我在私有(private)子网中托管 Vault 和 Consul 服务器,在这个私有(private)子网内,我有专用实例来充当反向代理服务器,假设该实例名为 (private_subnet_proxy)。
为了能够从公众那里使用 Consul 和 Vault 的 UI,我专用了一个公共(public)实例作为从公共(public)网络到 private_subnet_proxy 的反向代理。
Consul 的 UI 与我使用的方法配合得很好(详细信息请参见 private-subnet-proxy.conf 和 public-subnet-proxy.conf 的配置> )。然而,当我尝试调用 Vault 的 UI 时,它给了我一个奇怪的错误。
Failed to find a valid digest in the 'integrity' attribute for resource 'https://example.com/vault/ui/assets/vendor-170f8056c4a9bc57b01e6b288c9056e5.js' with computed SHA-256 integrity 'Vl+es41l9uLYuOXW/5b17aSw8jo6h94D00opmpuhryY='. The resource has been blocked.
还有其他人遇到过这个问题并可以帮助我解决吗?我将不胜感激任何想法或建议。
私有(private)子网-proxy.conf
server {
listen 80;
listen [::]:80;
upstream vault {
server vault_instance:8200;
}
location /vault/ui/ {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
resolver 127.0.0.1;
allow "127.0.0.1";
allow "10.10.1.12";
deny all;
proxy_pass http://vault/ui/;
proxy_set_header Accept-Encoding "";
sub_filter_types text/css text/http;
sub_filter_once off;
sub_filter /v1/ /vault_v1/;
sub_filter /ui/ /vault/ui/;
sub_filter "rel=\"stylesheet\"" "";
}
location /vault_v1/ {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
proxy_pass http://vault/v1/;
sub_filter_types text/css text/http;
sub_filter_once off;
sub_filter /v1/ /vault_v1/;
sub_filter /ui/ /vault/ui/;
sub_filter "rel=\"stylesheet\"" "";
}
}
公共(public)子网代理.conf
server {
error_page 497 https://$host:$server_port$request_uri;
auth_basic "Administrator's Area";
auth_basic_user_file /etc/apache2/.htpasswd;
listen 443 default_server ssl;
server_name example.com www.example.com;
location /vault/ {
proxy_pass http://private_subnet_proxy/vault/ui/;
}
location /vault_v1/ {
proxy_pass http://private_subnet_proxy/vault_v1/;
}
}
最佳答案
此 github 存储库中包含的步骤帮助我在 nginx 反向代理后面设置 Vault UI
关于user-interface - Hashicorp Vault UI - 无法在 'integrity' 属性中找到有效的摘要...资源已被阻止,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/63195198/