ForwardAuth Middleware

May 16, 2021

https://doc.traefik.io/traefik/middlewares/forwardauth/

创建中间件

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: lizhe-auth
spec:
  forwardAuth:
    address: http://192.168.194.181:3080/auth

我会使用下面的nginx作为测试用的真实服务

分别创建 traefik service 和 ingressroute
这里为了测试我们没有添加任何中间件

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: authingressroute
  namespace: lizhe
spec:
  entryPoints:
    - web
  routes:
  - match: Host(`auth.lizhe.com`)
    kind: Rule
    services:
    - name: authts
      kind: TraefikService

kind: TraefikService
metadata:
  name: authts
  namespace: lizhe
spec:
  weighted:
    services:
      - name: nginxsvc
        port: 80
        kind: Service

然后我们加入中间件

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: authingressroute
  namespace: lizhe
spec:
  entryPoints:
    - web
  routes:
  - match: Host(`auth.lizhe.com`)
    kind: Rule
    services:
    - name: authts
      kind: TraefikService
    middlewares:
      - name: lizhe-auth