Unable to login to Rundeck after successful website load

116 Views Asked by At

I am running 4.x.x version of Rundeck community on ECS. The docker image is hosted in our own ECR customized for adding utilities. I have a realm.properties file defining the credentials for different users and secrets for DB stored in the secretsmanager. This setup is working completely fine.

I am migrating this over to EKS and modified just the docker image with 5.x.x version. I have created secrets in the same EKS cluster and namespace. The rundeck URL webpage is loading fine but unable to login with any of the credentials defined in the realm.properties file.

I also tried the default admin/admin login but that doesn't work too.

Any suggestions on how to resolve this issue?

Dockerfile

ARG RUNDECK_IMAGE
FROM ${RUNDECK_IMAGE}
COPY data/realm.properties /home/rundeck/server/config
COPY data/plugins/. /home/rundeck/libext
RUN sudo apt-get update && sudo apt-get install -y \
    gnupg2 \
    jq \
    iputils-ping \
    sharutils \
    telnet \
    unzip \
    vim
RUN curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" \
    && unzip awscliv2.zip \
    && sudo ./aws/install

I see this on the Chrome devtools console - Refused to send form data to 'https://rundeck.xx.dev/j_security_check' because it violates the following Content Security Policy directive: "form-action 'self'.

Container log:

INFO  web.requests "GET /user/login" 10.x.x.x http  form 2 ? [] (Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
INFO  web.requests "GET /static/images/favicon.ico" 10.x.x.x http  form 1 ? [image/x-icon] (Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit

The webpage just keeps loading.

1

There are 1 best solutions below

0
MegaDrive68k On

You need to add these env vars in your Rundeck container definition

      env:
        - name: RUNDECK_GRAILS_URL
          value: https://<url>:<port>
        - name: RUNDECK_SERVER_FORWARDED
          value: "true"

Same issue.