Using includeSubdomains: true in a Filter causes crash in Ambassador 1.5.4
See original GitHub issueDescribe the bug
Using includeSubdomains: true
in a Filter
causes ambassador to crash at startup, or to raise an error when the Filter
is added.
To Reproduce Steps to reproduce the behavior:
- Apply a
Filter
withincludeSubdomains: true
set for one of itsspec.OAuth2.protectedOrigins
- Check logs for error or attempt to access a site included as part of the
Filter
Expected behavior
The Filter
should not error and should properly protect subdomains as expected.
Versions (please complete the following information):
- Ambassador: 1.5.4
- Kubernetes environment: EKS
- Version: 1.14
Additional context
Here is the Filter
which causes issues:
apiVersion: getambassador.io/v2
kind: Filter
metadata:
name: my-test
spec:
OAuth2:
authorizationURL: https://cognito-idp.us-east-1.amazonaws.com/{sensitive}
clientID: {sensitive}
secret: {sensitive}
protectedOrigins:
- origin: https://my-test.{sensitive}
includeSubdomains: true
Removing includeSubdomains: true
, as shown below, allows the Filter
to apply correctly and start working.
apiVersion: getambassador.io/v2
kind: Filter
metadata:
name: my-test
spec:
OAuth2:
authorizationURL: https://cognito-idp.us-east-1.amazonaws.com/{sensitive}
clientID: {sensitive}
secret: {sensitive}
protectedOrigins:
- origin: https://my-test.{sensitive}
gz#453
Issue Analytics
- State:
- Created 3 years ago
- Comments:11 (6 by maintainers)
Top Results From Across the Web
Using includeSubdomains: true in a Filter causes crash in ...
Describe the bug Using includeSubdomains: true in a Filter causes ambassador to crash at startup, or to raise an error when the Filter...
Read more >Search Results - CVE
Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote...
Read more >Snap must face suit over speed filter's role in deadly car crash
(Reuters) - Snap Inc must face a lawsuit accusing it of causing a car accident that killed three teenagers by encouraging unsafe driving ......
Read more >Snapchat Can't Escape Death Suit Over 'Speed Filter' Crash
A California federal judge won't let Snapchat out of a suit alleging that its 'Speed Filter' encouraged reckless driving, leading to a crash...
Read more >Hindustan Ambassador - Wikipedia
The Hindustan Ambassador is an automobile manufactured by Hindustan Motors of India from 1957 to 2014, with improvements and changes over its production ......
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
This fix is in 1.7.0, which is now available.
Oops, closed prematurely. We have a fix and will be shipping it with 1.7.0 in the coming days.