I’ve set up Alpha in a Kubernetes Cluster accessible through an Ingress (ingress-nginx). On the Ingress, I’ve enabled client certificate authentication with the following configuration:
nginx.ingress.kubernetes.io/auth-tls-verify-client: 'on' nginx.ingress.kubernetes.io/auth-tls-secret: 'dgraph/alpha-cert'
- After submitting it, the page loads with the message “Dgraph browser is available for running separately using the dgraph-ratel binary”
- Failure to submit an authorized cert would result in NGINX 400 Bad Request - No required SSL certificate was sent
However, when I attempt to connect to the Alpha through Ratel (both play.dgraph.io and locally hosted), the connection will simply fail without any prompt for client certificate. A bunch of 400 errors can be observed in the browser’s console, and further inspections would reveal that it’s the same 400 Bad Request error.
Is there any way to resolve this issue without setting up mTLS using Alpha itself?