search

istio-ecosystem / authservice

Move OIDC token acquisition out of your app code and into the Istio mesh
Apache License 2.0
217 stars 63 forks source link

Test using multiple authservices to secure multiple apps at the same time #18

Closed cfryanr closed 5 years ago

cfryanr commented 5 years ago

The goal of testing this is to find if it works to have multiple apps which each have their own sidecar and each have their own authservice at the same time. We would especially expect to discover if the authservice provides enough configuration options to make it possible.

e.g. I would guess that each instance of the authservice would need to have unique cookie names if the apps are deployed within the same domain. (Is this a use case that we want to support?)

e.g. I would also guess that each instance of authservice should also have its own cryptor_secret.

cfryanr commented 5 years ago

We tried running two apps behind the same gateway, each with their own authservice. Seems to work.