Merge pull request #738 from MetaCell/feature/CH-124

CH-124 add forwarded headers configuration
MetaCell · Mar 20, 2024 · fb49449 · fb49449
2 parents f64b165 + 170feed
commit fb49449
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/deployment-configuration/helm/templates/ingress.yaml b/deployment-configuration/helm/templates/ingress.yaml
@@ -45,6 +45,7 @@ metadata:
     nginx.ingress.kubernetes.io/auth-keepalive-timeout: {{ .Values.proxy.timeout.keepalive | quote }}
     nginx.ingress.kubernetes.io/proxy-read-timeout: {{ .Values.proxy.timeout.read | quote }}
     nginx.ingress.kubernetes.io/proxy-send-timeout: {{ .Values.proxy.timeout.send | quote }}
+    nginx.ingress.kubernetes.io/use-forwarded-headers: {{ .Values.proxy.forwardedHeaders | quote }}
 spec:
   rules:
   {{- range $app := .Values.apps }}

diff --git a/deployment-configuration/helm/values.yaml b/deployment-configuration/helm/values.yaml
@@ -68,6 +68,8 @@ backup:
       # -- K8s cpu resource definition.
       cpu: "50m"
 proxy:
+  # -- Set to false to hide remote client headers. Will hide the client IPs in all logs
+  forwardedHeaders: true
   timeout:
     # -- Timeout for proxy connections in seconds.
     send: 60

diff --git a/docs/ingress-domains-proxies.md b/docs/ingress-domains-proxies.md
@@ -53,6 +53,8 @@ To configure it, override the following values in your `deployment-configuration
 
 ```yaml
 proxy:
+  # -- Set to false to hide remote client headers. Will hide the client IPs in all logs
+  forwardedHeaders: true
   timeout:
     # -- Timeout for proxy connections in seconds.
     send: 60