Skip to content

Conversation

@elkh510
Copy link

@elkh510 elkh510 commented Nov 20, 2025

This change adds support for overriding the ingress backend service name and port via the serviceName and servicePort values while keeping the existing defaults.

These overrides are required to support AWS ALB “action” annotations such as:

alb.ingress.kubernetes.io/actions.block-master-account: |
  {
    "type": "fixed-response",
    "fixedResponseConfig": {
      "contentType": "text/plain",
      "statusCode": "403",
      "messageBody": "Access Forbidden"
    }
  }

alb.ingress.kubernetes.io/actions.redirect-root: |
  {
    "type": "redirect",
    "redirectConfig": {
      "statusCode": "HTTP_301",
      "path": "/realms/shared/account",
      "query": "#{query}"
    }
  }

In these cases, the ingress backend must reference a logical action name instead of a real Kubernetes Service:

paths:
  - path: /realms/master/account/
    pathType: Prefix
    backend:
      service:
        name: block-master-account
        port:
          name: use-annotation

Without the ability to override serviceName and servicePort, such ALB action backends cannot be expressed through the chart values.

@elkh510 elkh510 requested a review from a team as a code owner November 20, 2025 07:29
Signed-off-by: elkh510 <[email protected]>
@elkh510
Copy link
Author

elkh510 commented Nov 20, 2025

@stefangries hi
Could you spare a few minutes for this PR?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant