From e2f632580f289822ee55df34f49b04da8509e3bc Mon Sep 17 00:00:00 2001
From: Denis Mishin <dmishin@pomerium.com>
Date: Thu, 5 Sep 2024 11:54:54 -0400
Subject: [PATCH] deployment: set proxy service externalTrafficPolicy: Local
 (#1030)

---
 config/pomerium/service/proxy.yaml | 1 +
 deployment.yaml                    | 1 +
 2 files changed, 2 insertions(+)

diff --git a/config/pomerium/service/proxy.yaml b/config/pomerium/service/proxy.yaml
index 3e1df1f5..5d4275ae 100644
--- a/config/pomerium/service/proxy.yaml
+++ b/config/pomerium/service/proxy.yaml
@@ -4,6 +4,7 @@ metadata:
   name: pomerium-proxy
 spec:
   type: LoadBalancer
+  externalTrafficPolicy: Local
   ports:
     - port: 443
       targetPort: https
diff --git a/deployment.yaml b/deployment.yaml
index 3279ed7c..1ef1b702 100644
--- a/deployment.yaml
+++ b/deployment.yaml
@@ -568,6 +568,7 @@ metadata:
   name: pomerium-proxy
   namespace: pomerium
 spec:
+  externalTrafficPolicy: Local
   ports:
   - name: https
     port: 443