Make sure the real ip is forwarded through traefik

2024-11-17 22:18:25 +01:00 · 2024-11-17 22:18:25 +01:00 · befce13f80
commit befce13f80
parent 1be1a4bd81
1 changed files with 11 additions and 0 deletions
--- a/infrastructure/controllers/traefik.yaml
+++ b/infrastructure/controllers/traefik.yaml
@ -48,3 +48,14 @@ spec:
    providers:
      kubernetesCRD:
        ingressClass: "traefik-external"
+
+    # This is needed in order to properly forward the real ip to each service
+    # There are likely better ways of handling that, but for now this works
+    hostNetwork: true
+    service:
+      spec:
+        externalTrafficPolicy: Local
+    updateStrategy:
+      rollingUpdate:
+        maxUnavailable: 2
+        maxSurge: 0