feat: add support for reverse proxy header handling - #835

Draft

razvan wants to merge 13 commits into

mainfrom

feat/trusted-proxies

Commits on Aug 4, 2026

Add TrustedProxy type for validating trusted reverse proxy entries
razvan
committed
1b12235
Add trustedProxies field to the webserver role config
razvan
committed
37c0bc3
Validate trustedProxies during cluster validation
razvan
committed
455d3c6
Enable api-server proxy headers when trusted proxies are configured
razvan
committed
f9857e7
Configure which reverse proxies the api-server trusts
razvan
committed
27ecc17
Document running the Airflow webserver behind a reverse proxy
razvan
committed
dcfb924
Add integration test coverage for trusted proxies
razvan
committed
7e9c567
Gate trusted-proxies kuttl assertions for Airflow 2.x scenarios
razvan
committed
0ff22b3
Fix trusted-proxies review findings: host-bit CIDRs, sole-wildcard rule, and error causes
razvan
committed
4852379
Docs: fix reverse-proxy guidance to avoid invalid trustedProxies entries
razvan
committed
30c51ec
Reject trusted-proxy prefix lengths with a leading sign
razvan
committed
f82c7be

Commits on Aug 5, 2026

Tone down the verbosity of the CRD field doc
razvan
committed
56960e9
Remove comment verbosity
razvan
committed
066898f