question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Using includeSubdomains: true in a Filter causes crash in Ambassador 1.5.4

See original GitHub issue

Describe the bug Using includeSubdomains: true in a Filter causes ambassador to crash at startup, or to raise an error when the Filter is added.

To Reproduce Steps to reproduce the behavior:

  1. Apply a Filter with includeSubdomains: true set for one of its spec.OAuth2.protectedOrigins
  2. Check logs for error or attempt to access a site included as part of the Filter

Expected behavior The Filter should not error and should properly protect subdomains as expected.

Versions (please complete the following information):

  • Ambassador: 1.5.4
  • Kubernetes environment: EKS
  • Version: 1.14

Additional context Here is the Filter which causes issues:

apiVersion: getambassador.io/v2
kind: Filter
metadata:
  name: my-test
spec:
  OAuth2:
    authorizationURL: https://cognito-idp.us-east-1.amazonaws.com/{sensitive}
    clientID: {sensitive}
    secret: {sensitive}
    protectedOrigins:
      - origin: https://my-test.{sensitive}
        includeSubdomains: true

Removing includeSubdomains: true, as shown below, allows the Filter to apply correctly and start working.

apiVersion: getambassador.io/v2
kind: Filter
metadata:
  name: my-test
spec:
  OAuth2:
    authorizationURL: https://cognito-idp.us-east-1.amazonaws.com/{sensitive}
    clientID: {sensitive}
    secret: {sensitive}
    protectedOrigins:
      - origin: https://my-test.{sensitive}

gz#453

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:11 (6 by maintainers)

github_iconTop GitHub Comments

1reaction
khusseycommented, Aug 27, 2020

This fix is in 1.7.0, which is now available.

1reaction
khusseycommented, Aug 17, 2020

Oops, closed prematurely. We have a fix and will be shipping it with 1.7.0 in the coming days.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Using includeSubdomains: true in a Filter causes crash in ...
Describe the bug Using includeSubdomains: true in a Filter causes ambassador to crash at startup, or to raise an error when the Filter...
Read more >
Search Results - CVE
Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote...
Read more >
Snap must face suit over speed filter's role in deadly car crash
(Reuters) - Snap Inc must face a lawsuit accusing it of causing a car accident that killed three teenagers by encouraging unsafe driving ......
Read more >
Snapchat Can't Escape Death Suit Over 'Speed Filter' Crash
A California federal judge won't let Snapchat out of a suit alleging that its 'Speed Filter' encouraged reckless driving, leading to a crash...
Read more >
Hindustan Ambassador - Wikipedia
The Hindustan Ambassador is an automobile manufactured by Hindustan Motors of India from 1957 to 2014, with improvements and changes over its production ......
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found