mirror of
https://github.com/ansible/awx-operator.git
synced 2026-03-26 21:33:14 +00:00
Add map directives for X-Trusted-Proxy and X-DAB-JW-TOKEN headers to log the presence of these headers as trusted_proxy_present and dab_jwt_present fields in the nginx access log. These markers enable the detection tool (aap-detect-direct-component-access) to identify direct API access that bypasses AAP Gateway. Also add explicit error_log /dev/stderr warn; instead of relying on container base image symlinks. Part of ANSTRAT-1840: Remove direct API access to platform components. Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>