From 547fafaeab6211921c67e9406e843653ff463935 Mon Sep 17 00:00:00 2001 From: Dreaded_X Date: Mon, 6 Jan 2025 05:12:20 +0100 Subject: [PATCH] Preserve client source ip over traefik --- clusters/titan.lan.huizinga.dev/infrastructure.yaml | 6 ++---- infrastructure/controllers/traefik.yaml | 6 +++--- 2 files changed, 5 insertions(+), 7 deletions(-) diff --git a/clusters/titan.lan.huizinga.dev/infrastructure.yaml b/clusters/titan.lan.huizinga.dev/infrastructure.yaml index aeb2bd6..07fd4aa 100644 --- a/clusters/titan.lan.huizinga.dev/infrastructure.yaml +++ b/clusters/titan.lan.huizinga.dev/infrastructure.yaml @@ -20,10 +20,8 @@ spec: patches: - patch: | - op: add - path: /spec/values/service - value: - spec: - loadBalancerIP: 10.0.2.2 + path: /spec/values/service/spec/loadBalancerIP + value: 10.0.2.2 target: kind: HelmRelease name: traefik diff --git a/infrastructure/controllers/traefik.yaml b/infrastructure/controllers/traefik.yaml index 81c7259..3267e94 100644 --- a/infrastructure/controllers/traefik.yaml +++ b/infrastructure/controllers/traefik.yaml @@ -56,9 +56,9 @@ spec: # There are likely better ways of handling that, but for now this works # TODO(Tim): Figure out how to properly forward the IP # hostNetwork: true - # service: - # spec: - # externalTrafficPolicy: Local + service: + spec: + externalTrafficPolicy: Local # updateStrategy: # rollingUpdate: # maxUnavailable: 2