otomi-core icon indicating copy to clipboard operation
otomi-core copied to clipboard

Published 20 hours ago • verified publisher icon redkubes

Support forwarded-for headers

Open j-zimnowoda opened this issue 10 months ago • 0 comments

WHY

There can be many proxies in from of nginx-ingress-controller. It means that applications in k8s may not see the original source IP.

User Story

AS Aadmin I WANT TO set number of trusted proxies SOI networking stack in k8s cluster is aware of that.

Acceptance criteria

GIVENVarious proxy configuration in from of K8s cluster WHEN cluster. numTrustedProxies is bigger than 0 THEN the use-forwarded-headers: true annotation is added to every Ingress AND apps.istio.meshConfig.defaultConfig.gatewayTopology.numTrustedProxies is set to cluster. numTrustedProxies

Definition of done

  • [ ] Relevant PRs are merged
  • [ ] Tested by peer
  • [ ] Updated documentation reviewed by peer
  • [ ] Short demo video recorded and stored on google drive (if applicable)

j-zimnowoda avatar Apr 25 '24 13:04 j-zimnowoda