kubernetes / ingress-nginx

Ingress-NGINX Controller for Kubernetes
https://kubernetes.github.io/ingress-nginx/
Apache License 2.0
17.26k stars 8.21k forks source link

Support forwarded headers with external auth #10949

Open arsnyder16 opened 7 months ago

arsnyder16 commented 7 months ago

A way to allow forwarded headers to be passed to external auth configured with auth-url.

Currently when using auth-url despite the values of use-forwarded-headers and compute-full-forwarded-for only x-forwarded-for is sent to the external auth service. x-forward-proto, x-forwarded-scheme etc are stripped. Another set of configurations similar to use-forwarded-headers and compute-full-forwarded-for that apply to just the external auth would be desirable.

Currently a work around is to use auth-proxy-set-headers and hardcode any value, but this has it limitations since it isn't dynamic

k8s-ci-robot commented 7 months ago

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.
github-actions[bot] commented 6 months ago

This is stale, but we won't close it automatically, just bare in mind the maintainers may be busy with other tasks and will reach your issue ASAP. If you have any question or request to prioritize this, please reach #ingress-nginx-dev on Kubernetes Slack.