Skip to content

Commit 113c8f9

Browse files
committed
remove auth proxy
1 parent 99d97f8 commit 113c8f9

File tree

7 files changed

+6
-57
lines changed

7 files changed

+6
-57
lines changed

README.md

+6-22
Original file line numberDiff line numberDiff line change
@@ -84,20 +84,17 @@ Backend connection is configured using the following env variables:
8484
|------------------|--------------------------------------------------------------|-----------|---------|
8585
| NUTANIX_ENDPOINT | Fully Qualified Domain Name used to connect to Prism Central | true | *none* |
8686
| NUTANIX_PORT | Port to connect to Prism Central | false | 9440 |
87-
| NUTANIX_USERNAME | Username to connect to Prism Central if AUTH_PROXY enable | false | admin |
88-
| NUTANIX_PASSWORD | Password to connect to Prism Central if AUTH_PROXY enable | false | *none* |
8987

9088

9189

9290
Advanced configuration is possible using the following env variables:
9391

94-
| Name | Description | Mandatory | Default |
95-
|---------------------------------------------|-----------------------------------------------------|-----------|---------|
96-
| AUTH_PROXY | Set authentication circuit breaker (enable/disable) | false | disable |
97-
| DASHBOARD | Set dashboard (enable/disable) | false | disable |
98-
| TRAEFIK_LOG_LEVEL | Log level of proxy logs | false | error |
99-
| TRAEFIK_SERVERSTRANSPORT_ROOTCAS | Path of the CA file to validate backend | false | *none* |
100-
| TRAEFIK_SERVERSTRANSPORT_INSECURESKIPVERIFY | Disable SSL certificate verification | false | false |
92+
| Name | Description | Mandatory | Default |
93+
|---------------------------------------------|-----------------------------------------|-----------|---------|
94+
| DASHBOARD | Set dashboard (enable/disable) | false | disable |
95+
| TRAEFIK_LOG_LEVEL | Log level of proxy logs | false | error |
96+
| TRAEFIK_SERVERSTRANSPORT_ROOTCAS | Path of the CA file to validate backend | false | *none* |
97+
| TRAEFIK_SERVERSTRANSPORT_INSECURESKIPVERIFY | Disable SSL certificate verification | false | false |
10198

10299

103100

@@ -113,25 +110,12 @@ ex: `TRAEFIK_SERVERSTRANSPORT_ROOTCAS=/etc/traefik/cert/ca.crt`
113110

114111

115112

116-
#### Authentication circuit breaker
117-
118-
You can decide to implement separate authentication at the proxy level. To do this, follow the procedure below:
119-
120-
- Create a file that contains the authorized users for the proxy. The file content is a list of `name:hashed-password`. Passwords must be hashed using MD5, SHA1, or BCrypt (use `htpasswd` to generate the passwords).
121-
- Provide the file in the following path `/etc/traefik/auth/usersfile`.
122-
- Set `NUTANIX_USERNAME` and `NUTANIX_PASSWORD` env to connect to the backend Prism Central.
123-
- Set `AUTH_PROXY` env to `enable`.
124-
125-
126-
127113
#### Proxy Dashboard
128114

129115
You can enable the proxy dashboard by setting `DASHBOARD` to `enable`.
130116

131117
Proxy will be available at the following address: `https://FQDN:9440/dashboard/`
132118

133-
If `AUTH_PROXY` is enabled the same users will be used to connect to the dashboard.
134-
135119

136120

137121
## Contributing

traefik.d/dashboard.yaml

-4
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,4 @@ http:
77
entryPoints:
88
- "proxy"
99
tls: {}
10-
{{ if eq (env "AUTH_PROXY") "enable"}}
11-
middlewares:
12-
- auth
13-
{{end}}
1410
{{end}}

traefik.d/middleware.yml

-11
This file was deleted.

traefik.d/pc-v1.yml

-5
Original file line numberDiff line numberDiff line change
@@ -22,11 +22,6 @@
2222
rule: "Host(`{{ default "FQDN_not_configured" (env "FQDN") }}`) && PathPrefix(`{{.Prefix}}`) && Method(`{{.Method}}`)"
2323
service: nutanix-pc
2424
tls: {}
25-
{{ if eq (env "AUTH_PROXY") "enable"}}
26-
middlewares:
27-
- auth
28-
- authBackend
29-
{{end}}
3025
{{end}}
3126

3227
http:

traefik.d/pc-v2.yml

-5
Original file line numberDiff line numberDiff line change
@@ -22,11 +22,6 @@
2222
rule: "Host(`{{ default "FQDN_not_configured" (env "FQDN") }}`) && PathPrefix(`{{.Prefix}}`) && Method(`{{.Method}}`)"
2323
service: nutanix-pc
2424
tls: {}
25-
{{ if eq (env "AUTH_PROXY") "enable"}}
26-
middlewares:
27-
- auth
28-
- authBackend
29-
{{end}}
3025
{{end}}
3126

3227
http:

traefik.d/pc-v3.yml

-5
Original file line numberDiff line numberDiff line change
@@ -47,11 +47,6 @@
4747
rule: "Host(`{{ default "FQDN_not_configured" (env "FQDN") }}`) && PathPrefix(`{{.Prefix}}`) && Method(`{{.Method}}`)"
4848
service: nutanix-pc
4949
tls: {}
50-
{{ if eq (env "AUTH_PROXY") "enable"}}
51-
middlewares:
52-
- auth
53-
- authBackend
54-
{{end}}
5550
{{end}}
5651

5752
http:

traefik.d/pc-v4.yml

-5
Original file line numberDiff line numberDiff line change
@@ -43,11 +43,6 @@
4343
rule: "Host(`{{ default "FQDN_not_configured" (env "FQDN") }}`) && PathPrefix(`{{.Prefix}}`) && Method(`{{.Method}}`)"
4444
service: nutanix-pc
4545
tls: {}
46-
{{ if eq (env "AUTH_PROXY") "enable"}}
47-
middlewares:
48-
- auth
49-
- authBackend
50-
{{end}}
5146
{{end}}
5247

5348
http:

0 commit comments

Comments
 (0)