authZ+N chained

deployment/auth-chain.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: https-only
+spec:
+  redirectScheme:
+    scheme: https
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: auth-chain
+  namespace: apps
+spec:
+  chain:
+    middlewares:
+    - name: https-only
+    - name: authn
+    - name: authz

deployment/authZ/kustomization.yaml

@@ -8,4 +8,4 @@ resources:
   - ./deployment.yaml
   - ./service.yaml
   - ./horizontalPodAutoScaler.yaml
-  - ./forwardAuth.yaml
+  - ./middleware.yaml

deployment/authZ/middleware.yaml

@@ -0,0 +1,11 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: authz
+spec:
+  forwardAuth:
+    address: https://gh-authz/auth/
+    authResponseHeaders:
+      - id
+    tls:
+      insecureSkipVerify: true

deployment/backend/ingressRoute.yaml

@@ -15,3 +15,5 @@ spec:
           port: 443
           scheme: https
           serversTransport: gh-backend
+      middlewares:
+        - name: auth-chain

deployment/kustomization.yaml

@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: generations-heritage
+
+bases:
+  - authZ
+  - authN
+  - backend
+  - memgraph
+
+resources:
+  - ./cert-issuer.yaml
+  - ./server-transport.yaml
+  - ./auth-chain.yaml