From 00992c5e9ade0ab7d7c4bcf8c7bc1600e14b5222 Mon Sep 17 00:00:00 2001 From: Andrew Azores Date: Tue, 4 Jun 2024 13:31:29 -0400 Subject: [PATCH] fix(proxy): do not pass unused credentials upstream --- .../common/resource_definitions/resource_definitions.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/internal/controllers/common/resource_definitions/resource_definitions.go b/internal/controllers/common/resource_definitions/resource_definitions.go index a2375805..ef1cb1dc 100644 --- a/internal/controllers/common/resource_definitions/resource_definitions.go +++ b/internal/controllers/common/resource_definitions/resource_definitions.go @@ -647,6 +647,9 @@ func NewOpenShiftAuthProxyContainer(cr *model.CryostatInstance, specs *ServiceSp } args := []string{ + "--pass-access-token=false", + "--pass-user-bearer-token=false", + "--pass-basic-auth=false", fmt.Sprintf("--upstream=http://localhost:%d/", constants.CryostatHTTPContainerPort), fmt.Sprintf("--upstream=http://localhost:%d/grafana/", constants.GrafanaContainerPort), fmt.Sprintf("--upstream=http://localhost:%d/storage/", constants.StoragePort),