traefik-forward-auth

This chart deploys a Traefik Forward Auth service configured to login with Gitlab.

Usage

To use the Traefik Forward Auth you need to add an IngressRoute and a Middleware resources to your chart.

For example:

---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: {{ .Release.Name }}
spec:
  entryPoints:
    - web
    - websecure
  routes:
    - match: Host(`{{ .Values.ingress.host }}`)
      kind: Rule
      services:
        - name: {{ .Release.Name }}
          port: 80
      middlewares:
        - name: {{ .Release.Name }}-traefik-forward-auth

---
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: {{ .Release.Name }}-traefik-forward-auth
spec:
  forwardAuth:
    address: http://traefik-forward-auth.traefik-forward-auth:4181 # This is where FLOW deploys the forward auth service by default 
    authResponseHeaders:
      - X-Forwarded-User

NOTE: The IngressRoute will replace your Ingress resource.

NOTE: You need to also add <your-application-url/_oauth> as a valid redirect uri to the Gitlab OIDC provider application.