer.configuration.konghq.com/harry configured
➜ kic git:(master) curl -i -u 'harry:foo' $PROXY_IP/foo/status/200
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Server: gunicorn/19.9.0
Date: Wed, 26 Aug 2020 17:28:36 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
X-Kong-Upstream-Latency: 4
X-Kong-Proxy-Latency: 1
Via: kong/2.0.4 
SiarheiBortnik
morals415
Jorgevillada
rainest
JingJCV
Summary
We use KONG in our kubernetes cluster and deploy it with help of helm. We need to use basic authentication on our prometheus ingress resource. Kong controller deployed in dev2 namespace, prometheus deployed in monitoring namespace.
Kong Ingress controller version kong-docker-kubernetes-ingress-controller.bintray.io/kong-ingress-controller:0.9.1
Kong or Kong Enterprise version kong-docker-kong-enterprise-edition-docker.bintray.io/kong-enterprise-edition:2.1.0.0-beta1-alpine
Kubernetes version
1.15.6 Client Version: version.Info{Major:"1", Minor:"15", GitVersion:"v1.15.11", GitCommit:"d94a81c724ea8e1ccc9002d89b7fe81d58f89ede", GitTreeState:"clean", BuildDate:"2020-03-13T17:40:34Z", GoVersion:"go1.12.17", Compiler:"gc", Platform:"linux/amd64"} Server Version: version.Info{Major:"1", Minor:"15", GitVersion:"v1.15.11", GitCommit:"d94a81c724ea8e1ccc9002d89b7fe81d58f89ede", GitTreeState:"clean", BuildDate:"2020-03-13T17:40:34Z", GoVersion:"go1.12.17", Compiler:"gc", Platform:"linux/amd64"}
Environment
What happened
We have ingress resource:
And resources needed for basic authentication:
Also I tried to use old way without secret and without section "credentials:" in "KongConsumer", using:
but result was the same. I have an error after login, using username "user" and password "pass" - {"message":"Invalid authentication credentials"}
Expected behavior
Login using username "user" and password "pass"