=== 저장소 판만 적용한 상태에서 다시 잰다 ===
ports:
  web:
    forwardedHeaders:
      # Requests arriving from these sources keep their existing
      # X-Forwarded-* values instead of having them rewritten.
      #
      # 10.42.0.0/16 is the pod CIDR. It is required because the traefik
      # Service uses externalTrafficPolicy: Cluster, so svclb SNATs the
      # traffic and Traefik sees a pod-network address rather than the
      # host nginx address.
      #
      # The node/host range is deliberately absent. Because svclb SNATs,
      # the host nginx address never reaches Traefik — measured, not assumed.
      # Trusting a range that cannot appear only widens the surface.
      #
      # Trusting the whole pod CIDR still means any pod in the cluster could
      # forge these headers, which is why echo-network-policy.yaml restricts
      # who may reach the application at all.
      trustedIPs:
        - 10.42.0.0/16
  websecure:
    forwardedHeaders:
      trustedIPs:
        - 10.42.0.0/16
--- 앱이 받은 것
{
  "headers" : {
    "host" : [ "app1.hyeonworks.com" ],
    "user-agent" : [ "curl/8.5.0" ],
    "accept" : [ "*/*" ],
    "x-forwarded-host" : [ "app1.hyeonworks.com" ],
    "x-forwarded-port" : [ "80" ],
    "x-forwarded-proto" : [ "http" ],
    "x-forwarded-server" : [ "traefik-5d6fcf895-xmqp6" ],
    "x-real-ip" : [ "192.168.122.1" ],
    "accept-encoding" : [ "gzip" ]
  },
  "remoteAddr" : "192.168.122.1",
  "localAddr" : "10.42.0.27",
  "scheme" : "http",
  "secure" : false,
  "serverName" : "app1.hyeonworks.com",
  "serverPort" : 80,
  "requestUrl" : "http://app1.hyeonworks.com/api/echo"
}