Commit 63a02499 authored by Muhammad Umair Khan's avatar Muhammad Umair Khan
Browse files

Fix HTTP authentication, session handling, and scenario dependency resolution 

- Updated ingress auth-url annotations in helm charts to conditionally use HTTP or HTTPS based on the HttpsOnly configuration.

- Configured session cookie security in meep-sessions to respect the MEEP_HTTPS_ONLY environment variable, resolving sign-in issues over HTTP.

- Improved console output formatting in meepctl deployment commands.

- Implemented dynamic dependency renaming in meep-admin-console to cascade process name changes to dependencies and prevent scenario deployment errors.
parent 60c8b847

charts/mec-services/meep-ams/values-template.yaml

+1 −1
Original line number Diff line number Diff line
@@ -64,7 +64,7 @@ ingress: 
      rewrite ^/{{.SandboxName}}/amsi(/|$)(.*)$ /amsi/$2 break;

    {{- end }}

    {{- if .AuthEnabled }}

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=meep-ams&sbox={{.SandboxName}}&mep={{.LocationName}}

    nginx.ingress.kubernetes.io/auth-url: {{ if .HttpsOnly }}https{{ else }}http{{ end }}://$http_host/auth/v1/authenticate?svc=meep-ams&sbox={{.SandboxName}}&mep={{.LocationName}}

    {{- end }}

  labels: {}

  tls:

charts/mec-services/meep-app-enablement/values-template.yaml

+1 −1
Original line number Diff line number Diff line
@@ -88,7 +88,7 @@ ingress: 
      rewrite ^/{{ .SandboxName }}/eees-easdiscovery(/|$)(.*)$ /eees-easdiscovery/$2 break;

    {{- end }}

    {{- if .AuthEnabled }}

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=meep-app-enablement&sbox={{.SandboxName}}&mep={{.LocationName}}

    nginx.ingress.kubernetes.io/auth-url: {{ if .HttpsOnly }}https{{ else }}http{{ end }}://$http_host/auth/v1/authenticate?svc=meep-app-enablement&sbox={{.SandboxName}}&mep={{.LocationName}}

    {{- end }}

  labels: {}

  tls:

charts/mec-services/meep-dai/values-template.yaml

+1 −1
Original line number Diff line number Diff line
@@ -98,7 +98,7 @@ ingress: 
      rewrite ^/{{.SandboxName}}/onboarded-demo4(/|$)(.*)$ /$2 break;

    {{- end }}

    {{- if .AuthEnabled }}

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=meep-dai&sbox={{.SandboxName}}&mep={{.LocationName}}

    nginx.ingress.kubernetes.io/auth-url: {{ if .HttpsOnly }}https{{ else }}http{{ end }}://$http_host/auth/v1/authenticate?svc=meep-dai&sbox={{.SandboxName}}&mep={{.LocationName}}

    {{- end }}

  labels: {}

  tls:

charts/mec-services/meep-federation/values-template.yaml

+1 −1
Original line number Diff line number Diff line
@@ -68,7 +68,7 @@ ingress: 
      rewrite ^/{{.SandboxName}}/fed_enablement(/|$)(.*)$ /fed_enablement/$2 break;

    {{- end }}

    {{- if .AuthEnabled }}

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=meep-federation&sbox={{.SandboxName}}&mep={{.LocationName}}

    nginx.ingress.kubernetes.io/auth-url: {{ if .HttpsOnly }}https{{ else }}http{{ end }}://$http_host/auth/v1/authenticate?svc=meep-federation&sbox={{.SandboxName}}&mep={{.LocationName}}

    {{- end }}

  labels: {}

  tls:

charts/mec-services/meep-iot/values-template.yaml

+1 −1
Original line number Diff line number Diff line
@@ -66,7 +66,7 @@ ingress: 
      rewrite ^/{{.SandboxName}}/iots(/|$)(.*)$ /iots/$2 break;

    {{- end }}

    {{- if .AuthEnabled }}

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=meep-iot&sbox={{.SandboxName}}&mep={{.LocationName}}

    nginx.ingress.kubernetes.io/auth-url: {{ if .HttpsOnly }}https{{ else }}http{{ end }}://$http_host/auth/v1/authenticate?svc=meep-iot&sbox={{.SandboxName}}&mep={{.LocationName}}

    {{- end }}

  labels: {}

  tls: