Alan-Jowett / CoPilot-For-Consensus / 20687104335
78%

DEFAULT BRANCH: main
Ran
Jobs 0
Files 0
Run time –
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
20687104335

push

github

web-flow 
fix: Use proxy_host header in gateway nginx to avoid ACA service mesh interception (#712)

* fix: Use proxy_host header in gateway nginx to avoid ACA service mesh interception

ACA's service mesh intercepts requests based on Host header matching Container App names.
When the gateway proxies to backends (e.g., copilot-ui-dev:80) with the original client
Host header (\System.Management.Automation.Internal.Host.InternalHost), ACA intercepts the request before it reaches nginx upstream,
causing 404 errors.

Solution: Use \ (the upstream server address) in proxy_set_header Host
instead of \System.Management.Automation.Internal.Host.InternalHost. This ensures the Host header sent to backends is their actual
address/name, avoiding ACA service mesh interception while allowing proper routing.

Changes:
- infra/nginx/nginx.conf: Set proxy_set_header Host \ in all location blocks
  (reporting, auth, ingestion, ui). This prevents ACA from misrouting based on hostname.
- infra/azure/modules/containerapps.bicep: Keep allowInsecure=true on gateway ingress
  to enable HTTP traffic through ACA platform.

* Update infra/azure/modules/containerapps.bicep

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: GitHub Copilot <copilot@github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Source Files on build 20687104335
Detailed source file information is not available for this build.