Skip to content

Commit b6e927a

Browse files
committed
fix: enable PROXY protocol by default for RadSec HAProxy deployments
Default radSecProxyProtocol to true in values.yaml and disable in values-dev.yaml since dev does not use HAProxy.
1 parent 24ebba7 commit b6e927a

2 files changed

Lines changed: 2 additions & 1 deletion

File tree

chart/values-dev.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ pint:
88
# Stub config values for dev; PINT itself runs locally so these are unused,
99
# but they keep 'helm lint' and 'helm template' happy.
1010
config:
11+
radSecProxyProtocol: false
1112
clientID: pint-dev
1213
serverURL: http://localhost:8080
1314
ipaHost: localhost:8088

chart/values.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ config:
3535

3636
# RADIUS / RadSec
3737
radSecCheckCRL: true # set false to disable CRL checking in the RadSec TLS listener
38-
radSecProxyProtocol: false # set true when HAProxy fronts FreeRADIUS and sends PROXY protocol headers
38+
radSecProxyProtocol: true # set false when HAProxy is not fronting FreeRADIUS
3939
radSecStatusPort: "" # overrides the FreeRADIUS status server port (default: 18121)
4040
radSecStatusAddr: "" # overrides the status server address (host:port); useful in dev when pod IPs are unreachable
4141

0 commit comments

Comments
 (0)