use real ip from fastly in nginx

metacpan · May 14, 2024 · 2062711 · 2062711
1 parent 8be7748
commit 2062711
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/platform/ingress-nginx/kustomization.yaml b/platform/ingress-nginx/kustomization.yaml
@@ -20,3 +20,14 @@ patches:
       namespace: ingress-nginx
     spec:
       replicas: 3
+- target:
+    kind: ConfigMap
+    name: ingress-nginx-controller
+    namespace: ingress-nginx
+  patch: |
+    - op: add
+      path: /data/enable-real-ip
+      value: "true"
+    - op: add
+      path: /data/proxy-real-ip-cidr
+      value: "23.235.32.0/20,43.249.72.0/22,103.244.50.0/24,103.245.222.0/23,103.245.224.0/24,104.156.80.0/20,140.248.64.0/18,140.248.128.0/17,146.75.0.0/17,151.101.0.0/16,157.52.64.0/18,167.82.0.0/17,167.82.128.0/20,167.82.160.0/20,167.82.224.0/20,172.111.64.0/18,185.31.16.0/22,199.27.72.0/21,199.232.0.0/16,2a04:4e40::/32,2a04:4e42::/32"