Steps to Reproduce

1. Install CKAN service (do not launch)
2. kubectl get ing sxxxxx-ckan-ingress --namespace=user -o yaml
   • Notice that only a single "rule" is defined
3. In the UI, toggle "HTTP Basic Authentication"
4. kubectl get ing sxxxxx-ckan-ingress --namespace=user -o yaml

Expected Results

• There should still be only a single "rule" defined on the ingress YAML

Actual Results

• Now are now multiple rules defined for the same host / service / port combination
• For example, after toggling multiple times:

  core@my_vm01 ~/nds1141 $ kubectl get ing si8szh-ckan-ingress --namespace=lambert8 -o yaml

  apiVersion: extensions/v1beta1

  kind: Ingress

  metadata:

  annotations:

  ingress.kubernetes.io/auth-realm: Workbench Credentials Required

  ingress.kubernetes.io/auth-secret: basic-auth

  ingress.kubernetes.io/auth-type: basic

  ndslabs.org/updated: 2018-02-02 23:27:33.025683581 +0000 UTC

  creationTimestamp: 2018-02-02T23:20:21Z

  generation: 4

  name: si8szh-ckan-ingress

  namespace: lambert8

  resourceVersion: "1538202"

  selfLink: /apis/extensions/v1beta1/namespaces/lambert8/ingresses/si8szh-ckan-ingress

  uid: a3c7a5d4-086f-11e8-b770-08002767665f

  spec:

  rules:

  - host: si8szh-ckan.local.ndslabs.org

  http:

  paths:

  - backend:

  serviceName: si8szh-ckan

  servicePort: 5000

  path: /

  - host: si8szh-ckan.local.ndslabs.org

  http:

  paths:

  - backend:

  serviceName: si8szh-ckan

  servicePort: 5000

  path: /

  - host: si8szh-ckan.local.ndslabs.org

  http:

  paths:

  - backend:

  serviceName: si8szh-ckan

  servicePort: 5000

  path: /

  - host: si8szh-ckan.local.ndslabs.org

  http:

  paths:

  - backend:

  serviceName: si8szh-ckan

  servicePort: 5000

  path: /

  tls:

  - hosts:

  - si8szh-ckan.local.ndslabs.org

  secretName: lambert8-tls-secret

  status:

  loadBalancer:

  ingress:

  - ip: 127.0.0.1