feat(traefik): add support for proxyProtocol (#3593)

* feat(traefik): add support for proxyProtocol * whoops * empty space * proxyprot on all entrypoints * whoops again * no fixes here * Update charts/stable/traefik/templates/_args.tpl * formatting Co-authored-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
2022-08-27 22:58:46 +02:00
parent 857b0a8302
commit 274c522df6
9 changed files with 147 additions and 94 deletions
@@ -0,0 +1,32 @@
+                          - variable: forwardedHeaders
+                            label: Accept Forwarded Headers
+                            schema:
+                              additional_attrs: true
+                              type: dict
+                              attrs:
+                                - variable: enabled
+                                  label: Enable
+                                  schema:
+                                    type: boolean
+                                    default: false
+                                    show_subquestions_if: true
+                                    subquestions:
+                                      - variable: trustedIPs
+                                        label: Trusted IPs
+                                        description: Trust Forwarded Headers from specific IPs.
+                                        schema:
+                                          type: list
+                                          default: []
+                                          items:
+                                            - variable: trustedIPsEntry
+                                              label: ""
+                                              schema:
+                                                type: string
+                                                required: true
+                                                default: ""
+                                      - variable: insecureMode
+                                        label: Insecure Mode
+                                        description: Always Trust Forwarded Headers
+                                        schema:
+                                          type: boolean
+                                          default: false
@@ -0,0 +1,33 @@
+                          - variable: proxyProtocol
+                            label: Accept Proxy Protocol connections
+                            description: If Proxy Protocol header parsing is enabled for the entry point, this entry point can accept connections with or without Proxy Protocol headers.
+                            schema:
+                              additional_attrs: true
+                              type: dict
+                              attrs:
+                                - variable: enabled
+                                  label: Enable
+                                  schema:
+                                    type: boolean
+                                    default: false
+                                    show_subquestions_if: true
+                                    subquestions:
+                                      - variable: trustedIPs
+                                        label: Trusted IPs
+                                        description: Only IPs in trustedIPs will lead to remote client address replacement
+                                        schema:
+                                          type: list
+                                          default: []
+                                          items:
+                                            - variable: trustedIPsEntry
+                                              label: ""
+                                              schema:
+                                                type: string
+                                                required: true
+                                                default: ""
+                                      - variable: insecureMode
+                                        label: Insecure Mode
+                                        description: Trust every incoming connection
+                                        schema:
+                                          type: boolean
+                                          default: false