From 1c107312e4d3f83cde3713b528c07d7237503371 Mon Sep 17 00:00:00 2001 From: Bojan Kucera Date: Thu, 5 Jun 2025 22:15:19 -0400 Subject: [PATCH] fixed k8s deployments to forward ip --- k8s-deployment.yaml | 1 + k8s-ingress.yaml | 5 ++++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/k8s-deployment.yaml b/k8s-deployment.yaml index 773376b..492ac27 100644 --- a/k8s-deployment.yaml +++ b/k8s-deployment.yaml @@ -64,6 +64,7 @@ metadata: labels: app: proxy-detection-api spec: + externalTrafficPolicy: Local # Important for real IP selector: app: proxy-detection-api ports: diff --git a/k8s-ingress.yaml b/k8s-ingress.yaml index 6786e3e..a0768fd 100644 --- a/k8s-ingress.yaml +++ b/k8s-ingress.yaml @@ -6,7 +6,10 @@ metadata: cert-manager.io/cluster-issuer: letsencrypt-prod nginx.ingress.kubernetes.io/ssl-redirect: "true" nginx.ingress.kubernetes.io/force-ssl-redirect: "true" - + nginx.ingress.kubernetes.io/use-real-ip: "true" + nginx.ingress.kubernetes.io/real-ip-header: "X-Forwarded-For" + nginx.ingress.kubernetes.io/forwarded-for-header: "X-Forwarded-For" + nginx.ingress.kubernetes.io/proxy-real-ip-cidr: "0.0.0.0/0" labels: app: proxy-detection-api spec: