From 3fd3ae4a0d579cffe68264d22d9c3c9b1ee263a9 Mon Sep 17 00:00:00 2001 From: Marcus Noble Date: Thu, 12 Jun 2025 19:44:35 +0000 Subject: [PATCH] Add websocket annotations to non-auth ingress --- manifests/auth-proxy/non-auth-ingress.yaml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/manifests/auth-proxy/non-auth-ingress.yaml b/manifests/auth-proxy/non-auth-ingress.yaml index 2e5e5b4..8b81d45 100644 --- a/manifests/auth-proxy/non-auth-ingress.yaml +++ b/manifests/auth-proxy/non-auth-ingress.yaml @@ -6,6 +6,19 @@ metadata: annotations: cert-manager.io/cluster-issuer: letsencrypt nginx.ingress.kubernetes.io/force-ssl-redirect: "true" + nginx.ingress.kubernetes.io/proxy-read-timeout: "3600" + nginx.ingress.kubernetes.io/proxy-send-timeout: "3600" + nginx.ingress.kubernetes.io/server-snippets: | + location / { + proxy_set_header Upgrade $http_upgrade; + proxy_http_version 1.1; + proxy_set_header X-Forwarded-Host $http_host; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header Host $host; + proxy_set_header Connection "upgrade"; + proxy_cache_bypass $http_upgrade; + } spec: ingressClassName: nginx tls: