docker for kubepod noroot & readonly

config/packages/framework.yaml

@@ -5,8 +5,8 @@ framework:
     # Note that the session will be started ONLY if you read or write from it.
     session: true
 
-    #esi: true
-    #fragments: true
+    trusted_proxies: '127.0.0.1,10.0.0.0/8'
+    trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port', 'x-forwarded-prefix']
 
 when@test:
     framework: