From 7132d527a3d631dfd330fbd1266d814f7a33b92f Mon Sep 17 00:00:00 2001
From: OdooSky v3 <m@havari.me>
Date: Wed, 13 May 2026 05:52:31 +0200
Subject: [PATCH] fix(odoo): add --proxy-mode to args (Mixed-Content fix; chart
 0.1.9)

---
 Chart.yaml                     | 2 +-
 templates/odoo-deployment.yaml | 9 +++++++++
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/Chart.yaml b/Chart.yaml
index ddcc086..378e8a0 100644
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -5,7 +5,7 @@ description: |
   Variation between instances is expressed via values.yaml only.
   No chart variants. No string-templating in Tower.
 type: application
-version: 0.1.8
+version: 0.1.9
 appVersion: "1.0"
 keywords:
   - odoo
diff --git a/templates/odoo-deployment.yaml b/templates/odoo-deployment.yaml
index 1edfb1e..bee9d65 100644
--- a/templates/odoo-deployment.yaml
+++ b/templates/odoo-deployment.yaml
@@ -398,6 +398,15 @@ spec:
             # tenant has no extra addons. See platform-shim
             # initContainer.
             - "--addons-path=/usr/lib/python3/dist-packages/odoo/addons,{{ .Values.addonsMountPath }}"
+            # proxy-mode is mandatory in Tower's architecture — every
+            # Odoo runs behind Traefik (per-instance IngressRoute → TLS
+            # termination at the cluster Traefik). Without --proxy-mode
+            # Odoo ignores X-Forwarded-Proto and generates http:// URLs
+            # for assets / images / redirects, which the browser blocks
+            # as Mixed Content on the https:// page. Diagnosed during
+            # the havari-16 ARM migrate (2026-05-13). Safe default for
+            # every chart consumer.
+            - "--proxy-mode"
           ports:
             - name: http
               containerPort: 8069