From 20627118cc9e3e727347372061b999682c5c63b4 Mon Sep 17 00:00:00 2001 From: Graham Knop Date: Wed, 15 May 2024 00:46:47 +0200 Subject: [PATCH] use real ip from fastly in nginx --- platform/ingress-nginx/kustomization.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/platform/ingress-nginx/kustomization.yaml b/platform/ingress-nginx/kustomization.yaml index 280a5bd..c7364ee 100644 --- a/platform/ingress-nginx/kustomization.yaml +++ b/platform/ingress-nginx/kustomization.yaml @@ -20,3 +20,14 @@ patches: namespace: ingress-nginx spec: replicas: 3 +- target: + kind: ConfigMap + name: ingress-nginx-controller + namespace: ingress-nginx + patch: | + - op: add + path: /data/enable-real-ip + value: "true" + - op: add + path: /data/proxy-real-ip-cidr + value: "23.235.32.0/20,43.249.72.0/22,103.244.50.0/24,103.245.222.0/23,103.245.224.0/24,104.156.80.0/20,140.248.64.0/18,140.248.128.0/17,146.75.0.0/17,151.101.0.0/16,157.52.64.0/18,167.82.0.0/17,167.82.128.0/20,167.82.160.0/20,167.82.224.0/20,172.111.64.0/18,185.31.16.0/22,199.27.72.0/21,199.232.0.0/16,2a04:4e40::/32,2a04:4e42::/32"