Aleksei Sviridkin 8df4b0b0f1 feat(ingress): add proxyProtocol knob to ingress-nginx ...

Expose a proxyProtocol value on the Ingress application that turns on
ingress-nginx use-proxy-protocol with real-ip-header=proxy_protocol and
enable-real-ip. The host control plane also enables it through the
_cluster.proxy-protocol switch, applied only to the external-facing
ingress (the namespace named by expose-ingress).

use-forwarded-headers / compute-full-forwarded-for are deliberately not
set: without a paired proxy-real-ip-cidr they let clients spoof
X-Forwarded-For, and the PROXY-protocol frame is already the source of
truth for the client address.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-06-09 12:50:35 +03:00

..

bootbox

Prepare release v1.4.0-rc.2

2026-05-13 21:48:39 +00:00

etcd

feat(platform): add implementation of backup-strategy controller for etcd

2026-05-22 14:35:08 +04:00

external-dns

fix(platform): drop deprecated upgrade.force from HelmReleases; fix kafka WorkloadMonitor replicas paths

2026-05-28 12:43:50 +05:00

gateway

docs(gateway): describe inheritance model and DNS-01 SAN expansion

2026-05-25 19:02:22 +03:00

info

fix(info): use root-host for Keycloak OIDC issuer URL in tenant kubeconfig

2026-05-21 11:28:20 +05:00

ingress

feat(ingress): add proxyProtocol knob to ingress-nginx

2026-06-09 12:50:35 +03:00

monitoring

fix(build): read --cache-from from ghcr :latest so PR builds warm-start

2026-06-09 14:24:36 +05:00

seaweedfs

chore(seaweedfs): bump seaweedfs-cosi-driver to v0.3.1

2026-06-03 00:11:27 +03:00

Makefile

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00