No way to provide more set input headers on request other than snippet annotations in ingress.

[msinghal123]

I am currently using configuration-snippet to set input headers and clear input headers.
annotations:
nginx.ingress.kubernetes.io/configuration-snippet: |
more_clear_input_headers "WL-Proxy-Client-IP" "WL-Proxy-SSL";
more_set_input_headers "X-Forwarded-Proto: https";
more_set_input_headers "WL-Proxy-SSL: true";

There's a CVE reported on this kubernetes/kubernetes#126811 and the CVE occurs only when SnippetAnnotations are allowed

I am looking for alternate solution and I did not find any.

Can we have annotations for set input headers anc clear input headers as well like we have custom-headers?

[k8s-ci-robot]

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[longwuyuan]

/remove-kind bug
/kind feature
There is no "OTHER" annotation or configMap besides https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/#custom-headers . Can you check if that is related.

Unfortunately, there is no developer time to work on new features as all are busy with Gateway-API & Security . But PRs are welcome if they contain opt-in/opt-out design and provide comprehensive e2e-tests. Project can not maintain or support new features.

[msinghal123]

I tried custom-headers but that did not solve the issue. custom-headers annotation uses more_set_headers nginx directive. But I am looking for
more_clear_input_headers "WL-Proxy-Client-IP" "WL-Proxy-SSL";
more_set_input_headers "X-Forwarded-Proto: https";
more_set_input_headers "WL-Proxy-SSL: true";

I am blocked as we can not use nginx.ingress.kubernetes.io/configuration-snippet due to CVE.

[github-actions]

This is stale, but we won't close it automatically, just bare in mind the maintainers may be busy with other tasks and will reach your issue ASAP. If you have any question or request to prioritize this, please reach #ingress-nginx-dev on Kubernetes Slack.