add set response headers global option (pomerium#599)

LuxorLabs · Apr 19, 2023 · b354fe1 · b354fe1
1 parent 6cb4f7d
commit b354fe1
Show file tree

Hide file tree

Showing 5 changed files with 32 additions and 0 deletions.
diff --git a/apis/ingress/v1/pomerium_types.go b/apis/ingress/v1/pomerium_types.go
@@ -286,6 +286,11 @@ type PomeriumSpec struct {
 	//
 	// +optional
 	JWTClaimHeaders map[string]string `json:"jwtClaimHeaders,omitempty"`
+
+	// SetRequestHeaders sets HTTP headers on the request before sending it to the upstream service.
+	// +optional
+	// See <a href="https://www.pomerium.com/docs/reference/#set-request-headers">Set Request Headers</a>
+	SetResponseHeaders map[string]string `json:"setResponseHeaders,omitempty"`
 }
 
 // ResourceStatus represents the outcome of the latest attempt to reconcile

diff --git a/apis/ingress/v1/zz_generated.deepcopy.go b/apis/ingress/v1/zz_generated.deepcopy.go
diff --git a/config/crd/bases/ingress.pomerium.io_pomerium.yaml b/config/crd/bases/ingress.pomerium.io_pomerium.yaml
@@ -209,6 +209,13 @@ spec:
                 format: namespace/name
                 minLength: 1
                 type: string
+              setResponseHeaders:
+                additionalProperties:
+                  type: string
+                description: SetRequestHeaders sets HTTP headers on the request before
+                  sending it to the upstream service. See <a href="https://www.pomerium.com/docs/reference/#set-request-headers">Set
+                  Request Headers</a>
+                type: object
               storage:
                 description: Storage defines persistent storage for sessions and other
                   data. See <a href="https://www.pomerium.com/docs/topics/data-storage">Storage</a>

diff --git a/deployment.yaml b/deployment.yaml
@@ -217,6 +217,13 @@ spec:
                 format: namespace/name
                 minLength: 1
                 type: string
+              setResponseHeaders:
+                additionalProperties:
+                  type: string
+                description: SetRequestHeaders sets HTTP headers on the request before
+                  sending it to the upstream service. See <a href="https://www.pomerium.com/docs/reference/#set-request-headers">Set
+                  Request Headers</a>
+                type: object
               storage:
                 description: Storage defines persistent storage for sessions and other
                   data. See <a href="https://www.pomerium.com/docs/topics/data-storage">Storage</a>

diff --git a/pomerium/config.go b/pomerium/config.go
@@ -39,6 +39,7 @@ func applyConfig(ctx context.Context, p *pb.Config, c *model.Config) error {
 		{"cookie", applyCookie},
 		{"warnings", checkForWarnings},
 		{"jwt claim headers", applyJWTClaimHeaders},
+		{"set response headers", applySetResponseHeaders},
 	}
 	if c.Spec.IdentityProvider != nil {
 		opts = append(opts, []applyOpt{
@@ -75,6 +76,11 @@ func applyJWTClaimHeaders(_ context.Context, p *pb.Config, c *model.Config) erro
 	return nil
 }
 
+func applySetResponseHeaders(_ context.Context, p *pb.Config, c *model.Config) error {
+	p.Settings.SetResponseHeaders = c.Spec.SetResponseHeaders
+	return nil
+}
+
 func applyCookie(_ context.Context, p *pb.Config, c *model.Config) error {
 	if c.Spec.Cookie == nil {
 		return nil