fix: set Host header on paperclip health probes to bypass hostname guard #107

Merged
unkinben merged 1 commits from benvin/paperclip_live_probe into main 2026-05-02 23:01:59 +10:00

1 Commits

Author SHA1 Message Date
unkinben 926f3b34ba fix: set Host header on paperclip health probes to bypass hostname guard
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
The privateHostnameGuard middleware blocks requests where the Host header
is not in the allowlist. Kubelet httpGet probes use the pod IP as the
Host header, which is never in the allowlist. Setting Host: localhost
ensures probes are always permitted.
2026-05-02 22:53:02 +10:00