feat: add support for reverse proxy header handling - #835

Open

razvan wants to merge 19 commits into

mainfrom

feat/trusted-proxies

Commits on Aug 4, 2026

Add TrustedProxy type for validating trusted reverse proxy entries
razvan
committed
1b12235
Add trustedProxies field to the webserver role config
razvan
committed
37c0bc3
Validate trustedProxies during cluster validation
razvan
committed
455d3c6
Enable api-server proxy headers when trusted proxies are configured
razvan
committed
f9857e7
Configure which reverse proxies the api-server trusts
razvan
committed
27ecc17
Document running the Airflow webserver behind a reverse proxy
razvan
committed
dcfb924
Add integration test coverage for trusted proxies
razvan
committed
7e9c567
Gate trusted-proxies kuttl assertions for Airflow 2.x scenarios
razvan
committed
0ff22b3
Fix trusted-proxies review findings: host-bit CIDRs, sole-wildcard rule, and error causes
razvan
committed
4852379
Docs: fix reverse-proxy guidance to avoid invalid trustedProxies entries
razvan
committed
30c51ec
Reject trusted-proxy prefix lengths with a leading sign
razvan
committed
f82c7be

Commits on Aug 5, 2026

Tone down the verbosity of the CRD field doc
razvan
committed
56960e9
Remove comment verbosity
razvan
committed
066898f

Commits on Aug 6, 2026

Enable ProxyFix environment variables for Airflow 2
razvan
committed
98f8703
Expand OIDC integration test with reverse proxy settings
razvan
committed
d0de7b6

Commits on Aug 7, 2026

More comment cleanup
razvan
committed
df076bf
Fix oidc test on OpenShift and use '*' for trusted proxies
razvan
committed
e75633d
Merge branch 'main' into feat/trusted-proxies
razvan
committed
92e7149
Reduce code comment verbosity
razvan
committed
0365d70