Uploaded image for project: 'National Data Service'
  1. National Data Service
  2. NDS-1177

Duplicate ingress rules after toggling authentication from the UI

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Normal
    • Resolution: Fixed
    • None
    • None
    • Backend
    • None
    • NDS Sprint 42, NDS Sprint 43, NDS Sprint 44, NDS Sprint 45, NDS Sprint 46

    Description

      Steps to Reproduce

      1. Install CKAN service (do not launch)
      2. kubectl get ing sxxxxx-ckan-ingress --namespace=user -o yaml
        • Notice that only a single "rule" is defined
      3. In the UI, toggle "HTTP Basic Authentication"
      4. kubectl get ing sxxxxx-ckan-ingress --namespace=user -o yaml

      Expected Results

      • There should still be only a single "rule" defined on the ingress YAML

      Actual Results

      • Now are now multiple rules defined for the same host / service / port combination
      • For example, after toggling multiple times:

        core@my_vm01 ~/nds1141 $ kubectl get ing si8szh-ckan-ingress --namespace=lambert8 -o yaml
        apiVersion: extensions/v1beta1
        kind: Ingress
        metadata:
          annotations:
            ingress.kubernetes.io/auth-realm: Workbench Credentials Required
            ingress.kubernetes.io/auth-secret: basic-auth
            ingress.kubernetes.io/auth-type: basic
            ndslabs.org/updated: 2018-02-02 23:27:33.025683581 +0000 UTC
          creationTimestamp: 2018-02-02T23:20:21Z
          generation: 4
          name: si8szh-ckan-ingress
          namespace: lambert8
          resourceVersion: "1538202"
          selfLink: /apis/extensions/v1beta1/namespaces/lambert8/ingresses/si8szh-ckan-ingress
          uid: a3c7a5d4-086f-11e8-b770-08002767665f
        spec:
          rules:
          - host: si8szh-ckan.local.ndslabs.org
            http:
              paths:
              - backend:
                  serviceName: si8szh-ckan
                  servicePort: 5000
                path: /
          - host: si8szh-ckan.local.ndslabs.org
            http:
              paths:
              - backend:
                  serviceName: si8szh-ckan
                  servicePort: 5000
                path: /
          - host: si8szh-ckan.local.ndslabs.org
            http:
              paths:
              - backend:
                  serviceName: si8szh-ckan
                  servicePort: 5000
                path: /
          - host: si8szh-ckan.local.ndslabs.org
            http:
              paths:
              - backend:
                  serviceName: si8szh-ckan
                  servicePort: 5000
                path: /
          tls:
          - hosts:
            - si8szh-ckan.local.ndslabs.org
            secretName: lambert8-tls-secret
        status:
          loadBalancer:
            ingress:
            - ip: 127.0.0.1
        

      Gliffy Diagrams

        Attachments

          Issue Links

            Activity

              People

                lambert8 Michael Lambert
                lambert8 Michael Lambert
                Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  Tasks