add useProxyProtocol option to the CRD (#694)

pomerium · Jul 6, 2023 · b4b1322 · b4b1322
1 parent f8f9f09
commit b4b1322
Show file tree

Hide file tree

Showing 5 changed files with 17 additions and 0 deletions.
diff --git a/apis/ingress/v1/pomerium_types.go b/apis/ingress/v1/pomerium_types.go
@@ -305,6 +305,9 @@ type PomeriumSpec struct {
 
 	// Timeout specifies the <a href="https://www.pomerium.com/docs/reference/global-timeouts">global timeouts</a> for all routes.
 	Timeouts *Timeouts `json:"timeouts,omitempty"`
+
+	// UseProxyProtocol enables <a href="https://www.pomerium.com/docs/reference/use-proxy-protocol">Proxy Protocol</a> support.
+	UseProxyProtocol *bool `json:"useProxyProtocol,omitempty"`
 }
 
 // Timeouts allows to configure global timeouts for all routes.

diff --git a/apis/ingress/v1/zz_generated.deepcopy.go b/apis/ingress/v1/zz_generated.deepcopy.go
diff --git a/config/crd/bases/ingress.pomerium.io_pomerium.yaml b/config/crd/bases/ingress.pomerium.io_pomerium.yaml
@@ -328,6 +328,10 @@ spec:
                     format: duration
                     type: string
                 type: object
+              useProxyProtocol:
+                description: UseProxyProtocol enables <a href="https://www.pomerium.com/docs/reference/use-proxy-protocol">Proxy
+                  Protocol</a> support.
+                type: boolean
             required:
             - secrets
             type: object

diff --git a/deployment.yaml b/deployment.yaml
@@ -336,6 +336,10 @@ spec:
                     format: duration
                     type: string
                 type: object
+              useProxyProtocol:
+                description: UseProxyProtocol enables <a href="https://www.pomerium.com/docs/reference/use-proxy-protocol">Proxy
+                  Protocol</a> support.
+                type: boolean
             required:
             - secrets
             type: object

diff --git a/pomerium/config.go b/pomerium/config.go
@@ -96,6 +96,7 @@ func applyJWTClaimHeaders(_ context.Context, p *pb.Config, c *model.Config) erro
 func applySetOtherOptions(_ context.Context, p *pb.Config, c *model.Config) error {
 	p.Settings.SetResponseHeaders = c.Spec.SetResponseHeaders
 	p.Settings.ProgrammaticRedirectDomainWhitelist = c.Spec.ProgrammaticRedirectDomains
+	p.Settings.UseProxyProtocol = c.Spec.UseProxyProtocol
 	return nil
 }