From 77ab8127f23a17298bb9b0703e00a72ff488dcba Mon Sep 17 00:00:00 2001
From: Junwei Zhao <wahyd4@gmail.com>
Date: Wed, 6 Nov 2024 14:17:13 +1100
Subject: [PATCH] Skip auth for /public endpoints

---
 k8s/manifest.yaml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/k8s/manifest.yaml b/k8s/manifest.yaml
index 99cbdec..b6919af 100644
--- a/k8s/manifest.yaml
+++ b/k8s/manifest.yaml
@@ -112,6 +112,11 @@ metadata:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
     nginx.ingress.kubernetes.io/auth-url: "https://id.junv.cc/oauth2/auth"
     nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.cc/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    # Skip authentication for /public
+    nginx.ingress.kubernetes.io/auth-snippet: |
+      if ($request_uri ~ "/public") {
+        return 200;
+      }
 spec:
   tls:
     - hosts:
@@ -139,6 +144,33 @@ spec:
                 name: links
                 port:
                   number: 80
+---
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: links-public-ingress
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    kubernetes.io/tls-acme: "true"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  tls:
+    - hosts:
+        - go.junv.cc
+      secretName: links-tls
+  rules:
+    - host: go.junv.cc
+      http:
+        paths:
+          - path: /public
+            pathType: Prefix
+            backend:
+              service:
+                name: links
+                port:
+                  number: 80
+
 
 ---