Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Access to '/manage/**' Endpoints

The /manage/** endpoints provided by the AUTHENTICATION Service are now available via a separate port that is protected from external access. Especially for customers using the Tenant Management services, the configuration of the AUTHENTICATION Service has to be adjusted and an ancillary Kubernetes Service has to be created as follows.

...

  • Create a file authentication-internal.yml with the following content:

    Code Block
    languageyml
    kind: Service
    apiVersion: v1
    metadata:
      name: authentication-internal
    spec:
      selector:
        app: authentication
      type: ClusterIP
      ports:
      - protocol: TCP
        port: 80
        targetPort: 8081


  • Run the command:

    Code Block
    languagepowershell
    kubectl -n yuuvis apply -f authentication-internal.yml


Note
titleImportant Safety Note

The AUTHENTICATION service manages the cross-tenant requests of service accounts via the separate port 8081. This port must be accessible only within the yuuvis® Momentum cluster to ensure strict separation of tenants for users. Never expose this internal port for public access!

...