Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enabling domains feature prevents login to console #2065

Open
dbason opened this issue Apr 9, 2024 · 1 comment
Open

Enabling domains feature prevents login to console #2065

dbason opened this issue Apr 9, 2024 · 1 comment

Comments

@dbason
Copy link

dbason commented Apr 9, 2024

Expected Behavior

When specifying domains in the features section requests to the domain should work

Current Behavior

Any attempt to log in to the console returns a 401

Steps to Reproduce (for bugs)

  1. Deploy a minio tenant
  2. Create a DNS entry to the exposed console
  3. Attempt to log in to the console

Context

We can't specify domains in the features section

Regression

Your Environment

  • Version used (minio-operator): 5.0.0.14
  • Environment name and version (e.g. kubernetes v1.17.2): Kubernetes v.1.27.8
  • Server type and version:RELEASE.2024-04-06T05-26-02Z
  • Link to your deployment file:
spec:
  buckets:
  - name: bucket1
    region: us-east-1
  - name: bucket2
    region: us-east-1
  configuration:
    name: minio-config-secret
  exposeServices:
    console: true
    minio: true
  externalCertSecret:
  - name: api-cert-secret
    type: kubernetes.io/tls
  - name: console-cert-secret
    type: kubernetes.io/tls
  features:
    domains:
      console: https://minio-console.example.com:9443
      minio:
      - https://minio-api.example.com
      - https://minio.test.svc.cluster.local
  image: quay.io/minio/minio:RELEASE.2024-04-06T05-26-02Z
  imagePullPolicy: IfNotPresent
  pools:
  - labels:
      app: minio-tenant
    name: default
    servers: 4
    volumeClaimTemplate:
      metadata:
        name: minio-data
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10Gi
    volumesPerServer: 1
  requestAutoCert: true

See minio/minio#19441 for some discussion of the problem

@jDmacD
Copy link

jDmacD commented Oct 18, 2024

I'm seeing a similar issue. enabling domains results in a 500 error code

{"detailedMessage":"Get \"https://x.x.io/minio/admin/v3/accountinfo\": dial tcp x.x.x.x:443: connect: operation not permitted","message":"invalid session"}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants