From 44d52076221693b2c3dbecc8e9168e403dfaa93f Mon Sep 17 00:00:00 2001 From: rock Date: Tue, 15 Sep 2026 18:01:48 +0900 Subject: [PATCH] fix(gotify): remove configuration-snippet annotation blocking nginx ingress nginx-ingress v1.15.1 blocks configuration-snippet by default as a security risk, silently dropping the entire Ingress resource. WebSocket upgrade headers are handled natively with proxy-http-version 1.1. --- k8s/apps/gotify/ingress.yaml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/k8s/apps/gotify/ingress.yaml b/k8s/apps/gotify/ingress.yaml index fde01cf..d140765 100644 --- a/k8s/apps/gotify/ingress.yaml +++ b/k8s/apps/gotify/ingress.yaml @@ -6,11 +6,9 @@ metadata: annotations: nginx.ingress.kubernetes.io/proxy-read-timeout: "600" nginx.ingress.kubernetes.io/proxy-send-timeout: "600" - # WebSocket support for Gotify client connections + # WebSocket support for Gotify client connections (/stream endpoint) + # nginx-ingress handles Upgrade/Connection headers natively with http/1.1 nginx.ingress.kubernetes.io/proxy-http-version: "1.1" - nginx.ingress.kubernetes.io/configuration-snippet: | - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; spec: ingressClassName: nginx rules: