From f35cf3173d8c6593611b988fc28b245f949320ae Mon Sep 17 00:00:00 2001 From: Rory McNicholl Date: Thu, 20 Oct 2022 17:26:45 +0100 Subject: [PATCH] add internal node IPs as set_real_ip_from in attempt to get them filtered out --- ops/staging-deploy.tmpl.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/ops/staging-deploy.tmpl.yaml b/ops/staging-deploy.tmpl.yaml index d86bfa5d..cb8a27f2 100644 --- a/ops/staging-deploy.tmpl.yaml +++ b/ops/staging-deploy.tmpl.yaml @@ -255,6 +255,14 @@ nginx: set_real_ip_from 2405:8100::/32; set_real_ip_from 2a06:98c0::/29; set_real_ip_from 2c0f:f248::/32; + # Added by RM Adding _internal_ node IPs to + # see if this helps with getting the client + # IP to pods (bit of a punt) + set_real_ip_from 192.168.92.139/32; + set_real_ip_from 192.168.177.103/32; + set_real_ip_from 192.168.191.120/32; + set_real_ip_from 192.168.192.119/32; + set_real_ip_from 192.168.223.177/32; real_ip_header X-Forwarded-For; real_ip_recursive on;