commit 52109f6bcbf48b55f5f7fcc3583a21a5a3393792 parent 3d00eb7af9152842a02896c03a3dd34f7c3d9f5d Author: MTRNord <mtrnord1@gmail.com> Date: Thu, 10 Apr 2025 01:32:20 +0200 Meow Diffstat:
| M | apps/base/envoy-gateway/release.yaml | | | 6 | +++--- |
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml @@ -127,7 +127,7 @@ spec: load-balancer.hetzner.cloud/location: hel1 load-balancer.hetzner.cloud/name: envoy load-balancer.hetzner.cloud/use-private-ip: "true" - load-balancer.hetzner.cloud/uses-proxyprotocol: "true" + load-balancer.hetzner.cloud/uses-proxyprotocol: "false" # no wildcards due to Envoy bug: https://github.com/envoyproxy/gateway/issues/2675#issuecomment-1960449002 listeners: - name: https-mas-midnightthoughts @@ -567,8 +567,8 @@ spec: - group: gateway.networking.k8s.io kind: Gateway name: envoy-gateway - # WARNING: False as cilium routes the gateway locally if used internally with the public domain. HOWEVER then proxy proto cant be used... - enableProxyProtocol: true + # WARNING: Cilium 1.17+ only supports the correct ipMode magic for this to work. Hence it currently fails + enableProxyProtocol: false # Alternative to enableProxyProtocol: true clientIPDetection: xForwardedFor: