Set externalTrafficPolicy: Local for nginx service to preserve source IP - required for IP allowlisting

04-ingress-controller-nginx/README.md

@@ -11,7 +11,25 @@ helm upgrade --install ingress-nginx ingress-nginx   --repo https://kubernetes.g
 Example usage:
 
 ```yaml
-apiVersion: networking.k8s.io/v1beta1
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ingress-mandelmapper
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: mandelmap.home.stevenpolley.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: mandelmapper
+            port:
+              number: 6161
+
+apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: ingress-myservicea
@@ -23,10 +41,12 @@ spec:
       paths:
       - path: /
         backend:
-          serviceName: myservicea
-          servicePort: 8080
+          service:
+            name: myservicea
+            port:
+              number: 8080
 ---
-apiVersion: networking.k8s.io/v1beta1
+apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: ingress-myserviceb
@@ -38,8 +58,10 @@ spec:
       paths:
       - path: /
         backend:
-          serviceName: myserviceb
-          servicePort: 8443
+          service:
+            name: myserviceb
+            port:
+              number: 8443
   tls:
     - hosts:
       - myserviceb.foo.org

04-ingress-controller-nginx/values.yaml

@@ -3,10 +3,12 @@
 
 controller:
   service:
+    # -- Provisioned manually on external hardware load balancer
     externalIPs: 
     - "10.69.69.51"
     nodePorts:
       # -- Node port allocated for the external HTTP listener. If left empty, the service controller allocates one from the configured node port range.
       http: "31451"
       # -- Node port allocated for the external HTTPS listener. If left empty, the service controller allocates one from the configured node port range.
-      https: "31207"
+      https: "31207"
+    externalTrafficPolicy: Local