WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

[haproxy] Redirect openid based on payload

Browse Source 
When checking if the server has openid capabilities we are checking for
openid_identifier, let's redirect that to openid backend as well.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
This commit is contained in:
Michal Konecny
2025-10-01 10:02:12 +02:00
parent aa5e1674c0
commit 3df75c98bb
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/haproxy/templates/haproxy.cfg
View File

@@ -172,12 +172,15 @@ frontend ipsilon-frontend
bind 0.0.0.0:10020
{% if env == "staging" %}
option http-buffer-request
# Define ipsilon OpenID only instance
acl path_openidc path_beg /openidc
acl path_openid path_beg /openid
acl is_openid_payload req.body_payload(0,0) -m sub 'openid_identifier'
use_backend ipsilon-backend if path_openidc
use_backend ipsilon-backend-openid if path_openid
use_backend ipsilon-backend-openid if is_openid_payload
{% endif %}
default_backend ipsilon-backend