-
Notifications
You must be signed in to change notification settings - Fork 153
server,ui: infinite HTTP redirect when accessing UI for secure cluster behind nginx-ingress in k8s #228
Description
Describe the problem
I am getting too many redirects when trying to access secure cockroachdb cluster behind ingress-nginx using helm chart.
Please describe the issue you observed, and any steps we can take to reproduce it:
It is happening because tls.enabled == secure cluster with tls termination.
Same thing i got with argo cd and solved using --insecure flag (Insecure - just about tls termination)
So i have to use insecure cluster behind ingress (losing auth screen, users with passwords etc) or secure cluster without ingress inside k8s (And i have to manage certificates, use not 80 and 443 ports, it's painful)
To Reproduce
- Setup basic k8s cluster
- Setup nginx-ingress, cert-manager
- Setup secure cockroachdb cluster
- Create k8s Ingress for cockroachdb service
- Try to access admin panel
Expected behavior
I can disable tls termination in web ui, but don't lose security cluster benefits
Additional data / screenshots
- I am using helm charts:
Environment:
- CockroachDB version 20.1
- Server OS: Debian 10
Jira issue: CRDB-4219