ingress-nginx: Client Certificates don't work anymore, starting with 0.21.0
Is this a request for help? (If yes, you should use our troubleshooting guide and community support channels, see https://kubernetes.io/docs/tasks/debug-application-cluster/troubleshooting/.):
What keywords did you search in NGINX Ingress controller issues before filing this one? (If you have found any duplicates, you should instead reply there.): client certificate
Is this a BUG REPORT or FEATURE REQUEST? (choose one):
NGINX Ingress controller version: 0.21.0+
Kubernetes version (use kubectl version):
Server Version: version.Info{Major:“1”, Minor:“10+”, GitVersion:“v1.10.11-gke.1”, GitCommit:“5c4fddf874319c9825581cc9ab1d0f0cf51e1dc9”, GitTreeState:“clean”, BuildDate:“2018-11-30T16:18:58Z”, GoVersion:“go1.9.3b4”, Compiler:“gc”, Platform:“linux/amd64”}
GKE
Environment:
- Cloud provider or hardware configuration: GKE
- OS (e.g. from /etc/os-release):
- Kernel (e.g.
uname -a): - Install tools:
- Others:
What happened: Client Cert auth doesn’t work if i upgrade beyond 0.20.0. It works with 0.20.0, stops working with 0.21.0 and above, tried the dev tag and it doesnt work as well
What you expected to happen:
How to reproduce it (as minimally and precisely as possible): i’m using nothing fancy. my annotations:
nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "false"
nginx.ingress.kubernetes.io/auth-tls-secret: xxx/xxxx-ca
nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
nginx.ingress.kubernetes.io/auth-tls-verify-depth: "1"
Anything else we need to know:
if i just revert the version to 0.20.0 it’s fine.
About this issue
- Original URL
- State: closed
- Created 5 years ago
- Reactions: 4
- Comments: 25 (12 by maintainers)
It’s been working for me ever since. Any chance we can get steps to reproduce your issue?