enable real ip on ingress nginx to track cf ips [ci skip]

2025-01-16 22:09:27 +00:00 · 2025-01-16 22:09:27 +00:00 · d1e0e2c5c7
commit d1e0e2c5c7
parent bf5c1b9774
1 changed files with 4 additions and 1 deletions
--- a/modules/kubernetes/nginx-ingress/main.tf
+++ b/modules/kubernetes/nginx-ingress/main.tf
@ -310,7 +310,10 @@ resource "kubernetes_config_map" "ingress_nginx_controller" {
    }
  }
  data = {
-    allow-snippet-annotations = true
+    use-forwarded-headers      = "true"
+    compute-full-forwarded-for = "true"
+    enable-real-ip             = "true"
+    allow-snippet-annotations  = true
    # limit-req-status-code        = 429
    # limit-conn-status-code       = 429
    enable-modsecurity           = true