Merge pull request #738 from MetaCell/feature/CH-124

CH-124 add forwarded headers configuration

Author: filippomc

deployment-configuration/helm/templates/ingress.yaml

@@ -45,6 +45,7 @@ metadata:
     nginx.ingress.kubernetes.io/auth-keepalive-timeout: {{ .Values.proxy.timeout.keepalive | quote }}
     nginx.ingress.kubernetes.io/proxy-read-timeout: {{ .Values.proxy.timeout.read | quote }}
     nginx.ingress.kubernetes.io/proxy-send-timeout: {{ .Values.proxy.timeout.send | quote }}
+    nginx.ingress.kubernetes.io/use-forwarded-headers: {{ .Values.proxy.forwardedHeaders | quote }}
 spec:
   rules:
   {{- range $app := .Values.apps }}

deployment-configuration/helm/values.yaml

@@ -68,6 +68,8 @@ backup:
       # -- K8s cpu resource definition.
       cpu: "50m"
 proxy:
+  # -- Set to false to hide remote client headers. Will hide the client IPs in all logs
+  forwardedHeaders: true
   timeout:
     # -- Timeout for proxy connections in seconds.
     send: 60

docs/ingress-domains-proxies.md

@@ -53,6 +53,8 @@ To configure it, override the following values in your `deployment-configuration
 
 ```yaml
 proxy:
+  # -- Set to false to hide remote client headers. Will hide the client IPs in all logs
+  forwardedHeaders: true
   timeout:
     # -- Timeout for proxy connections in seconds.
     send: 60