Search code examples
kubernetestraefik

Traefik Forward Authentication in k8s ingress controller


Hello I tried looking at the auth options in the annotations for kubernetes traefik ingress. I couldn't find anything where I could configure Forward Authentication as documented here: https://docs.traefik.io/configuration/entrypoints/#forward-authentication

I would like to be able to configure forward authentication per ingress resource. This is possible in the nginx ingress controller.

Is that supported currently?


Solution

  • According to the Traefik documentation that feature will be available in version 1.7 of Traefik (currently a release candidate).

    Here is a link to the authentication documentation

    My guess is that you will need to add the following 2 annotations:

    ingress.kubernetes.io/auth-type: forward
    ingress.kubernetes.io/auth-url: https://example.com
    

    and probably also the following annotation with the corresponding header fields your auth service returns as value:

    ingress.kubernetes.io/auth-response-headers: X-Auth-User, X-Secret