[pomerium] add externalTrafficPolicy for proxy service (#293)

pomerium · Apr 6, 2022 · 29c1d97 · 29c1d97
1 parent 52eba31
commit 29c1d97
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 1 deletion.
diff --git a/charts/pomerium/Chart.yaml b/charts/pomerium/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: pomerium
-version: 31.0.3
+version: 31.1.0
 appVersion: 0.17.0
 home: http://www.pomerium.com/
 icon: https://www.pomerium.com/img/icon.svg

diff --git a/charts/pomerium/README.md b/charts/pomerium/README.md
@@ -335,6 +335,7 @@ A full listing of Pomerium's configuration variables can be found on the [config
 | `proxy.deployment.podAnnotations`                            | Annotations for the proxy deployment pods                                                                                                                                                                                                                                                                                                                             | `{}`                                                                        |
 | `proxy.redirectServer`                                       | Expose redirect server for http->https on port 80 of the proxy service                                                                                                                                                                                                                                                                                                | `false`                                                                     |
 | `proxy.service.annotations`                                  | Annotations for the proxy service. If none given, then use value of `service.annotations`                                                                                                                                                                                                                                                                             | `{}`                                                                        |
+| `proxy.service.externalTrafficPolicy`                        | Sets `service.spec.externalTrafficPolicy` for the pomerium proxy service.  Set to `Local` to ensure the proxy is able to see client IPs accurately.  [See more](https://kubernetes.io/docs/tutorials/services/source-ip/).                                                                                                                                            |                                                                             |
 | `proxy.service.nodePort`                                     | Specify the nodePort when using service type NodePort                                                                                                                                                                                                                                                                                                                 |                                                                             |
 | `proxy.service.type`                                         | Specify the service type (ClusterIP, NodePort or LoadBalancer) for the proxy service                                                                                                                                                                                                                                                                                  | `ClusterIP`                                                                 |
 | `proxy.serviceAccount.annotations`                           | Annotations for the proxy service account                                                                                                                                                                                                                                                                                                                             | `{}`                                                                        |

diff --git a/charts/pomerium/templates/proxy-service.yaml b/charts/pomerium/templates/proxy-service.yaml
@@ -29,6 +29,9 @@ spec:
   {{- else }}
   type: {{ coalesce .Values.proxy.service.type "ClusterIP" }}
   {{- end }}
+  {{- if .Values.proxy.service.externalTrafficPolicy }}
+  externalTrafficPolicy: {{ .Values.proxy.service.externalTrafficPolicy }}
+  {{- end }}
   ports:
     - port: {{ template "pomerium.proxy.trafficPort.number" . }}
       targetPort: {{ template "pomerium.proxy.httpTrafficPort.scheme" . }}