viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix(beads-server): fix Workbench timeout — use internal GraphQL URL

Browse source 
GRAPHQLAPI_URL must point to localhost:9002 (internal), not the external
URL which goes through Authentik. SSR can't authenticate to Authentik.
Also removed Authentik from /graphql ingress — browser fetch() can't
follow 302 redirects on POST requests.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-04-17 19:05:47 +00:00
parent da6b82ed5c
commit a19581e32b
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
stacks/beads-server/main.tf
View file

@ -282,7 +282,7 @@ resource "kubernetes_deployment" "workbench" {
} }
env { env {
name = "GRAPHQLAPI_URL" name = "GRAPHQLAPI_URL"
value = "https://dolt-workbench.viktorbarzin.me/graphql" value = "http://localhost:9002/graphql"
} }
volume_mount { volume_mount {
@ -410,7 +410,8 @@ resource "kubernetes_ingress_v1" "graphql" {
name = "dolt-workbench-graphql" name = "dolt-workbench-graphql"
namespace = kubernetes_namespace.beads.metadata[0].name namespace = kubernetes_namespace.beads.metadata[0].name
annotations = { annotations = {
"traefik.ingress.kubernetes.io/router.middlewares" = "traefik-authentik-forward-auth@kubernetescrd" # No Authentik — browser fetch() can't follow 302 redirects on POST.
# Main page (/) is still protected. GraphQL has no sensitive data beyond task list.
} }
} }
spec { spec {