more ingress

k8s-ingress.yaml

@@ -1,3 +1,13 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: custom-headers
+  namespace: ingress-nginx
+data:
+  X-Real-IP: '$remote_addr'
+  X-Forwarded-For: '$proxy_add_x_forwarded_for'
+  X-Forwarded-Proto: '$scheme'
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -7,13 +17,10 @@ metadata:
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     # Aggressive real IP configuration
-    nginx.ingress.kubernetes.io/configuration-snippet: |
+    # Use allowed annotations instead of snippets
-      more_set_headers "X-Real-IP $remote_addr";
+    nginx.ingress.kubernetes.io/proxy-set-headers: "ingress-nginx/custom-headers"
-      more_set_headers "X-Forwarded-For $proxy_add_x_forwarded_for";
+    nginx.ingress.kubernetes.io/enable-real-ip: "true"
-    nginx.ingress.kubernetes.io/server-snippet: |
+    nginx.ingress.kubernetes.io/real-ip-header: "X-Forwarded-For"
-      set_real_ip_from 0.0.0.0/0;
-      real_ip_header X-Forwarded-For;
-      real_ip_recursive on;
   labels:
     app: proxy-detection-api
 spec: