ingress-nginx: Client Certificates don't work anymore, starting with 0.21.0

Is this a request for help? (If yes, you should use our troubleshooting guide and community support channels, see https://kubernetes.io/docs/tasks/debug-application-cluster/troubleshooting/.):

What keywords did you search in NGINX Ingress controller issues before filing this one? (If you have found any duplicates, you should instead reply there.): client certificate

Is this a BUG REPORT or FEATURE REQUEST? (choose one):

NGINX Ingress controller version: 0.21.0+

Kubernetes version (use kubectl version): Server Version: version.Info{Major:“1”, Minor:“10+”, GitVersion:“v1.10.11-gke.1”, GitCommit:“5c4fddf874319c9825581cc9ab1d0f0cf51e1dc9”, GitTreeState:“clean”, BuildDate:“2018-11-30T16:18:58Z”, GoVersion:“go1.9.3b4”, Compiler:“gc”, Platform:“linux/amd64”} GKE

Environment:

  • Cloud provider or hardware configuration: GKE
  • OS (e.g. from /etc/os-release):
  • Kernel (e.g. uname -a):
  • Install tools:
  • Others:

What happened: Client Cert auth doesn’t work if i upgrade beyond 0.20.0. It works with 0.20.0, stops working with 0.21.0 and above, tried the dev tag and it doesnt work as well

What you expected to happen:

How to reproduce it (as minimally and precisely as possible): i’m using nothing fancy. my annotations:

    nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "false"
    nginx.ingress.kubernetes.io/auth-tls-secret: xxx/xxxx-ca
    nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
    nginx.ingress.kubernetes.io/auth-tls-verify-depth: "1"

Anything else we need to know:

if i just revert the version to 0.20.0 it’s fine.

About this issue

  • Original URL
  • State: closed
  • Created 5 years ago
  • Reactions: 4
  • Comments: 25 (12 by maintainers)

Most upvoted comments

It’s been working for me ever since. Any chance we can get steps to reproduce your issue?