annotation permanent-redirect do not support '%20'

[TomBalt]

Hello Y'all,

We were migrating from on-prem K8s to AKS. As we started to use "Managed NGINX ingress with the application routing add-on" we ran in to some issues with annotation validation.

For example:
if I set permanent-redirect value to something that contains '%20' I receive and error - validators.go:237] validation error on ingress prod-ns/redirect-org: annotation permanent-redirect contains invalid value https://super-site.sharepoint.com/sites/teams/IT/devops123/IT%20OPS

This is real example:

nginx.ingress.kubernetes.io/permanent-redirect: https://super-site.sharepoint.com/sites/teams/IT/devops123/IT%20OPS

Questions:

1. Is there a way to make it work?
2. If not, can annotation validation be disabled for Managed Nginx ingress?

P.S. I have used this article to setup Nginx ingress class and ingress controller - https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-configuration
P.S.S. Old version of nginx installed from Helm works fine.

[OliverMKing]

Where on you seeing this error?

We shouldn't be doing anything on our end to block this. I wonder if it's a yaml syntax thing.

[TomBalt]

Check ingress controller logs and you will see the error message.

…

On Wed, 10 Jul 2024, 19:16 Oliver King, ***@***.***> wrote: Where on you seeing this error? — Reply to this email directly, view it on GitHub <#245 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEV5TY3SN5KJBNATX3THOY3ZLVM6DAVCNFSM6AAAAABKH33OPSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMRQHE2DOMJUGM> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[sbockelman]

Running into similar issue with email addresses in annotations. Trying to use oauth2_proxy with auth-url annotation:

---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: testing
  annotations:
    nginx.ingress.kubernetes.io/auth-url: "https://$host/oauth2/auth?allowed_emails=test.user@testdomain.com"

logs:

W1125 20:50:56.016810       7 validators.go:237] validation error on ingress default/test: annotation auth-url contains invalid value https://$host/oauth2/auth?allowed_emails=test.user@testdomain.com
E1125 20:50:56.016829       7 annotations.go:193] "ingress contains invalid annotation value" err="annotation nginx.ingress.kubernetes.io/auth-url contains invalid value"

Have tried to escape and encode the . and @ and niether worked. Validated the uptream nginx/ingress works fine.