Skip to content

How to verify session_secret is same for all kubernetes Pods? #535

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
devshrm opened this issue Mar 11, 2025 · 0 comments
Open

How to verify session_secret is same for all kubernetes Pods? #535

devshrm opened this issue Mar 11, 2025 · 0 comments

Comments

@devshrm
Copy link

devshrm commented Mar 11, 2025

I am using docker-kong-oidc (which is using lua-resty-openidc) as docker image of Kong in kubernetes helm chart. Increased kubernetes Pods of kong using replicaCount to more than 1.

X_SESSION_SECRET env variable is patched into nginx_kong.lua as session_secret in the Dockerfile :

sed -i '/server_name kong;/a\ \n\ set \$session_secret "\${{X_SESSION_SECRET}}";\n\ ' "$TPL"

i am not passing any env X_SESSION_SECRET

so it means every Pod of Kong would be using different secret to encrypt the cookie ?

how to find the secret generated by lua-resty-session for encryption and decryption for each Pod ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant