Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

help request: Multi-auth plugin configuration with secretRef #11757

Open
sdd-el opened this issue Nov 19, 2024 · 0 comments
Open

help request: Multi-auth plugin configuration with secretRef #11757

sdd-el opened this issue Nov 19, 2024 · 0 comments
Labels
plugin question label for questions asked by users

Comments

@sdd-el
Copy link

sdd-el commented Nov 19, 2024

Description

I have following multi-auth configuration:

spec:
  plugins:
    - config:
        auth_plugins:
          - jwt-auth: {}
          - ldap-auth-custom:
              base_dn: OU=xyz,DC=xyz01,DC=xyzcorp,DC=lan
              ldap_uri: ldap.xyz.com
              login_dn: >-
                CN=usser123,OU=SERVICES,OU=ACCOUNTS,OU=xyz,DC=xyz01,DC=xyzcorp,DC=lan
              login_password: 123456
              tls_verify: false
              uid: CN
              use_tls: false
      enable: true
      name: multi-auth

I would like to use secretRef for my custom plugin (ldap-auth-custom) to avoid having the login_password and login_dn written in plain text in the multi-auth plugin configuration and instead use Kubernetes secrets. While referencing secretRef works fine with a single plugin configuration, it seems to not work with the multi-auth plugin configuration.

Is the reason behind this that secretRef doesn’t allow nesting, or am I missing something? Is there any way to use Kubernetes secrets in the multi-auth plugin configuration?

Environment

  • APISIX version (run apisix version): apisix version
  • Operating system (run uname -a): 22.04.3-Ubuntu
  • OpenResty / Nginx version (run openresty -V or nginx -V):
  • etcd version, if relevant (run curl http://127.0.0.1:9090/v1/server_info):
  • APISIX Dashboard version, if relevant:
  • Plugin runner version, for issues related to plugin runners:
  • LuaRocks version, for installation issues (run luarocks --version):
@dosubot dosubot bot added plugin question label for questions asked by users labels Nov 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
plugin question label for questions asked by users
Projects
Status: 📋 Backlog
Development

No branches or pull requests

1 participant