Set externalTrafficPolicy: Local for nginx service to preserve source IP - required for IP allowlisting

This commit is contained in:
Steven Polley 2023-12-23 10:03:25 -07:00
parent 96c8229bea
commit 8c27f2b0e2

View File

@ -3,10 +3,12 @@
controller: controller:
service: service:
# -- Provisioned manually on external hardware load balancer
externalIPs: externalIPs:
- "10.69.69.51" - "10.69.69.51"
nodePorts: nodePorts:
# -- Node port allocated for the external HTTP listener. If left empty, the service controller allocates one from the configured node port range. # -- Node port allocated for the external HTTP listener. If left empty, the service controller allocates one from the configured node port range.
http: "31451" http: "31451"
# -- Node port allocated for the external HTTPS listener. If left empty, the service controller allocates one from the configured node port range. # -- Node port allocated for the external HTTPS listener. If left empty, the service controller allocates one from the configured node port range.
https: "31207" https: "31207"
externalTrafficPolicy: Local