From dc1de99c7a0b6e85b99cdd192a4b9c0911a2ba54 Mon Sep 17 00:00:00 2001
From: Jeffrey Smeets <jeffreysmeets@jsme.be>
Date: Tue, 2 Jun 2026 23:22:11 +0200
Subject: [PATCH] Restrict Wings listener ALPN to http/1.1 to fix Guzzle broken
 pipe

---
 envoy-gateway/pelican/wings-client-traffic.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/envoy-gateway/pelican/wings-client-traffic.yaml b/envoy-gateway/pelican/wings-client-traffic.yaml
index dae2325..0f196c8 100644
--- a/envoy-gateway/pelican/wings-client-traffic.yaml
+++ b/envoy-gateway/pelican/wings-client-traffic.yaml
@@ -9,6 +9,10 @@ spec:
       kind: Gateway
       name: gateway-internal
       sectionName: wings
+  tls:
+    # Wings only speaks HTTP/1.1; disabling h2 ALPN prevents Guzzle connection-reuse broken pipe
+    alpnProtocols:
+      - http/1.1
   timeout:
     http:
       requestReceivedTimeout: 0s