jetstack / kube-oidc-proxy

Reverse proxy to authenticate to managed Kubernetes API servers via OIDC.
https://jetstack.io
Apache License 2.0
477 stars 91 forks source link

Improve extra-header remote client IP #132

Closed JoshVanL closed 4 years ago

JoshVanL commented 4 years ago

Currently the remote IP appended as an extra header, if enabled, is only the IP of the source of the connection. We can do a bit better by attempting to find the real client IP using something like https://github.com/sebest/xff/blob/master/xff.go

/assign