From 1c1b86e849bd6631742769feb7d2b09a2b7a1def Mon Sep 17 00:00:00 2001
From: DongHyeonka <ehdgus6435@kumoh.ac.kr>
Date: Thu, 3 Sep 2026 15:30:31 +0900
Subject: [PATCH] feat: let the app interpret forwarded headers

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 deploy/lab/k8s/echo.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy/lab/k8s/echo.yaml b/deploy/lab/k8s/echo.yaml
index 98023e0..fdd9cb4 100644
--- a/deploy/lab/k8s/echo.yaml
+++ b/deploy/lab/k8s/echo.yaml
@@ -49,7 +49,7 @@ spec:
             # with X-Forwarded-* honoured. Keycloak's KC_PROXY_HEADERS is the
             # same opt-in, which is why measuring both sides matters here.
             - name: SERVER_FORWARD_HEADERS_STRATEGY
-              value: "none"
+              value: "native"
             # The JVM sizes its heap from the container limit, not the host.
             - name: JAVA_TOOL_OPTIONS
               value: "-XX:MaxRAMPercentage=70"