mirror of
https://github.com/holos-run/holos.git
synced 2026-04-07 18:15:00 +00:00
Without this patch the auth proxy cookie domain is difficult to manage. This patch refactors the hosts managed for each environment in a project to better align with security domains and auth proxy session cookies. The convention is: `<env?>.<host>.<stage?>.<cluster?>.<domain>` where `host` can be 0..N entries with a default value of `[projectName]`. env may be omitted for prod or the dev env of the dev stage. stage may be omitted for prod. cluster may be omitted for the global endpoint. For a project named `holos`: | Project | Stage | Env | Cluster | Host | | ------- | ----- | --- | ------- | ------ | | holos | dev | jeff | k2 | jeff.holos.dev.k2.ois.run | | holos | dev | jeff | global | jeff.holos.dev.ois.run | | holos | dev | - | k2 | holos.dev.k2.ois.run | | holos | dev | - | global | holos.dev.ois.run | | holos | prod | - | k2 | holos.k2.ois.run | | holos | prod | - | global | holos.ois.run | Auth proxy: | Project | Stage | Auth Proxy Host | Auth Cookie Domain | | ------- | ----- | ------ | ------------------ | | holos | dev | auth.holos.dev.ois.run | holos.dev.ois.run | | holos | dev | auth.holos.dev.k1.ois.run | holos.dev.k1.ois.run | | holos | dev | auth.holos.dev.k2.ois.run | holos.dev.k2.ois.run | | holos | prod | auth.holos.ois.run | holos.ois.run | | holos | prod | auth.holos.k1.ois.run | holos.k1.ois.run | | holos | prod | auth.holos.k2.ois.run | holos.k2.ois.run |