Inter cluster communication unauthorized

[ja-johns]

version 2.5

I have a 3 node thruk cluster built in a k8s cluster

I have apache configured to perform ldap auth via basic auth

I can auth to all 3 thruk servers, all 3 have rw access to var_path, but all 3 servers believe they are independent and can't reach the other cluster nodes

a tcpdump on each nodes shows a unauthorized response from inter cluster nodes

does inter cluster traffic not forward basic auth info?

I tried to bypass basic auth via apache but that didn't work either

[sni]

The thruk cluster communicates using a key. This only works with thruks cookie authentication. So if you are using basic auth only, then it won't work.

[ja-johns]

I haven't disabled cookie auth, and see an auth cookie in my browsers store. I configured LDAP based on these examples:

https://www.thruk.org/documentation/install-webserver.html

It claims to work with cookie auth. Is there another setting somewhere that is required?

Maybe as a feature request this could be a configurable PSK so that it will work independent of auth methods?

[sni]

Are you using OMD by chance? Then you could have a look at the examples here:
https://github.com/sni/Thruk/tree/master/t/scenarios/cluster_fixed_e2e
Although they don't have LDAP authentication. It should not make a difference, but it might
be easier to first get the clusting running and then switch to ldap auth.