From 0fe814cfe4a3d7631dbf1fdaf427fa3813fd3757 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89mile=20R=C3=A9?= Date: Wed, 22 Jul 2026 13:07:52 +0200 Subject: [PATCH] Fix deprecated use of proxyproto.ConnStrictWhiteListPolicy MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Émile Ré --- pkg/probod/probod.go | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/pkg/probod/probod.go b/pkg/probod/probod.go index 52d5eb728..98f7e75b9 100644 --- a/pkg/probod/probod.go +++ b/pkg/probod/probod.go @@ -1241,7 +1241,11 @@ func (impl *Implm) runApiServer( } if len(impl.cfg.Api.ProxyProtocol.TrustedProxies) > 0 { - policy, err := proxyproto.ConnStrictWhiteListPolicy(impl.cfg.Api.ProxyProtocol.TrustedProxies) + policy, err := proxyproto.PolicyFromRanges( + impl.cfg.Api.ProxyProtocol.TrustedProxies, + proxyproto.USE, + proxyproto.REJECT, + ) if err != nil { span.RecordError(err) return fmt.Errorf("cannot build proxy protocol policy: %w", err) @@ -1402,7 +1406,11 @@ func (impl *Implm) runCompliancePortalServer( defer func() { _ = listener.Close() }() if len(impl.cfg.CompliancePortal.ProxyProtocol.TrustedProxies) > 0 { - policy, err := proxyproto.ConnStrictWhiteListPolicy(impl.cfg.CompliancePortal.ProxyProtocol.TrustedProxies) + policy, err := proxyproto.PolicyFromRanges( + impl.cfg.CompliancePortal.ProxyProtocol.TrustedProxies, + proxyproto.USE, + proxyproto.REJECT, + ) if err != nil { return fmt.Errorf("cannot build proxy protocol policy: %w", err) } @@ -1493,7 +1501,11 @@ func (impl *Implm) runCompliancePortalServer( defer func() { _ = listener.Close() }() if len(impl.cfg.CompliancePortal.ProxyProtocol.TrustedProxies) > 0 { - policy, err := proxyproto.ConnStrictWhiteListPolicy(impl.cfg.CompliancePortal.ProxyProtocol.TrustedProxies) + policy, err := proxyproto.PolicyFromRanges( + impl.cfg.CompliancePortal.ProxyProtocol.TrustedProxies, + proxyproto.USE, + proxyproto.REJECT, + ) if err != nil { return fmt.Errorf("cannot build proxy protocol policy: %w", err) }