feat: add trusted headers

We can cleanup a file in the k8s-meta package after this release

Author: TrayserCassa

api/v1/store_env.go

@@ -384,7 +384,7 @@ func (s *Store) GetEnv() []corev1.EnvVar {
 				},
 			},
 		},
-		// When using https we need this for header trusting
+		// deprecated since 6.7
 		{
 			Name:  "TRUSTED_PROXIES",
 			Value: "REMOTE_ADDR",
@@ -394,6 +394,10 @@ func (s *Store) GetEnv() []corev1.EnvVar {
 			Name:  "SYMFONY_TRUSTED_PROXIES",
 			Value: "REMOTE_ADDR",
 		},
+		{
+			Name:  "SYMFONY_TRUSTED_HEADERS",
+			Value: "['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port']",
+		},
 		// Some Shopware best practises
 		{
 			Name:  "SHOPWARE_DBAL_TIMEZONE_SUPPORT_ENABLED",