feat: proxy protocol support

Author: lleyton

src/deployment.rs

@@ -1,6 +1,9 @@
 //! Chisel pod deployment
 
-use crate::{error::ReconcileError, ops::ExitNode};
+use crate::{
+    error::ReconcileError,
+    ops::{ExitNode, EXIT_NODE_PROXY_PROTOCOL_LABEL},
+};
 use color_eyre::Result;
 use k8s_openapi::{
     api::{
@@ -110,7 +113,15 @@ pub fn generate_tunnel_args(svc: &Service) -> Result<Vec<String>, ReconcileError
     //     .flatten()
     //     .unwrap_or_else(|| "R".to_string());
 
-    let target_ip = "R";
+    let proxy_protocol = svc
+        .metadata
+        .annotations
+        .as_ref()
+        .map_or(false, |annotations| {
+            annotations.get(EXIT_NODE_PROXY_PROTOCOL_LABEL) == Some(&"true".to_string())
+        });
+
+    let target_ip = if proxy_protocol { "RP" } else { "R" };
 
     // We can unwrap safely since Service is guaranteed to have a spec
     let ports = svc

src/ops.rs

@@ -14,6 +14,7 @@ use tracing::debug;
 
 pub const EXIT_NODE_NAME_LABEL: &str = "chisel-operator.io/exit-node-name";
 pub const EXIT_NODE_PROVISIONER_LABEL: &str = "chisel-operator.io/exit-node-provisioner";
+pub const EXIT_NODE_PROXY_PROTOCOL_LABEL: &str = "chisel-operator.io/proxy-protocol";
 
 pub fn parse_provisioner_label_value<'a>(
     default_namespace: &'a str,