{"action":"created","issue":{"url":"https://api.github.com/repos/helm/charts/issues/5958","repository_url":"https://api.github.com/repos/helm/charts","labels_url":"https://api.github.com/repos/helm/charts/issues/5958/labels{/name}","comments_url":"https://api.github.com/repos/helm/charts/issues/5958/comments","events_url":"https://api.github.com/repos/helm/charts/issues/5958/events","html_url":"https://github.com/helm/charts/issues/5958","id":329619490,"node_id":"MDU6SXNzdWUzMjk2MTk0OTA=","number":5958,"title":"Time out connecting to oauth2-proxy","user":{"login":"tdebiasio","id":15800737,"node_id":"MDQ6VXNlcjE1ODAwNzM3","avatar_url":"https://avatars1.githubusercontent.com/u/15800737?v=4","gravatar_id":"","url":"https://api.github.com/users/tdebiasio","html_url":"https://github.com/tdebiasio","followers_url":"https://api.github.com/users/tdebiasio/followers","following_url":"https://api.github.com/users/tdebiasio/following{/other_user}","gists_url":"https://api.github.com/users/tdebiasio/gists{/gist_id}","starred_url":"https://api.github.com/users/tdebiasio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tdebiasio/subscriptions","organizations_url":"https://api.github.com/users/tdebiasio/orgs","repos_url":"https://api.github.com/users/tdebiasio/repos","events_url":"https://api.github.com/users/tdebiasio/events{/privacy}","received_events_url":"https://api.github.com/users/tdebiasio/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-06-05T20:49:48Z","updated_at":"2018-08-01T10:15:04Z","closed_at":null,"author_association":"NONE","body":"<!-- Thanks for filing an issue! Before hitting the button, please answer these questions. It's helpful to search the existing GitHub issues first. It's likely that another user has already reported the issue you're facing, or it's a known issue that we're already aware of-->\r\n\r\n**Is this a request for help?**:\r\nYes\r\n---\r\n\r\n**Is this a BUG REPORT or FEATURE REQUEST?** (choose one):\r\nBUG REPORT\r\n<!--\r\nIf this is a BUG REPORT, please:\r\n  - Fill in as much of the template below as you can.  If you leave out\r\n    information, we can't help you as well.\r\n\r\nIf this is a FEATURE REQUEST, please:\r\n  - Describe *in detail* the feature/behavior/change you'd like to see.\r\n\r\nIn both cases, be ready for followup questions, and please respond in a timely\r\nmanner.  If we can't reproduce a bug or think a feature already exists, we\r\nmight close your issue.  If we're wrong, PLEASE feel free to reopen it and\r\nexplain why.\r\n-->\r\n\r\n**Version of Helm and Kubernetes**:\r\n```\r\nkubectl version\r\nClient Version: version.Info{Major:\"1\", Minor:\"9\", GitVersion:\"v1.9.2\", GitCommit:\"5fa2db2bd46ac79e5e00a4e6ed24191080aa463b\", GitTreeState:\"clean\", BuildDate:\"2018-01-18T10:09:24Z\", GoVersion:\"go1.9.2\", Compiler:\"gc\", Platform:\"windows/amd64\"}\r\nServer Version: version.Info{Major:\"1\", Minor:\"9\", GitVersion:\"v1.9.6\", GitCommit:\"9f8ebd171479bec0ada837d7ee641dec2f8c6dd1\", GitTreeState:\"clean\", BuildDate:\"2018-03-21T15:13:31Z\", GoVersion:\"go1.9.3\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\n```\r\n\r\n```\r\nhelm version\r\nClient: &version.Version{SemVer:\"v2.9.0\", GitCommit:\"f6025bb9ee7daf9fee0026541c90a6f557a3e0bc\", GitTreeState:\"clean\"}\r\nServer: &version.Version{SemVer:\"v2.9.0\", GitCommit:\"f6025bb9ee7daf9fee0026541c90a6f557a3e0bc\", GitTreeState:\"clean\"}\r\n```\r\n\r\n**Which chart**:\r\nstable/oauth2-proxy\r\n\r\n**What happened**:\r\nIngress times out while connecting to oauth2-proxy.  This is in an Azure AKS cluster with stable/nginx-ingress installed.  My ingress setup:\r\n\r\n```\r\napiVersion: extensions/v1beta1\r\nkind: Ingress\r\nmetadata:\r\n  name: kuard-ingress\r\n  annotations:\r\n    kubernetes.io/tls-acme: \"true\"\r\n    kubernetes.io/ingress.class: \"nginx\"\r\n    ingress.kubernetes.io/ssl-redirect: \"true\"\r\n    ingress.kubernetes.io/secure-backends: \"true\"\r\n    certmanager.k8s.io/cluster-issuer: letsencrypt-prod\r\n    nginx.ingress.kubernetes.io/auth-url: https://my.cloudapp.azure.com/oauth2/auth\r\n    nginx.ingress.kubernetes.io/auth-signin: https://my.cloudapp.azure.com/oauth2/start\r\nspec:\r\n  tls:\r\n  - hosts:\r\n    - my.cloudapp.azure.com\r\n    secretName: my-cloudapp-prod-tls\r\n  rules:\r\n  - host: my.cloudapp.azure.com\r\n    http:\r\n      paths:\r\n      - path: /\r\n        backend:\r\n          serviceName: kuard-service\r\n          servicePort: 80\r\n---\r\n\r\napiVersion: extensions/v1beta1\r\nkind: Ingress\r\nmetadata:\r\n  name: oauth2-proxy\r\nspec:\r\n  rules:\r\n  - host: my.cloudapp.azure.com\r\n    http:\r\n      paths:\r\n      - path: /oauth2\r\n        backend:\r\n          serviceName: oauth2-proxy\r\n          servicePort: 80\r\n```\r\n\r\nMy values.yaml used during helm install:\r\n\r\n```\r\nconfig:\r\n  clientID: <private>\r\n  clientSecret: <private>\r\n  cookieSecret: <private>\r\n\r\nextraArgs: {\"provider\":\"github\", \"cookie-secure\":false, \"redirect-url\":\"https://my.cloudapp.azure.com/\"}\r\n\r\nimage:\r\n  repository: \"a5huynh/oauth2_proxy\"\r\n  tag: \"2.2\"\r\n  pullPolicy: \"IfNotPresent\"\r\n\r\n```\r\n\r\nWhen navigating to my app I receive a 500 error.  The logs reveal:\r\n```\r\nkubectl logs nginx-ingress-controller-79598bb4f6-ctf5r --namespace kube-system --tail 10\r\n10.10.0.4 - [10.10.0.4] - - [05/Jun/2018:20:45:08 +0000] \"GET / HTTP/2.0\" 504 0 \"-\" \"Mozilla/5.0 (X11; SunOS sun4u; rv:54.0) Gecko/20100101 Firefox/54.0\" 0 60.075 [default-kuard-service-80] 40.117.152.139:443 0 60.000 504\r\n10.10.0.4 - [10.10.0.4] - - [05/Jun/2018:20:45:08 +0000] \"GET / HTTP/2.0\" 500 194 \"-\" \"Mozilla/5.0 (X11; SunOS sun4u; rv:54.0) Gecko/20100101 Firefox/54.0\" 257 60.075 [default-kuard-service-80] - - - -\r\n2018/06/05 20:45:08 [error] 5754#5754: *30791 upstream timed out (110: Connection timed out) while connecting to upstream, client: 10.10.0.4, server: my.cloudapp.azure.com, request: \"GET / HTTP/2.0\", subrequest: \"/_external-auth-Lw\", upstream: \"https://my-public-ip:443/oauth2/auth\", host: \"my.cloudapp.azure.com\"\r\n2018/06/05 20:45:08 [error] 5754#5754: *30791 auth request unexpected status: 504 while sending to client, client: 10.10.0.4, server: my.cloudapp.azure.com, request: \"GET / HTTP/2.0\", host: \"my.cloudapp.azure.com\"\r\n```\r\n\r\n\r\n\r\n**What you expected to happen**:\r\nNavigating directly to https://my.cloudapp.azure.com/oauth2/ping works. \r\n Also navigating to https://my.cloudapp.azure.com/ when the auth-url and auth-signin annotations are removed.\r\n"},"comment":{"url":"https://api.github.com/repos/helm/charts/issues/comments/409525564","html_url":"https://github.com/helm/charts/issues/5958#issuecomment-409525564","issue_url":"https://api.github.com/repos/helm/charts/issues/5958","id":409525564,"node_id":"MDEyOklzc3VlQ29tbWVudDQwOTUyNTU2NA==","user":{"login":"EamonKeane","id":1946655,"node_id":"MDQ6VXNlcjE5NDY2NTU=","avatar_url":"https://avatars3.githubusercontent.com/u/1946655?v=4","gravatar_id":"","url":"https://api.github.com/users/EamonKeane","html_url":"https://github.com/EamonKeane","followers_url":"https://api.github.com/users/EamonKeane/followers","following_url":"https://api.github.com/users/EamonKeane/following{/other_user}","gists_url":"https://api.github.com/users/EamonKeane/gists{/gist_id}","starred_url":"https://api.github.com/users/EamonKeane/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EamonKeane/subscriptions","organizations_url":"https://api.github.com/users/EamonKeane/orgs","repos_url":"https://api.github.com/users/EamonKeane/repos","events_url":"https://api.github.com/users/EamonKeane/events{/privacy}","received_events_url":"https://api.github.com/users/EamonKeane/received_events","type":"User","site_admin":false},"created_at":"2018-08-01T10:15:04Z","updated_at":"2018-08-01T10:15:04Z","author_association":"NONE","body":"Thanks @tdebiasio  @olegchorny . What ended up working for me with the helm chart was:\r\n\r\n```bash\r\nOAUTH_CLUSTER_SERVICE=oauth2-proxy\r\nOAUTH_CLUSTER_NAMESPACE=cluster-svc\r\n\r\nhttp://$OAUTH_CLUSTER_SERVICE.$OAUTH_CLUSTER_NAMESPACE.svc.cluster.local:80/oauth2/auth\r\n\r\nE.g.\r\n    nginx.ingress.kubernetes.io/auth-url: \"http://kibana-ingress-oauth2-proxy.cluster-svc.svc.cluster.local:80/oauth2/auth\"\r\n```\r\n\r\nPort 4180 didn't work for me."}}
{"actor":{"display_login":"EamonKeane"}}