2018-04-27 00:09:55 +00:00
<!DOCTYPE html>
< html lang = "en" class = "no-js" >
< head >
< meta charset = "utf-8" >
< meta name = "viewport" content = "width=device-width,initial-scale=1" >
< meta http-equiv = "x-ua-compatible" content = "ie=edge" >
< meta name = "lang:clipboard.copy" content = "Copy to clipboard" >
< meta name = "lang:clipboard.copied" content = "Copied to clipboard" >
< meta name = "lang:search.language" content = "en" >
< meta name = "lang:search.pipeline.stopwords" content = "True" >
< meta name = "lang:search.pipeline.trimmer" content = "True" >
< meta name = "lang:search.result.none" content = "No matching documents" >
< meta name = "lang:search.result.one" content = "1 matching document" >
< meta name = "lang:search.result.other" content = "# matching documents" >
< meta name = "lang:search.tokenizer" content = "[\s\-]+" >
2018-09-13 23:54:10 +00:00
< link rel = "shortcut icon" href = "../../../assets/images/favicon.png" >
2018-12-04 15:07:57 +00:00
< meta name = "generator" content = "mkdocs-1.0.4, mkdocs-material-3.1.0" >
2018-04-27 00:09:55 +00:00
2018-08-30 19:50:29 +00:00
< title > External Basic Authentication - NGINX Ingress Controller< / title >
2018-04-27 00:09:55 +00:00
2018-12-04 15:07:57 +00:00
< link rel = "stylesheet" href = "../../../assets/stylesheets/application.11e41852.css" >
2018-04-27 00:09:55 +00:00
2018-09-13 23:54:10 +00:00
< link rel = "stylesheet" href = "../../../assets/stylesheets/application-palette.22915126.css" >
2018-04-27 00:09:55 +00:00
2018-07-13 23:53:25 +00:00
< meta name = "theme-color" content = "#009688" >
2018-04-27 00:09:55 +00:00
2018-12-04 15:07:57 +00:00
< script src = "../../../assets/javascripts/modernizr.20ef595d.js" > < / script >
2018-04-27 00:09:55 +00:00
2018-09-13 23:54:10 +00:00
< link href = "https://fonts.gstatic.com" rel = "preconnect" crossorigin >
2018-04-27 00:09:55 +00:00
< link rel = "stylesheet" href = "https://fonts.googleapis.com/css?family=Roboto:300,400,400i,700|Roboto+Mono" >
< style > body , input { font-family : "Roboto" , "Helvetica Neue" , Helvetica , Arial , sans-serif } code , kbd , pre { font-family : "Roboto Mono" , "Courier New" , Courier , monospace } < / style >
2018-09-13 23:54:10 +00:00
< link rel = "stylesheet" href = "../../../assets/fonts/material-icons.css" >
2018-04-27 00:09:55 +00:00
2018-12-04 15:07:57 +00:00
2018-09-13 23:54:10 +00:00
< link rel = "stylesheet" href = "../../../extra.css" >
2018-04-27 12:02:43 +00:00
2018-04-27 00:09:55 +00:00
< / head >
< body dir = "ltr" data-md-color-primary = "teal" data-md-color-accent = "green" >
< svg class = "md-svg" >
< defs >
< svg xmlns = "http://www.w3.org/2000/svg" width = "416" height = "448"
2018-07-13 23:53:25 +00:00
viewBox="0 0 416 448" id="__github">
2018-04-27 00:09:55 +00:00
< path fill = "currentColor" d = "M160 304q0 10-3 . 125 20 . 5t-10 . 75 19-18 . 125
8.5-18.125-8.5-10.75-19-3.125-20.5 3.125-20.5 10.75-19 18.125-8.5
18.125 8.5 10.75 19 3.125 20.5zM320 304q0 10-3.125 20.5t-10.75
19-18.125 8.5-18.125-8.5-10.75-19-3.125-20.5 3.125-20.5 10.75-19
18.125-8.5 18.125 8.5 10.75 19 3.125 20.5zM360
304q0-30-17.25-51t-46.75-21q-10.25 0-48.75 5.25-17.75 2.75-39.25
2.75t-39.25-2.75q-38-5.25-48.75-5.25-29.5 0-46.75 21t-17.25 51q0 22 8
38.375t20.25 25.75 30.5 15 35 7.375 37.25 1.75h42q20.5 0
37.25-1.75t35-7.375 30.5-15 20.25-25.75 8-38.375zM416 260q0 51.75-15.25
82.75-9.5 19.25-26.375 33.25t-35.25 21.5-42.5 11.875-42.875 5.5-41.75
1.125q-19.5 0-35.5-0.75t-36.875-3.125-38.125-7.5-34.25-12.875-30.25-20.25-21.5-28.75q-15.5-30.75-15.5-82.75
0-59.25 34-99-6.75-20.5-6.75-42.5 0-29 12.75-54.5 27 0 47.5 9.875t47.25
30.875q36.75-8.75 77.25-8.75 37 0 70 8 26.25-20.5
46.75-30.25t47.25-9.75q12.75 25.5 12.75 54.5 0 21.75-6.75 42 34 40 34
99.5z" />
< / svg >
< / defs >
< / svg >
2018-07-13 23:53:25 +00:00
< input class = "md-toggle" data-md-toggle = "drawer" type = "checkbox" id = "__drawer" autocomplete = "off" >
< input class = "md-toggle" data-md-toggle = "search" type = "checkbox" id = "__search" autocomplete = "off" >
< label class = "md-overlay" data-md-component = "overlay" for = "__drawer" > < / label >
2018-04-27 00:09:55 +00:00
2018-10-27 20:58:54 +00:00
< a href = "#external-basic-authentication" tabindex = "1" class = "md-skip" >
2018-04-27 00:09:55 +00:00
Skip to content
< / a >
< header class = "md-header" data-md-component = "header" >
< nav class = "md-header-nav md-grid" >
< div class = "md-flex" >
< div class = "md-flex__cell md-flex__cell--shrink" >
2018-09-13 23:54:10 +00:00
< a href = "../../.." title = "NGINX Ingress Controller" class = "md-header-nav__button md-logo" >
2018-04-27 00:09:55 +00:00
< i class = "md-icon" > public< / i >
< / a >
< / div >
< div class = "md-flex__cell md-flex__cell--shrink" >
2018-07-13 23:53:25 +00:00
< label class = "md-icon md-icon--menu md-header-nav__button" for = "__drawer" > < / label >
2018-04-27 00:09:55 +00:00
< / div >
< div class = "md-flex__cell md-flex__cell--stretch" >
< div class = "md-flex__ellipsis md-header-nav__title" data-md-component = "title" >
< span class = "md-header-nav__topic" >
NGINX Ingress Controller
< / span >
< span class = "md-header-nav__topic" >
2018-08-30 19:50:29 +00:00
External Basic Authentication
2018-04-27 00:09:55 +00:00
< / span >
< / div >
< / div >
< div class = "md-flex__cell md-flex__cell--shrink" >
2018-07-13 23:53:25 +00:00
< label class = "md-icon md-icon--search md-header-nav__button" for = "__search" > < / label >
2018-04-27 00:09:55 +00:00
< div class = "md-search" data-md-component = "search" role = "dialog" >
2018-07-13 23:53:25 +00:00
< label class = "md-search__overlay" for = "__search" > < / label >
2018-04-27 00:09:55 +00:00
< div class = "md-search__inner" role = "search" >
< form class = "md-search__form" name = "search" >
< input type = "text" class = "md-search__input" name = "query" placeholder = "Search" autocapitalize = "off" autocorrect = "off" autocomplete = "off" spellcheck = "false" data-md-component = "query" data-md-state = "active" >
2018-07-13 23:53:25 +00:00
< label class = "md-icon md-search__icon" for = "__search" > < / label >
2018-04-27 00:09:55 +00:00
< button type = "reset" class = "md-icon md-search__icon" data-md-component = "reset" tabindex = "-1" >

< / button >
< / form >
< div class = "md-search__output" >
< div class = "md-search__scrollwrap" data-md-scrollfix >
< div class = "md-search-result" data-md-component = "result" >
< div class = "md-search-result__meta" >
Type to start searching
< / div >
< ol class = "md-search-result__list" > < / ol >
< / div >
< / div >
< / div >
< / div >
< / div >
< / div >
< div class = "md-flex__cell md-flex__cell--shrink" >
< div class = "md-header-nav__source" >
< a href = "https://github.com/kubernetes/ingress-nginx/" title = "Go to repository" class = "md-source" data-md-source = "github" >
< div class = "md-source__icon" >
< svg viewBox = "0 0 24 24" width = "24" height = "24" >
2018-07-13 23:53:25 +00:00
< use xlink:href = "#__github" width = "24" height = "24" > < / use >
2018-04-27 00:09:55 +00:00
< / svg >
< / div >
< div class = "md-source__repository" >
kubernetes/ingress-nginx
< / div >
< / a >
< / div >
< / div >
< / div >
< / nav >
< / header >
< div class = "md-container" >
< nav class = "md-tabs md-tabs--active" data-md-component = "tabs" >
< div class = "md-tabs__inner md-grid" >
< ul class = "md-tabs__list" >
2018-09-13 23:54:10 +00:00
< li class = "md-tabs__item" >
< a href = "../../.." title = "Welcome" class = "md-tabs__link" >
Welcome
< / a >
< / li >
2018-04-27 00:09:55 +00:00
< li class = "md-tabs__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../deploy/" title = "Deployment" class = "md-tabs__link" >
2018-04-27 00:09:55 +00:00
Deployment
< / a >
< / li >
< li class = "md-tabs__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/nginx-configuration/" title = "User guide" class = "md-tabs__link" >
2018-04-27 00:09:55 +00:00
User guide
< / a >
< / li >
< li class = "md-tabs__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../" title = "Examples" class = "md-tabs__link md-tabs__link--active" >
2018-04-27 00:09:55 +00:00
Examples
< / a >
< / li >
< / ul >
< / div >
< / nav >
< main class = "md-main" >
< div class = "md-main__inner md-grid" data-md-component = "container" >
< div class = "md-sidebar md-sidebar--primary" data-md-component = "navigation" >
< div class = "md-sidebar__scrollwrap" >
< div class = "md-sidebar__inner" >
< nav class = "md-nav md-nav--primary" data-md-level = "0" >
2018-07-13 23:53:25 +00:00
< label class = "md-nav__title md-nav__title--site" for = "__drawer" >
2018-09-13 23:54:10 +00:00
< a href = "../../.." title = "NGINX Ingress Controller" class = "md-nav__button md-logo" >
2018-04-27 00:09:55 +00:00
< i class = "md-icon" > public< / i >
2018-08-04 22:29:33 +00:00
< / a >
2018-04-27 00:09:55 +00:00
NGINX Ingress Controller
< / label >
< div class = "md-nav__source" >
< a href = "https://github.com/kubernetes/ingress-nginx/" title = "Go to repository" class = "md-source" data-md-source = "github" >
< div class = "md-source__icon" >
< svg viewBox = "0 0 24 24" width = "24" height = "24" >
2018-07-13 23:53:25 +00:00
< use xlink:href = "#__github" width = "24" height = "24" > < / use >
2018-04-27 00:09:55 +00:00
< / svg >
< / div >
< div class = "md-source__repository" >
kubernetes/ingress-nginx
< / div >
< / a >
< / div >
< ul class = "md-nav__list" data-md-scrollfix >
2018-09-13 23:54:10 +00:00
< li class = "md-nav__item md-nav__item--nested" >
< input class = "md-toggle md-nav__toggle" data-md-toggle = "nav-1" type = "checkbox" id = "nav-1" >
< label class = "md-nav__link" for = "nav-1" >
Welcome
< / label >
< nav class = "md-nav" data-md-component = "collapsible" data-md-level = "1" >
< label class = "md-nav__title" for = "nav-1" >
Welcome
< / label >
< ul class = "md-nav__list" data-md-scrollfix >
2018-04-27 00:09:55 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../.." title = "Welcome" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Welcome
< / a >
< / li >
2018-09-13 23:54:10 +00:00
< li class = "md-nav__item" >
< a href = "../../../how-it-works/" title = "How it works" class = "md-nav__link" >
How it works
< / a >
< / li >
< li class = "md-nav__item" >
< a href = "../../../troubleshooting/" title = "Troubleshooting" class = "md-nav__link" >
Troubleshooting
< / a >
< / li >
< li class = "md-nav__item" >
< a href = "../../../development/" title = "Development" class = "md-nav__link" >
Development
< / a >
< / li >
< / ul >
< / nav >
< / li >
2018-04-27 00:09:55 +00:00
< li class = "md-nav__item md-nav__item--nested" >
< input class = "md-toggle md-nav__toggle" data-md-toggle = "nav-2" type = "checkbox" id = "nav-2" >
< label class = "md-nav__link" for = "nav-2" >
Deployment
< / label >
< nav class = "md-nav" data-md-component = "collapsible" data-md-level = "1" >
< label class = "md-nav__title" for = "nav-2" >
Deployment
< / label >
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../deploy/" title = "Installation Guide" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Installation Guide
< / a >
< / li >
2018-09-04 23:47:40 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../deploy/baremetal/" title = "Bare-metal considerations" class = "md-nav__link" >
2018-09-04 23:47:40 +00:00
Bare-metal considerations
< / a >
< / li >
2018-04-27 00:09:55 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../deploy/rbac/" title = "Role Based Access Control (RBAC)" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Role Based Access Control (RBAC)
< / a >
< / li >
2018-05-03 14:08:21 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../deploy/upgrade/" title = "Upgrade" class = "md-nav__link" >
Upgrade
2018-05-03 14:08:21 +00:00
< / a >
< / li >
2018-04-27 00:09:55 +00:00
< / ul >
< / nav >
< / li >
< li class = "md-nav__item md-nav__item--nested" >
< input class = "md-toggle md-nav__toggle" data-md-toggle = "nav-3" type = "checkbox" id = "nav-3" >
< label class = "md-nav__link" for = "nav-3" >
User guide
< / label >
< nav class = "md-nav" data-md-component = "collapsible" data-md-level = "1" >
< label class = "md-nav__title" for = "nav-3" >
User guide
< / label >
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item md-nav__item--nested" >
< input class = "md-toggle md-nav__toggle" data-md-toggle = "nav-3-1" type = "checkbox" id = "nav-3-1" >
< label class = "md-nav__link" for = "nav-3-1" >
NGINX Configuration
< / label >
< nav class = "md-nav" data-md-component = "collapsible" data-md-level = "2" >
< label class = "md-nav__title" for = "nav-3-1" >
NGINX Configuration
< / label >
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/nginx-configuration/" title = "Introduction" class = "md-nav__link" >
Introduction
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/nginx-configuration/annotations/" title = "Annotations" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Annotations
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/nginx-configuration/configmap/" title = "ConfigMap" class = "md-nav__link" >
ConfigMap
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/nginx-configuration/custom-template/" title = "Custom NGINX template" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Custom NGINX template
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/nginx-configuration/log-format/" title = "Log format" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Log format
< / a >
< / li >
< / ul >
< / nav >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/cli-arguments/" title = "Command line arguments" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Command line arguments
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/custom-errors/" title = "Custom errors" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Custom errors
< / a >
< / li >
2018-05-03 14:08:21 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/default-backend/" title = "Default backend" class = "md-nav__link" >
2018-05-03 14:08:21 +00:00
Default backend
< / a >
< / li >
2018-11-22 02:35:18 +00:00
< li class = "md-nav__item" >
< a href = "../../../user-guide/exposing-tcp-udp-services/" title = "Exposing TCP and UDP services" class = "md-nav__link" >
Exposing TCP and UDP services
< / a >
< / li >
2018-04-27 00:09:55 +00:00
< li class = "md-nav__item" >
2018-10-12 01:21:45 +00:00
< a href = "../../../user-guide/ingress-path-matching/" title = "Regular expressions in paths" class = "md-nav__link" >
Regular expressions in paths
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/external-articles/" title = "External Articles" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
External Articles
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/miscellaneous/" title = "Miscellaneous" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Miscellaneous
< / a >
< / li >
2018-08-22 19:35:46 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/monitoring/" title = "Prometheus and Grafana installation" class = "md-nav__link" >
2018-08-22 19:35:46 +00:00
Prometheus and Grafana installation
< / a >
< / li >
2018-04-27 00:09:55 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/multiple-ingress/" title = "Multiple Ingress controllers" class = "md-nav__link" >
2018-05-03 14:08:21 +00:00
Multiple Ingress controllers
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/tls/" title = "TLS/HTTPS" class = "md-nav__link" >
2018-05-03 14:08:21 +00:00
TLS/HTTPS
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item md-nav__item--nested" >
2018-11-22 02:35:18 +00:00
< input class = "md-toggle md-nav__toggle" data-md-toggle = "nav-3-12" type = "checkbox" id = "nav-3-12" >
2018-04-27 00:09:55 +00:00
2018-11-22 02:35:18 +00:00
< label class = "md-nav__link" for = "nav-3-12" >
2018-04-27 00:09:55 +00:00
Third party addons
< / label >
< nav class = "md-nav" data-md-component = "collapsible" data-md-level = "2" >
2018-11-22 02:35:18 +00:00
< label class = "md-nav__title" for = "nav-3-12" >
2018-04-27 00:09:55 +00:00
Third party addons
< / label >
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/third-party-addons/modsecurity/" title = "ModSecurity Web Application Firewall" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
ModSecurity Web Application Firewall
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../../user-guide/third-party-addons/opentracing/" title = "OpenTracing" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
OpenTracing
< / a >
< / li >
< / ul >
< / nav >
< / li >
< / ul >
< / nav >
< / li >
< li class = "md-nav__item md-nav__item--active md-nav__item--nested" >
< input class = "md-toggle md-nav__toggle" data-md-toggle = "nav-4" type = "checkbox" id = "nav-4" checked >
< label class = "md-nav__link" for = "nav-4" >
Examples
< / label >
< nav class = "md-nav" data-md-component = "collapsible" data-md-level = "1" >
< label class = "md-nav__title" for = "nav-4" >
Examples
< / label >
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../" title = "Introduction" class = "md-nav__link" >
Introduction
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../PREREQUISITES/" title = "Prerequisites" class = "md-nav__link" >
2018-05-03 14:08:21 +00:00
Prerequisites
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../affinity/cookie/" title = "Sticky Sessions" class = "md-nav__link" >
Sticky Sessions
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item md-nav__item--active md-nav__item--nested" >
< input class = "md-toggle md-nav__toggle" data-md-toggle = "nav-4-4" type = "checkbox" id = "nav-4-4" checked >
< label class = "md-nav__link" for = "nav-4-4" >
Auth
< / label >
< nav class = "md-nav" data-md-component = "collapsible" data-md-level = "2" >
< label class = "md-nav__title" for = "nav-4-4" >
Auth
< / label >
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../basic/" title = "Basic Authentication" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Basic Authentication
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../client-certs/" title = "Client Certificate Authentication" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Client Certificate Authentication
< / a >
< / li >
< li class = "md-nav__item md-nav__item--active" >
2018-07-13 23:53:25 +00:00
< input class = "md-toggle md-nav__toggle" data-md-toggle = "toc" type = "checkbox" id = "__toc" >
2018-04-27 00:09:55 +00:00
2018-07-13 23:53:25 +00:00
< label class = "md-nav__link md-nav__link--active" for = "__toc" >
2018-08-30 19:50:29 +00:00
External Basic Authentication
2018-04-27 00:09:55 +00:00
< / label >
2018-08-30 19:50:29 +00:00
< a href = "./" title = "External Basic Authentication" class = "md-nav__link md-nav__link--active" >
External Basic Authentication
2018-04-27 00:09:55 +00:00
< / a >
< nav class = "md-nav md-nav--secondary" >
2018-07-13 23:53:25 +00:00
< label class = "md-nav__title" for = "__toc" > Table of contents< / label >
2018-04-27 00:09:55 +00:00
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item" >
< a href = "#example-1" title = "Example 1:" class = "md-nav__link" >
Example 1:
< / a >
< / li >
< / ul >
< / nav >
< / li >
2018-05-03 14:08:21 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../oauth-external-auth/" title = "External OAUTH Authentication" class = "md-nav__link" >
2018-08-30 19:50:29 +00:00
External OAUTH Authentication
2018-05-03 14:08:21 +00:00
< / a >
< / li >
2018-04-27 00:09:55 +00:00
< / ul >
< / nav >
< / li >
< li class = "md-nav__item md-nav__item--nested" >
< input class = "md-toggle md-nav__toggle" data-md-toggle = "nav-4-5" type = "checkbox" id = "nav-4-5" >
< label class = "md-nav__link" for = "nav-4-5" >
Customization
< / label >
< nav class = "md-nav" data-md-component = "collapsible" data-md-level = "2" >
< label class = "md-nav__title" for = "nav-4-5" >
Customization
< / label >
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../customization/configuration-snippets/" title = "Configuration Snippets" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Configuration Snippets
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../customization/custom-configuration/" title = "Custom Configuration" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Custom Configuration
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../customization/custom-errors/" title = "Custom Errors" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Custom Errors
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../customization/custom-headers/" title = "Custom Headers" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Custom Headers
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../customization/external-auth-headers/" title = "External authentication" class = "md-nav__link" >
External authentication
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../customization/ssl-dh-param/" title = "Custom DH parameters for perfect forward secrecy" class = "md-nav__link" >
2018-05-03 14:08:21 +00:00
Custom DH parameters for perfect forward secrecy
2018-04-27 00:09:55 +00:00
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../customization/sysctl/" title = "Sysctl tuning" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Sysctl tuning
< / a >
< / li >
< / ul >
< / nav >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../docker-registry/" title = "Docker registry" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Docker registry
< / a >
< / li >
2018-05-12 01:26:30 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../grpc/" title = "gRPC" class = "md-nav__link" >
2018-05-12 01:26:30 +00:00
gRPC
< / a >
< / li >
2018-04-27 00:09:55 +00:00
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../multi-tls/" title = "Multi TLS certificate termination" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Multi TLS certificate termination
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../rewrite/" title = "Rewrite" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Rewrite
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../static-ip/" title = "Static IPs" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
Static IPs
< / a >
< / li >
< li class = "md-nav__item" >
2018-09-13 23:54:10 +00:00
< a href = "../../tls-termination/" title = "TLS termination" class = "md-nav__link" >
2018-04-27 00:09:55 +00:00
TLS termination
< / a >
< / li >
< / ul >
< / nav >
< / li >
< / ul >
< / nav >
< / div >
< / div >
< / div >
< div class = "md-sidebar md-sidebar--secondary" data-md-component = "toc" >
< div class = "md-sidebar__scrollwrap" >
< div class = "md-sidebar__inner" >
< nav class = "md-nav md-nav--secondary" >
2018-07-13 23:53:25 +00:00
< label class = "md-nav__title" for = "__toc" > Table of contents< / label >
2018-04-27 00:09:55 +00:00
< ul class = "md-nav__list" data-md-scrollfix >
< li class = "md-nav__item" >
< a href = "#example-1" title = "Example 1:" class = "md-nav__link" >
Example 1:
< / a >
< / li >
< / ul >
< / nav >
< / div >
< / div >
< / div >
< div class = "md-content" >
< article class = "md-content__inner md-typeset" >
< a href = "https://github.com/kubernetes/ingress-nginx/edit/master/docs/examples/auth/external-auth/README.md" title = "Edit this page" class = "md-icon md-content__icon" >  < / a >
2018-08-30 19:50:29 +00:00
< h1 id = "external-basic-authentication" > External Basic Authentication< a class = "headerlink" href = "#external-basic-authentication" title = "Permanent link" > ¶ < / a > < / h1 >
2018-04-27 00:09:55 +00:00
< h3 id = "example-1" > Example 1:< a class = "headerlink" href = "#example-1" title = "Permanent link" > ¶ < / a > < / h3 >
< p > Use an external service (Basic Auth) located in < code class = "codehilite" > https://httpbin.org< / code > < / p >
2018-10-12 01:21:45 +00:00
< div class = "codehilite" > < pre > < span > < / span > $ kubectl create -f ingress.yaml
2018-04-27 00:09:55 +00:00
ingress < span class = "s2" > " external-auth" < / span > created
$ kubectl get ing external-auth
NAME HOSTS ADDRESS PORTS AGE
external-auth external-auth-01.sample.com < span class = "m" > 172< / span > .17.4.99 < span class = "m" > 80< / span > 13s
$ kubectl get ing external-auth -o yaml
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
nginx.ingress.kubernetes.io/auth-url: https://httpbin.org/basic-auth/user/passwd
creationTimestamp: < span class = "m" > 2016< / span > -10-03T13:50:35Z
generation: < span class = "m" > 1< / span >
name: external-auth
namespace: default
resourceVersion: < span class = "s2" > " 2068378" < / span >
selfLink: /apis/extensions/v1beta1/namespaces/default/ingresses/external-auth
uid: 5c388f1d-8970-11e6-9004-080027d2dc94
spec:
rules:
- host: external-auth-01.sample.com
http:
paths:
- backend:
serviceName: http-svc
servicePort: < span class = "m" > 80< / span >
path: /
status:
loadBalancer:
ingress:
- ip: < span class = "m" > 172< / span > .17.4.99
$
< / pre > < / div >
< p > Test 1: no username/password (expect code 401)< / p >
2018-10-12 01:21:45 +00:00
< div class = "codehilite" > < pre > < span > < / span > < span class = "gp" > $< / span > curl -k http://172.17.4.99 -v -H < span class = "s1" > ' Host: external-auth-01.sample.com' < / span >
2018-04-27 00:09:55 +00:00
< span class = "go" > * Rebuilt URL to: http://172.17.4.99/< / span >
< span class = "go" > * Trying 172.17.4.99...< / span >
< span class = "go" > * Connected to 172.17.4.99 (172.17.4.99) port 80 (#0)< / span >
< span class = "gp" > > < / span > GET / HTTP/1.1
< span class = "gp" > > < / span > Host: external-auth-01.sample.com
< span class = "gp" > > < / span > User-Agent: curl/7.50.1
< span class = "gp" > > < / span > Accept: */*
< span class = "gp" > > < / span >
< span class = "go" > < HTTP/1.1 401 Unauthorized< / span >
< span class = "go" > < Server: nginx/1.11.3< / span >
< span class = "go" > < Date: Mon, 03 Oct 2016 14:52:08 GMT< / span >
< span class = "go" > < Content-Type: text/html< / span >
< span class = "go" > < Content-Length: 195< / span >
< span class = "go" > < Connection: keep-alive< / span >
< span class = "go" > < WWW-Authenticate: Basic realm=" Fake Realm" < / span >
< span class = "go" > < < / span >
< span class = "go" > < html> < / span >
< span class = "go" > < head> < title> 401 Authorization Required< /title> < /head> < / span >
< span class = "go" > < body bgcolor=" white" > < / span >
< span class = "go" > < center> < h1> 401 Authorization Required< /h1> < /center> < / span >
< span class = "go" > < hr> < center> nginx/1.11.3< /center> < / span >
< span class = "go" > < /body> < / span >
< span class = "go" > < /html> < / span >
< span class = "go" > * Connection #0 to host 172.17.4.99 left intact< / span >
< / pre > < / div >
2018-09-04 23:47:40 +00:00
< p > Test 2: valid username/password (expect code 200)
2018-10-12 01:21:45 +00:00
< div class = "codehilite" > < pre > < span > < / span > $ curl -k http://172.17.4.99 -v -H < span class = "s1" > ' Host: external-auth-01.sample.com' < / span > -u < span class = "s1" > ' user:passwd' < / span >
2018-04-27 00:09:55 +00:00
* Rebuilt URL to: http://172.17.4.99/
* Trying < span class = "m" > 172< / span > .17.4.99...
* Connected to < span class = "m" > 172< / span > .17.4.99 < span class = "o" > (< / span > < span class = "m" > 172< / span > .17.4.99< span class = "o" > )< / span > port < span class = "m" > 80< / span > < span class = "o" > (< / span > < span class = "c1" > #0)< / span >
* Server auth using Basic with user < span class = "s1" > ' user' < / span >
> GET / HTTP/1.1
> Host: external-auth-01.sample.com
> Authorization: Basic < span class = "nv" > dXNlcjpwYXNzd2Q< / span > < span class = "o" > =< / span >
> User-Agent: curl/7.50.1
> Accept: */*
>
< HTTP/1.1 < span class = "m" > 200< / span > OK
< Server: nginx/1.11.3
< Date: Mon, < span class = "m" > 03< / span > Oct < span class = "m" > 2016< / span > < span class = "m" > 14< / span > :52:50 GMT
< Content-Type: text/plain
< Transfer-Encoding: chunked
< Connection: keep-alive
<
CLIENT VALUES:
< span class = "nv" > client_address< / span > < span class = "o" > =< / span > < span class = "m" > 10< / span > .2.60.2
< span class = "nv" > command< / span > < span class = "o" > =< / span > GET
real < span class = "nv" > path< / span > < span class = "o" > =< / span > /
< span class = "nv" > query< / span > < span class = "o" > =< / span > nil
< span class = "nv" > request_version< / span > < span class = "o" > =< / span > < span class = "m" > 1< / span > .1
< span class = "nv" > request_uri< / span > < span class = "o" > =< / span > http://external-auth-01.sample.com:8080/
SERVER VALUES:
< span class = "nv" > server_version< / span > < span class = "o" > =< / span > nginx: < span class = "m" > 1< / span > .9.11 - lua: < span class = "m" > 10001< / span >
HEADERS RECEIVED:
< span class = "nv" > accept< / span > < span class = "o" > =< / span > */*
< span class = "nv" > authorization< / span > < span class = "o" > =< / span > Basic < span class = "nv" > dXNlcjpwYXNzd2Q< / span > < span class = "o" > =< / span >
< span class = "nv" > connection< / span > < span class = "o" > =< / span > close
< span class = "nv" > host< / span > < span class = "o" > =< / span > external-auth-01.sample.com
user-agent< span class = "o" > =< / span > curl/7.50.1
x-forwarded-for< span class = "o" > =< / span > < span class = "m" > 10< / span > .2.60.1
x-forwarded-host< span class = "o" > =< / span > external-auth-01.sample.com
x-forwarded-port< span class = "o" > =< / span > < span class = "m" > 80< / span >
x-forwarded-proto< span class = "o" > =< / span > http
x-real-ip< span class = "o" > =< / span > < span class = "m" > 10< / span > .2.60.1
BODY:
* Connection < span class = "c1" > #0 to host 172.17.4.99 left intact< / span >
-no body in request-
2018-10-12 01:21:45 +00:00
< / pre > < / div > < / p >
2018-09-04 23:47:40 +00:00
< p > Test 3: invalid username/password (expect code 401)
2018-10-12 01:21:45 +00:00
< div class = "codehilite" > < pre > < span > < / span > curl -k http://172.17.4.99 -v -H ' Host: external-auth-01.sample.com' -u ' user:user'
2018-04-27 00:09:55 +00:00
* Rebuilt URL to: http://172.17.4.99/
* Trying 172.17.4.99...
* Connected to 172.17.4.99 (172.17.4.99) port 80 (#0)
* Server auth using Basic with user ' user'
> GET / HTTP/1.1
> Host: external-auth-01.sample.com
> Authorization: Basic dXNlcjp1c2Vy
> User-Agent: curl/7.50.1
> Accept: */*
>
< span class = "nt" > < HTTP< / span > < span class = "err" > /1.1< / span > < span class = "err" > 401< / span > < span class = "err" > Unauthorized< / span >
< span class = "err" > < < / span > < span class = "err" > Server:< / span > < span class = "err" > nginx/1.11.3< / span >
< span class = "err" > < < / span > < span class = "err" > Date:< / span > < span class = "err" > Mon,< / span > < span class = "err" > 03< / span > < span class = "err" > Oct< / span > < span class = "err" > 2016< / span > < span class = "err" > 14:53:04< / span > < span class = "err" > GMT< / span >
< span class = "err" > < < / span > < span class = "err" > Content-Type:< / span > < span class = "err" > text/html< / span >
< span class = "err" > < < / span > < span class = "err" > Content-Length:< / span > < span class = "err" > 195< / span >
< span class = "err" > < < / span > < span class = "err" > Connection:< / span > < span class = "err" > keep-alive< / span >
< span class = "err" > *< / span > < span class = "err" > Authentication< / span > < span class = "err" > problem.< / span > < span class = "err" > Ignoring< / span > < span class = "err" > this.< / span >
< span class = "err" > < < / span > < span class = "err" > WWW-Authenticate:< / span > < span class = "err" > Basic< / span > < span class = "na" > realm=< / span > < span class = "s" > " Fake Realm" < / span >
< span class = "err" > < < / span >
< span class = "err" > < html< / span > < span class = "nt" > > < / span >
< span class = "nt" > < head> < title> < / span > 401 Authorization Required< span class = "nt" > < /title> < /head> < / span >
< span class = "nt" > < body< / span > < span class = "na" > bgcolor=< / span > < span class = "s" > " white" < / span > < span class = "nt" > > < / span >
< span class = "nt" > < center> < h1> < / span > 401 Authorization Required< span class = "nt" > < /h1> < /center> < / span >
< span class = "nt" > < hr> < center> < / span > nginx/1.11.3< span class = "nt" > < /center> < / span >
< span class = "nt" > < /body> < / span >
< span class = "nt" > < /html> < / span >
* Connection #0 to host 172.17.4.99 left intact
2018-10-12 01:21:45 +00:00
< / pre > < / div > < / p >
2018-04-27 00:09:55 +00:00
< / article >
< / div >
< / div >
< / main >
< footer class = "md-footer" >
< div class = "md-footer-nav" >
< nav class = "md-footer-nav__inner md-grid" >
2018-09-13 23:54:10 +00:00
< a href = "../client-certs/" title = "Client Certificate Authentication" class = "md-flex md-footer-nav__link md-footer-nav__link--prev" rel = "prev" >
2018-04-27 00:09:55 +00:00
< div class = "md-flex__cell md-flex__cell--shrink" >
< i class = "md-icon md-icon--arrow-back md-footer-nav__button" > < / i >
< / div >
< div class = "md-flex__cell md-flex__cell--stretch md-footer-nav__title" >
< span class = "md-flex__ellipsis" >
< span class = "md-footer-nav__direction" >
Previous
< / span >
Client Certificate Authentication
< / span >
< / div >
< / a >
2018-09-13 23:54:10 +00:00
< a href = "../oauth-external-auth/" title = "External OAUTH Authentication" class = "md-flex md-footer-nav__link md-footer-nav__link--next" rel = "next" >
2018-04-27 00:09:55 +00:00
< div class = "md-flex__cell md-flex__cell--stretch md-footer-nav__title" >
< span class = "md-flex__ellipsis" >
< span class = "md-footer-nav__direction" >
Next
< / span >
2018-08-30 19:50:29 +00:00
External OAUTH Authentication
2018-04-27 00:09:55 +00:00
< / span >
< / div >
< div class = "md-flex__cell md-flex__cell--shrink" >
< i class = "md-icon md-icon--arrow-forward md-footer-nav__button" > < / i >
< / div >
< / a >
< / nav >
< / div >
< div class = "md-footer-meta md-typeset" >
< div class = "md-footer-meta__inner md-grid" >
< div class = "md-footer-copyright" >
powered by
2018-07-13 23:53:25 +00:00
< a href = "https://www.mkdocs.org" > MkDocs< / a >
2018-04-27 00:09:55 +00:00
and
< a href = "https://squidfunk.github.io/mkdocs-material/" >
Material for MkDocs< / a >
< / div >
< / div >
< / div >
< / footer >
< / div >
2018-12-04 15:07:57 +00:00
< script src = "../../../assets/javascripts/application.9e1f3b71.js" > < / script >
2018-04-27 00:09:55 +00:00
2018-09-13 23:54:10 +00:00
< script > app . initialize ( { version : "1.0.4" , url : { base : "../../.." } } ) < / script >
2018-04-27 00:09:55 +00:00
2018-12-04 15:07:57 +00:00
< script > ! function ( e , a , t , n , o , c , i ) { e . GoogleAnalyticsObject = o , e . ga = e . ga || function ( ) { ( e . ga . q = e . ga . q || [ ] ) . push ( arguments ) } , e . ga . l = 1 * new Date , c = a . createElement ( t ) , i = a . getElementsByTagName ( t ) [ 0 ] , c . async = 1 , c . src = "https://www.google-analytics.com/analytics.js" , i . parentNode . insertBefore ( c , i ) } ( window , document , "script" , 0 , "ga" ) , ga ( "create" , "UA-118407822-1" , "kubernetes.github.io" ) , ga ( "set" , "anonymizeIp" , ! 0 ) , ga ( "send" , "pageview" ) ; var links = document . getElementsByTagName ( "a" ) ; if ( Array . prototype . map . call ( links , function ( a ) { a . host != document . location . host && a . addEventListener ( "click" , function ( ) { var e = a . getAttribute ( "data-md-action" ) || "follow" ; ga ( "send" , "event" , "outbound" , e , a . href ) } ) } ) , document . forms . search ) { var query = document . forms . search . query ; query . addEventListener ( "blur" , function ( ) { if ( this . value ) { var e = document . location . pathname ; ga ( "send" , "pageview" , e + "?q=" + this . value ) } } ) } < / script >
2018-04-30 16:37:53 +00:00
2018-04-27 00:09:55 +00:00
< / body >
< / html >
