From 979bd6cd221e721c4608e9546b369db747574c99 Mon Sep 17 00:00:00 2001
From: Lleyton Gray <lleyton@fyralabs.com>
Date: Fri, 7 Nov 2025 00:16:35 -0800
Subject: [PATCH] fix: set service ip_mode to Proxy if proxy protocol is
 requested

---
 src/daemon.rs | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/src/daemon.rs b/src/daemon.rs
index 8a903f8..56be67d 100644
--- a/src/daemon.rs
+++ b/src/daemon.rs
@@ -52,7 +52,7 @@ use crate::{
     cloud::{pwgen::generate_password, Provisioner},
     ops::{
         parse_provisioner_label_value, ExitNode, ExitNodeProvisioner, ExitNodeSpec, ExitNodeStatus,
-        EXIT_NODE_NAME_LABEL, EXIT_NODE_PROVISIONER_LABEL,
+        EXIT_NODE_NAME_LABEL, EXIT_NODE_PROVISIONER_LABEL, EXIT_NODE_PROXY_PROTOCOL_LABEL,
     },
 };
 use crate::{deployment::create_owned_deployment, error::ReconcileError};
@@ -543,11 +543,22 @@ async fn reconcile_svcs(obj: Arc<Service>, ctx: Arc<Context>) -> Result<Action,
         (Some(exit_node_ip.clone()), None)
     };
 
+    let proxy_protocol = obj.metadata.annotations.as_ref().and_then(|annotations| {
+        annotations
+            .get(EXIT_NODE_PROXY_PROTOCOL_LABEL)
+            .map(String::as_ref)
+    }) == Some("true");
+
     svc.status = Some(ServiceStatus {
         load_balancer: Some(LoadBalancerStatus {
             ingress: Some(vec![LoadBalancerIngress {
                 ip: ingress_ip,
                 hostname: ingress_hostname,
+                ip_mode: if proxy_protocol {
+                    Some("Proxy".to_string())
+                } else {
+                    None
+                },
                 ..Default::default()
             }]),
         }),