fix: not skipping authz for kube dashboard (2.6) (#1487)

fix: not skipping authz for kube dashboard (#1462) * fix: should not skip authz for any path see TFA Code about this config option: https://github.com/mesosphere/ traefik-forward-auth/blob/master/internal/handlers/server.go#L497-L504 had to break the URL to 2 lines thanks to pre-commit ;) * fix: bring back kiali skip authz (cherry picked from commit 78c47b3) Co-authored-by: Weiyanli Chen(York) <[email protected]>
mesosphere · Aug 15, 2023 · 39bc9ba · 39bc9ba
1 parent f384ec2
commit 39bc9ba
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/services/traefik-forward-auth-mgmt/0.3.9/defaults/cm.yaml b/services/traefik-forward-auth-mgmt/0.3.9/defaults/cm.yaml
@@ -35,8 +35,6 @@ data:
       enableRBAC: true
       enableImpersonation: true
       rbacPassThroughPaths:
-        - "/dkp/kubernetes/"
-        - "/dkp/kubernetes/*"
         - "/dkp/kiali/"
         - "/dkp/kiali/*"
     ingress:

diff --git a/services/traefik-forward-auth/0.3.9/defaults/cm.yaml b/services/traefik-forward-auth/0.3.9/defaults/cm.yaml
@@ -33,7 +33,9 @@ data:
       whitelist: []
       enableRBAC: true
       enableImpersonation: true
-      rbacPassThroughPaths: ["/dkp/kubernetes/", "/dkp/kubernetes/*"]
+      rbacPassThroughPaths:
+        - "/dkp/kiali/"
+        - "/dkp/kiali/*"
       extraConfig: |
         cookie-name =  _forward_auth_kommander
         csrf-cookie-name = _forward_auth_csrf_kommander