From 9250befea4b0d155880024ab7057ad986e3f1eb7 Mon Sep 17 00:00:00 2001 From: Ilya Kreymer Date: Tue, 25 Mar 2025 17:24:55 -0700 Subject: [PATCH] ingress: remove X-Forward-Proto snippet, no longer needed (and now possibly considered unsafe) (#2519) X-Forward-Proto is now already provided by the standard ingress-nginx config --- chart/templates/ingress.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/chart/templates/ingress.yaml b/chart/templates/ingress.yaml index b032dd16..f2dd99c2 100644 --- a/chart/templates/ingress.yaml +++ b/chart/templates/ingress.yaml @@ -18,8 +18,6 @@ metadata: nginx.ingress.kubernetes.io/upstream-vhost: "{{ .Values.ingress.host }}" {{- if .Values.ingress.tls }} cert-manager.io/cluster-issuer: {{ .Values.ingress.custom_cluster_issuer | default "cert-main" }} - nginx.ingress.kubernetes.io/configuration-snippet: | - proxy_set_header X-Forwarded-Proto {{ .Values.ingress.tls | ternary "https" "http" }}; nginx.ingress.kubernetes.io/ssl-redirect: "true" {{- else }} nginx.ingress.kubernetes.io/ssl-redirect: "false"