Basic auth problem

Traefik Traefik v2 (latest)
,
1

I'm current using a ingress for the dashboard with a basic auth middleware. But is current not asking for a password.

ingress:

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: traefik-dashboard
  namespace: traefik-system
spec:
  entryPoints:
    - web
    - websecure
  routes:
    - match: Host(`traefik.internal.kugelbit.com`) # Hostname to match
      kind: Rule
      services: # Service to redirect requests to
        - name: api@internal # Special service created by Traefik pod
          kind: TraefikService
      middlewares:
        - name: traefik-auth
          namespace: traefik-system
---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: traefik-auth
  namespace: traefik-system
spec:
  basicAuth:
    secret: traefik-auth

kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: traefik-system

secretGenerator:
- name: traefik-auth
  files:
  - users

generatorOptions:
  disableNameSuffixHash: true

resources:
- dashboard-ingress.yaml

file users has generate with the command htpasswd -c users admin

The dashboard shows the routers and middlewares:

image
image1278×1039 61.3 KB

image
image1278×1039 56 KB

2

The issue is related to the secretGenerator from Kustomize. The result from that command is base64 encoded secret:

apiVersion: v1
data:
  users: YWxhOm1ha290YQo=
kind: Secret
metadata:
  name: traefik-auth
  namespace: traefik-system
type: Opaque


echo "YWxhOm1ha290YQo="|base64 -d
ala:makota

Traefik is expecting to have a password hashed using the following algorithm MD5, SHA1, or BCrypt.
The htpasswd is recommended to generate passwords as it is described in the docs.

I like very much the idea of using Kustomize to generate passwords - please let me know if you were able to solve that challenge with that templating tool.

Thank you,
Jakub