Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow overriding of COOKIE_SECURE #1

Open
rlabrecque opened this issue Nov 24, 2020 · 0 comments
Open

Allow overriding of COOKIE_SECURE #1

rlabrecque opened this issue Nov 24, 2020 · 0 comments

Comments

@rlabrecque
Copy link

rlabrecque commented Nov 24, 2020

- name: COOKIE_SECURE

Setting this to false is required in my case for some reason. Otherwise I get stuck in a 301 Moved Permanently loop where it keeps redirecting me back to the same page. Likely something to do with my AWS NLB -> nginx-ingress -> buzzfeed-sso setup with https termination. (Or because I haven't put tls stuff in my values.yaml yet? We'll see tomorrow!)

Why's it on by default anyway? It's off in both the buzzfeed-sso kubernetes quickstart:
https://github.com/buzzfeed/sso/blob/master/quickstart/kubernetes/sso-auth-deployment.yml
and on the only other place documenting buzzfeed-sso on k8s: https://medium.com/@while1eq1/single-sign-on-for-internal-apps-in-kubernetes-using-google-oauth-sso-2386a34bc433

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant