From 351d6898ef12e67e834bb46ae363c2b50ae1daf2 Mon Sep 17 00:00:00 2001 From: JJGadgets Date: Wed, 7 Jun 2023 16:12:28 +0800 Subject: [PATCH] fix(ingress-nginx): remove 401 from custom error page 401s are not simply cosmetic errors, they're used by apps to signal for authentication, either by the app's internal authentication or mechanisms like forward-auth. Thus, remove custom error page redirect for it so login functionality on apps don't break --- kube/3-deploy/1-core/05-ingress/nginx/install.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kube/3-deploy/1-core/05-ingress/nginx/install.yaml b/kube/3-deploy/1-core/05-ingress/nginx/install.yaml index 0add0a62..5c2516ef 100644 --- a/kube/3-deploy/1-core/05-ingress/nginx/install.yaml +++ b/kube/3-deploy/1-core/05-ingress/nginx/install.yaml @@ -44,7 +44,7 @@ spec: disable-access-log: "false" log-format-escape-json: "true" # hardening - custom-http-errors: 400,401,403,404,405,409,410,411,412,413,414,415,416,417,418,421,425,431,451,500,501,502,503,504,505,506,510 + custom-http-errors: 400,403,404,405,409,410,411,412,413,414,415,416,417,418,421,425,431,451,500,501,502,503,504,505,506,510 hsts-max-age: "31449600" hsts-preload: "true" ssl-protocols: TLSv1.3 TLSv1.2