nginx-ingress, oauth and downstream services

[Christopher Schmidt]

Hi,

I just saw, that nginx-ingress supports OAUTH. See https://kubernetes.github.io/ingress-nginx/examples/auth/oauth-external-auth/README/

What is the best solution to hand over Tokens or Usernames to the downstream services (defined by the Ingress resource)?

best Christopher

[iain....@gmail.com]

Add this annotation to the downstream services ingress:

nginx.ingress.kubernetes.io/auth-response-headers: x-auth-request-email, x-auth-request-user

[Christopher Schmidt]

Thanks Iain,

adding the annotations was one part of the solution.

I basically followed this example: https://github.com/kubernetes/ingress-nginx/tree/master/docs/examples/auth/oauth-external-auth

What I had to add to the oauth2_proxy was a --set-xauthrequest option.

Thanks for help