Revert "Secure ClearML behind forwardauth (#721)"

This reverts commit 28f4535.
nebari-dev · Sep 17, 2021 · 38b3003 · 38b3003
1 parent 074bcea
commit 38b3003
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 26 deletions.
diff --git a/...e/{{ cookiecutter.repo_directory }}/infrastructure/modules/kubernetes/forwardauth/main.tf b/...e/{{ cookiecutter.repo_directory }}/infrastructure/modules/kubernetes/forwardauth/main.tf
@@ -93,15 +93,6 @@ resource "kubernetes_deployment" "forwardauth-deployment" {
             name  = "LOG_LEVEL"
             value = "trace"
           }
-          env {
-            name  = "AUTH_HOST"
-            value = var.external-url
-          }
-
-          env {
-            name  = "COOKIE_DOMAIN"
-            value = var.external-url
-          }
 
           port {
             container_port = 4181

diff --git a/...kiecutter.repo_directory }}/infrastructure/modules/kubernetes/services/clearml/ingress.tf b/...kiecutter.repo_directory }}/infrastructure/modules/kubernetes/services/clearml/ingress.tf
@@ -6,14 +6,6 @@ locals {
   clearml_webserver            = "${local.clearml-prefix}-webserver"
   clearml_fileserver           = "${local.clearml-prefix}-fileserver"
   clearml_apiserver            = "${local.clearml-prefix}-apiserver"
-
-  forward_auth_middleware = "traefik-forward-auth"
-  clearml_middleware = [
-    {
-      name      = local.forward_auth_middleware
-      namespace = var.namespace
-    }
-  ]
 }
 
 resource "kubernetes_manifest" "clearml-app" {
@@ -30,9 +22,8 @@ resource "kubernetes_manifest" "clearml-app" {
       entryPoints = ["websecure"]
       routes = [
         {
-          kind        = "Rule"
-          match       = "Host(`${local.clearml_webserver_subdomain}.${var.external-url}`)"
-          middlewares = local.clearml_middleware
+          kind  = "Rule"
+          match = "Host(`${local.clearml_webserver_subdomain}.${var.external-url}`)"
           services = [
             {
               name      = local.clearml_webserver
@@ -61,9 +52,8 @@ resource "kubernetes_manifest" "clearml-files" {
       entryPoints = ["websecure"]
       routes = [
         {
-          kind        = "Rule"
-          match       = "Host(`${local.clearml_fileserver_subdomain}.${var.external-url}`)"
-          middlewares = local.clearml_middleware
+          kind  = "Rule"
+          match = "Host(`${local.clearml_fileserver_subdomain}.${var.external-url}`)"
           services = [
             {
               name      = local.clearml_fileserver
@@ -92,9 +82,8 @@ resource "kubernetes_manifest" "clearml-api" {
       entryPoints = ["websecure"]
       routes = [
         {
-          kind        = "Rule"
-          match       = "Host(`${local.clearml_apiserver_subdomain}.${var.external-url}`)"
-          middlewares = local.clearml_middleware
+          kind  = "Rule"
+          match = "Host(`${local.clearml_apiserver_subdomain}.${var.external-url}`)"
           services = [
             {
               name      = local.clearml_apiserver

diff --git a/...ecutter.repo_directory }}/infrastructure/modules/kubernetes/services/clearml/variables.tf b/...ecutter.repo_directory }}/infrastructure/modules/kubernetes/services/clearml/variables.tf
@@ -24,4 +24,5 @@ variable "external-url" {
 
 variable "tls" {
   description = "TLS configuration"
+  type        = object({})
 }