<p>I am installed harbor v2.0.1 in kubernetes v1.18, now when I am login harbor, it give me this tips:</p>
<pre><code>{&quot;errors&quot;:[{&quot;code&quot;:&quot;FORBIDDEN&quot;,&quot;message&quot;:&quot;CSRF token invalid&quot;}]}
</code></pre>
<p>this is my traefik 2.2.1 ingress config(this is the <a href="https://github.com/goharbor/harbor-helm/blob/1.3.0/templates/ingress/ingress.yaml#L24" rel="nofollow noreferrer">docs</a> I am reference):</p>
<pre><code>spec:
  entryPoints:
    - web
  routes:
    - kind: Rule
      match: Host(`harbor-portal.dolphin.com`) &amp;&amp; PathPrefix(`/c/`)
      services:
        - name: harbor-harbor-core
          port: 80
    - kind: Rule
      match: Host(`harbor-portal.dolphin.com`)
      services:
        - name: harbor-harbor-portal
          port: 80
</code></pre>
<p>I am check harbor core logs only show ping success message.Shoud I using https? I am learnging in local machine. Is https mandantory? I am searching from internet and find just a little resouce to talk aboout it.what should I do to make it work?</p>
<p><a href="https://i.stack.imgur.com/UUtRu.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/UUtRu.png" alt="enter image description here" /></a></p>
<p>I read the source code, and tried in harbor core pod like this:</p>
<pre><code>harbor [ /harbor ]$ curl --insecure -w '%{http_code}' -d 'principal=harbor&amp;password=Harbor123456' http://localhost:8080/c/login   
{&quot;errors&quot;:[{&quot;code&quot;:&quot;FORBIDDEN&quot;,&quot;message&quot;:&quot;CSRF token invalid&quot;}]}
</code></pre>

Dolphin
<p>my expose type is nodePort. modify the values.yaml file, &quot;externalURL: https&quot; change to &quot;externalURL: http&quot;</p>
<p>before: externalURL: <a href="https://10.240.11.10:30002" rel="nofollow noreferrer">https://10.240.11.10:30002</a>
after: externalURL: <a href="http://10.240.11.10:30002" rel="nofollow noreferrer">http://10.240.11.10:30002</a></p>
<p>and then reinstall the harbor</p>
