Skip to content

BUG: Gateway is not running namespaced requests correctly #128

@n3rdc4ptn

Description

@n3rdc4ptn

In our cluster our users have only access to specific resources in specific namespaces.
So in our example (see screenshot) we want to fetch a Workspace resource for a specific namespace, but we get an error back that the request failes because of "Unauthorized" because the gateway tries to fetch the complete list of Workspaces as it seems.

Image

I dont know, when this bug got introduced, but it worked some time ago.

Maybe with the latest changes for token handling?
#118

More info

We are using HelmChart Version: 0.33.5

This is our values.yaml

kcp:
  enabled: false

gateway:
  port: 8080
  graphiql: true
  usernameClaim: sub
  shouldImpersonate: false

listener:
  enabled: true
  port: 8090
  healthCheck:
    enabled: true
    port: 3390
  metricsPort: 8091

istio:
  enabled: false

cors:
  enabled: true

gatewayApi:
  httpRoute:
    enabled: false

extraEnvs:
  - name: AUTHENTICATE_SCHEMA_REQUESTS
    value: "true"
  - name: INTROSPECTION_AUTHENTICATION
    value: "true"
  - name: LOCAL_DEVELOPMENT
    value: "false"
  - name: MULTICLUSTER
    value: "true"

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions