Hi i am trying add services with external url but issues it requires special char in path value something
/XISOAPAdapter/MessageServlet?senderParty=&testingBC_xyz&receiverParty=&receiverService=&interface=SI_xyz_Sync_OB&interfaceNamespace=http://xxxx/yyyy
"(characters outside of the reserved list of RFC 3986 found); receiverParty\\: unknown field; receiverService\\: unknown field; senderService\\: unknown field)",
"name": "schema violation",
"fields": {
"path": "invalid path: '/XISOAPAdapter/MessageServlet\\' (characters outside of the reserved list of RFC 3986 found)",
"senderService\\": "unknown field",
"interface\\": "unknown field",
"receiverParty\\": "unknown field",
"interfaceNamespace\\": "unknown field",
"receiverService\\": "unknown field""
curl -i -X GET --url http://localhost:8000/api/helllo
HTTP/1.1 502 Bad Gateway
Server: openresty
Date: Fri, 02 Apr 2021 14:09:00 GMT
Content-Type: application/json; charset=utf-8
Connection: keep-alive
Content-Length: 75
vary: Origin
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Auth-Token
X-Kong-Upstream-Latency: 1
X-Kong-Proxy-Latency: 4
Via: kong/2.3.3
{
"message":"An invalid response was received from the upstream server"
I am not able to understand this:
'/$(uri_captures[1])'
What does it mean?
kong version: 2.0.4
lua version: 5.1
Is it generally a good idea to share the same authentication mechanism on the gateway and the services behind it? If yes, what is the point of having Kong verify it, if all the services behind it are also going to do the same thing?
In all the examples i find, the domain services itself don't have authentication on it, and Kong is just put in front to handle this, but this doesnt seem like a very realistic production scenario
Hello, I'm testing https://github.com/revomatico/docker-kong-oidc and wondering how to get started with the plugin. I've set it up as a global plugin, but can't figure out what to do to start communicating with my Auth server.
I'm trying to allow my users on Azure AD access to my backend microservices. So, frontend->Microsoft IdP -> {User logs in} -> Kong OIDC.
2 replies
2021/04/26 10:18:48 [error] 31#0: 1172111144 [lua] init.lua:800: balancer(): failed to retry the dns/balancer resolver for internal-.us-west-2.elb.amazonaws.com' with: dns server error: 100 cache only lookup failed while connecting to upstream, client: client_ip, server: kong, request: "POST /v1/account/search HTTP/1.1", upstream: "http://100.64.56.110:8000/account/search", host: "kong-ingress-data-plane.kong.svc.cluster.local:8443"
100.64.56.110 ip is old pod's ip. requests are not routed to new pod.
Can someone please help me
Hello , i am trying to look if incoming request JWT i want to route based on claim id and route to differnent routes , if claim id is xxx-test1 then redirect to test1 .
I have the same question, I'm trying to get my oidc plugin (https://github.com/revomatico/docker-kong-oidc) to send jwt's based on the flow described in this link for Kong Konnect https://docs.konghq.com/hub/kong-inc/openid-connect/ Do they work the same? I receive the code from my IdP. What's supposed to happen next?
3 replies
Hi, I opened an issue about improving error handling in kong. Basically it allow to have more consistent errors response from kong and to allow change the error template. I would like to have your feedback on this :)
This is the link we followed for custom plugin - https://docs.konghq.com/kubernetes-ingress-controller/1.2.x/guides/setting-up-custom-plugins/
kong.log uses this unique identifier for each request. This will help trace all the logs. Any suggestions?
It seems like kong is trying to install packages by luarocks. May I know if there is any way to let "docker run kong" download the dependencies by .rockspec?
service S1, routing R1, with plugin P1
service S2, routing R2
if i am going to access S2 in P1, should i just send request to "http://localhost/R2"?
