通过入口控制器向下游传递cookie（cookie被阻止）

Question

我试图将身份验证cookie从负载均衡器（在群集外部）通过入口控制器传递到后端服务。但是，入口未转发Cookie。我尝试了文档中有关入口和配置映射的所有技巧。如何获取入口以转发从上游服务器收到的Cookie？

Kubernetes GitVersion 1.10.4

入口

{
  "kind": "Ingress",
  "apiVersion": "extensions/v1beta1",
  "metadata": {
    "name": "Xspace-ingress",
    "namespace": "Xspace",
    "selfLink": "/apis/extensions/v1beta1/namespaces/Xspace/ingresses/Xspace-ingress",
    "annotations": {
      "nginx.ingress.kubernetes.io/affinity": "cookie",
      "nginx.ingress.kubernetes.io/allow-http": "true",
      "nginx.ingress.kubernetes.io/rewrite-target": "/",
      "nginx.ingress.kubernetes.io/session-cookie-hash": "sha1",
      "nginx.ingress.kubernetes.io/session-cookie-name": "cc-cookiemonster",
      "nginx.ingress.kubernetes.io/ssl-passthrough": "false",
      "nginx.ingress.kubernetes.io/ssl-redirect": "false"
    }
  },
  "spec": {
    "rules": [
      {
        "host": "sample.com",
        "http": {
          "paths": [
            {
              "backend": {
                "serviceName": "Xsvc",
                "servicePort": 8080
              }
            }
          ]
        }
      }
    ]
  },
  "status": {
    "loadBalancer": {
      "ingress": [
        {}
      ]
    }
  }
}

配置映射

{
  "kind": "ConfigMap",
  "apiVersion": "v1",
  "metadata": {
    "name": "nginx-ingress-controller",
    "namespace": "Xspace",
    "selfLink": "/api/v1/namespaces/Xspace/configmaps/nginx-ingress-controller",
    "labels": {
      "app": "nginx-ingress"
    }
  },
  "data": {
    "allow-backend-server-header": "true",
    "enable-underscores-in-headers": "true",
    "enable-vts-status": "false",
    "ignore-invalid-headers": "false",
    "proxy-add-original-uri-header": "true",
    "use-forwarded-headers": "true",
    "worker-processes": "3"
  }
}