Skip to content

Resolve "403 Forbidden while accessing smartcard ingress"

What does this MR do?

The smartcard ingress is not working as the endpoints are not reachable. This MR fixes this by updating the ingress with the correct default web service

Testing

To test activate the smart card authentication and the URL should now be reachable.

Inspecting the smart card ingress indicates the endpoints are now reachable

% kubectl describe ingress gitlab-webservice-smartcard
Name:             gitlab-webservice-smartcard
Namespace:        gitlab
Address:          x.x.x.x
Default backend:  default-http-backend:80 (10.16.2.14:8080)
TLS:
  gitlab-gitlab-tls-smartcard terminates smartcard.swainaina.sr.gitlab.support
Rules:
  Host                                   Path  Backends
  ----                                   ----  --------
  smartcard.example.com
                                         /   gitlab-webservice-default:8181 (10.16.2.50:8181,10.16.3.31:8181)

Related issues

Closes #2758 (closed)

Checklist

See Definition of done.

For anything in this list which will not be completed, please provide a reason in the MR discussion.

Required

  • Merge Request Title and Description are up to date, accurate, and descriptive
  • MR targeting the appropriate branch
  • MR has a green pipeline on GitLab.com

Expected (please provide an explanation if not completing)

  • Test plan indicating conditions for success has been posted and passes
  • Documentation created/updated
  • Tests added
  • Integration tests added to GitLab QA
  • Equivalent MR/issue for omnibus-gitlab opened
Edited by Silvester Wainaina

Merge request reports