Move x-Forwarded-User and x-ditto-pre-authenticated from ingress-cont…

…roller to values.yaml config Signed-off-by: Dominik Mlasko <dominik.mlasko@blum.com>
eclipse-ditto · Oct 30, 2023 · ddadcc8 · ddadcc8
1 parent 38af233
commit ddadcc8
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/deployment/helm/ditto/templates/nginx-ingress.yaml b/deployment/helm/ditto/templates/nginx-ingress.yaml
@@ -133,10 +133,6 @@ data:
     proxy_hide_header X-Original-URI;
     proxy_set_header X-Original-URI $request_uri;
 
-    # set ditto-specific forwarded headers
-    proxy_set_header        X-Forwarded-User              $remote_user;
-    proxy_set_header        x-ditto-pre-authenticated     "nginx:$remote_user";
-
   proxy-connect-timeout: "10" # seconds, default: 60
   # timeouts are configured slightly higher than gateway read-timeout of 60 seconds
   proxy-send-timeout: "70" # seconds, default: 60

diff --git a/deployment/helm/ditto/values.yaml b/deployment/helm/ditto/values.yaml
@@ -314,6 +314,10 @@ ingress:
         add_header "X-Content-Type-Options" "nosniff" always;
         add_header "X-Frame-Options" "SAMEORIGIN" always;
         add_header "X-XSS-Protection" "1; mode=block" always;
+
+        # set ditto-specific forwarded headers
+        proxy_set_header X-Forwarded-User $remote_user;
+        proxy_set_header x-ditto-pre-authenticated "nginx:$remote_user";
   # ws the /ws (WebSocket) Ingress configuration
   ws:
     # paths configures ingress paths