cluster

commit 408aa9f5f300ce0af16c7a542d0765be0ead0f45
parent 92dc4e7f297c96f006386b32fefeb21385f6acf7
Author: MTRNord <mtrnord1@gmail.com>
Date:   Thu, 10 Apr 2025 01:00:49 +0200

weird

Diffstat:
M
apps/base/envoy-gateway/release.yaml
 | 
7
+++----

1 file changed, 3 insertions(+), 4 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -127,7 +127,7 @@ spec:
             load-balancer.hetzner.cloud/location: hel1
             load-balancer.hetzner.cloud/name: envoy
             load-balancer.hetzner.cloud/use-private-ip: "true"
-            load-balancer.hetzner.cloud/uses-proxyprotocol: "true"
+            load-balancer.hetzner.cloud/uses-proxyprotocol: "false"
     # no wildcards due to Envoy bug: https://github.com/envoyproxy/gateway/issues/2675#issuecomment-1960449002
     listeners:
         - name: https-mas-midnightthoughts
@@ -568,12 +568,11 @@ spec:
           kind: Gateway
           name: envoy-gateway
     # WARNING: False as cilium routes the gateway locally if used internally with the public domain. HOWEVER then proxy proto cant be used...
-    enableProxyProtocol: true
+    enableProxyProtocol: false
     # Alternative to enableProxyProtocol: true
     clientIPDetection:
         xForwardedFor:
-            # Check if this is correct or if 1 is correct
-            numTrustedHops: 1
+            trustedCIDRs: 10.10.0.0/16
     tcpKeepalive:
         idleTime: 1h
         interval: 75s