Skip to content

fix(proxy): establish client identity at HAProxy ingress - #80

Merged
alexlovelltroy merged 1 commit into
mainfrom
fix/metadata-forwarded-identity
Nov 3, 2026
Merged

alexlovelltroy merged 1 commit into
mainfrom
fix/metadata-forwarded-identity

Conversation

@alexlovelltroy

Copy link
Copy Markdown
Member

Description

Replace forwarded identity headers with the connection source and document the privileged WireGuard bootstrap trust boundary. Exercise HTTP/TLS and IPv4/IPv6 requests against the shipped rules.

Assisted-by: OpenAI Codex

Checklist

  • My code follows the style guidelines of this project
  • I have added/updated comments where needed
  • I have added tests that prove my fix is effective or my feature works
  • I have run make test (or equivalent) locally and all tests pass
  • I have updated the relevant documentation (CLI examples, man pages, README, other docs, etc.)
  • DCO Sign-off: All commits are signed off (git commit -s) with my real name and email
  • REUSE Compliance:
    • Each new/modified source file has SPDX copyright and license headers
    • Any non-commentable files include a <filename>.license sidecar
    • All referenced licenses are present in the LICENSES/ directory

Type of Change

  • Bug fix
  • New feature
  • Breaking change
  • Documentation update
  • Dependency update
  • Build system/CI

Replace forwarded identity headers with the connection source and
document the privileged WireGuard bootstrap trust boundary.
Exercise HTTP/TLS and IPv4/IPv6 requests against the shipped rules.

Assisted-by: OpenAI Codex
Signed-off-by: Alex Lovell-Troy <alovelltroy@lanl.gov>

@davidallendj davidallendj left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@njones-lanl

Copy link
Copy Markdown
Collaborator

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants