Resolve "403 Forbidden while accessing smartcard ingress"
What does this MR do?
The smartcard ingress is not working as the endpoints are not reachable. This MR fixes this by updating the ingress with the correct default web service
Testing
To test activate the smart card authentication and the URL should now be reachable.
Inspecting the smart card ingress indicates the endpoints are now reachable
% kubectl describe ingress gitlab-webservice-smartcard
Name: gitlab-webservice-smartcard
Namespace: gitlab
Address: x.x.x.x
Default backend: default-http-backend:80 (10.16.2.14:8080)
TLS:
gitlab-gitlab-tls-smartcard terminates smartcard.swainaina.sr.gitlab.support
Rules:
Host Path Backends
---- ---- --------
smartcard.example.com
/ gitlab-webservice-default:8181 (10.16.2.50:8181,10.16.3.31:8181)
Related issues
Closes #2758 (closed)
Checklist
See Definition of done.
For anything in this list which will not be completed, please provide a reason in the MR discussion.
Required
-
Merge Request Title and Description are up to date, accurate, and descriptive -
MR targeting the appropriate branch -
MR has a green pipeline on GitLab.com
Expected (please provide an explanation if not completing)
-
Test plan indicating conditions for success has been posted and passes -
Documentation created/updated -
Tests added -
Integration tests added to GitLab QA -
Equivalent MR/issue for omnibus-gitlab opened
Edited by Silvester Wainaina