Stack Overflow
Stack Overflow

Questions tagged [ambassador]

Questions related to the use of the open source Ambassador API Gateway for Kubernetes

101 questions
8
votes
1 answer

Can Ambassador handle CORS requests?

I'm sorry if this is a very ignorant question but is it possible for Ambassador to truly handle CORS headers and pre-flight OPTION responses? The docs (https://www.getambassador.io/reference/cors) seem kind of ambiguous to me, if there are just…
xbakesx
  • 13,202
  • 6
  • 48
  • 76
5
votes
1 answer

Run Ambassador in local dev environment without Kubernetes

I am trying to run Ambassador API gateway on my local dev environment so I would simulate what I'll end up with on production - the difference is that on prod my solution will be running in Kubernetes. To do so, I'm installing Ambassador into Docker…
Kassem
  • 8,116
  • 17
  • 75
  • 116
5
votes
2 answers

Keycloak x509 client authentication configuration

I need some tips in order to understand how to perform a client authentication with x509 certificate against Keycloak. We have a simple Spring Boot Web App (API REST) into a Kubernetes cluster. This Web App is public exsposed through an API Gateway…
HK15
  • 737
  • 1
  • 14
  • 32
4
votes
0 answers

Ambassador Rate limitting not working properly

I am trying to do rate-limiting with ambassador following this tutorial. I am using minikube and local docker image.I have tested all api is responding correctly after deploying to Kubernetes only the rate-limiting function isn't working. Here is my…
Soham
  • 4,397
  • 11
  • 43
  • 71
4
votes
1 answer

Do I need Ambassador if I use Istio for Mapping?

I have been using Ambassador for a while, I like it but it's been spamming my logs with GET /api/.ambassador-internal/openapi-docs. So I'm thinking to switch to another mapping alternative and I found Istio. I'm not sure what exactly what is yet,…
bbnn
  • 3,505
  • 10
  • 50
  • 68
3
votes
0 answers

Getting Error 403 after implementing authservice in emissary

I have implemented emissary ingress on kubernetes and implemented Deployments, Services and mappings. Below mapping has been created in emissary root@master1:~# kubectl get mapping NAME SOURCE HOST SOURCE PREFIX DEST SERVICE STATE …
Dhiraj Bansal
  • 417
  • 3
  • 8
3
votes
0 answers

host termination not working in ambassador ingress

I got an issue with host termination, while using ambassador as ingress in my bare-metal kubernetes cluster. Actually I got an DNS record for *.k8s.mydomain.com -> 10.16.0.99 (sole node in my cluster). While applying a mapping like apiVersion:…
Robert Heine
  • 1,820
  • 4
  • 29
  • 61
3
votes
0 answers

use ingress path for accessing a service from within the kubernetes cluster

I am getting my hands dirty with kubernetes and ingress and have seem to have hit bit of a hurdle. So I have a cluster set up and have my services deployed and exposed via service and they all are reachable from within the cluster using their names…
JayD
  • 748
  • 1
  • 13
  • 38
3
votes
1 answer

Wildcard sub-domain mapping in Ambassador API Gateway

I am using Ambassador API Gateway in my GKE as below: apiVersion: getambassador.io/v2 kind: Mapping metadata: name: my-service spec: host: app.mycompany.com prefix: / service: my-service However, I would like to map all sub domains…
Ha Doan
  • 611
  • 6
  • 20
3
votes
2 answers

How to specify redirectUrl after logout for Ambassador OAuth2 Filter with Keycloak?

I'm using the Ambassador OAuth2 Filter to perform OAuth2 authorization against Keycloak. For the logout I use the the RP-initiated logout as described in the Docs of Ambassador The logout works fine. However I could not figure out how to provide the…
Christoph Krieger
  • 31
  • 2
3
votes
1 answer

Ambassador shows no healthy upstream

I have setup Kubernetes in CentOS with 1 master and a separate node. Added Ambassador GW and later a service with mapping. When I try to access the end service using the GW mapping it responds with no healthy upstream message.
Sony Joseph
  • 189
  • 2
  • 13
2
votes
1 answer

x-requext-id header propagation in keycloak

I am using keycloak to implement OAuth2 code authorization flow in a kubernetes cluster governed by an API gatware Ambassador, I am using Istio Service mesh to add all the tracability, mTLS features to my cluster. One of which is Jaeger which…
Coderji
  • 7,655
  • 5
  • 37
  • 51
2
votes
2 answers

Telepresence Commands Pop Up an Ambassador Cloud Login Window

For some reason, when I run some Telepresence commands, I get a browser window popping up prompting me to log in to Ambassador Cloud. But I'm not using Ambassador Cloud. In addition to the browser window, the command shows a message to this effect.…
Mark
  • 4,970
  • 5
  • 42
  • 66
2
votes
2 answers

Clean Ambassador Edge Stack install on GKE fails with DNS resolving

we are testing out the Ambassador Edge Stack and started with a brand new GKE private cluster in autopilot mode. We installed from scratch following the quick start tour to get a feeling of it and ended up with the following error Error from server:…
Sebastian
  • 23
  • 3
2
votes
0 answers

Ambassador Host {hostname}: invalid TLS secret ssl-cert, marking inactive

I am using the Ambassador in my GKE cluster. I am getting below issue but I am having valid ssl certificate as secret in my configuration. Secret myapp-ssl-cert.ambassadorpoc unknown Host myapp: invalid TLS secret myapp-ssl-cert, marking…
Soorya Prakash
  • 921
  • 3
  • 9
  • 29
1
2 3 4 5 6 7