Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
docs: add steps for configuring trusted headers & origins in Helm chart
  • Loading branch information
ericpaulsen committed Jun 14, 2023
commit 64bbbec13e7c1d5d1c4cf8877ca8847ec128e13e
15 changes: 15 additions & 0 deletions docs/install/kubernetes.md
Original file line number Diff line number Diff line change
Expand Up @@ -133,6 +133,21 @@ to log in and manage templates.
}
```

By default, Coder will set the `externalTrafficPolicy` to `Cluster` which will
mask client IP addresses in the Audit log. To preserve the source IP, you can either
set this value to `Local`, or pass through the client IP via the X-Forwarded-For
header. To configure the latter, set the following environment
variables:

```yaml
coder:
env:
- name: CODER_PROXY_TRUSTED_HEADERS
value: X-Forwarded-For
- name: CODER_PROXY_TRUSTED_ORIGINS
value: 10.0.0.1/8 # this will be the CIDR range of your Load Balancer IP address
```

1. Run the following command to install the chart in your cluster.

```console
Expand Down