diff --git a/src/content/docs/docs/community/kubernetes.mdx b/src/content/docs/docs/community/kubernetes.mdx
index 4547d43..3b33ef3 100644
--- a/src/content/docs/docs/community/kubernetes.mdx
+++ b/src/content/docs/docs/community/kubernetes.mdx
@@ -79,14 +79,10 @@ extensionProviders:
     service: "tinyauth.tinyauth.svc.cluster.local"
     port: "3000"
     pathPrefix: "/api/auth/envoy?path="
-    includeRequestHeadersInCheck: ["cookie", "x-forwarded-for", "x-forwarded-proto", "x-forwarded-host", "accept", "user-agent"]
+    includeRequestHeadersInCheck: ["cookie", "x-forwarded-for", "x-forwarded-proto", "user-agent"]
     includeAdditionalHeadersInCheck:
-      "x-forwarded-for": "%DOWNSTREAM_REMOTE_ADDRESS_WITHOUT_PORT%"
       "x-real-ip": "%DOWNSTREAM_REMOTE_ADDRESS_WITHOUT_PORT%"
-      "x-forwarded-proto": "%REQ(:SCHEME)%"
-      "x-forwarded-host": "%REQ(:AUTHORITY)%"
-      "x-forwarded-uri": "%REQ(:PATH)%"
-      "x-forwarded-method": "%REQ(:METHOD)%"
+    headersToUpstreamOnAllow: ["remote-user", "remote-email"]
     headersToDownstreamOnAllow: ["set-cookie"]
     headersToDownstreamOnDeny: ["content-type", "set-cookie"]
 ```
@@ -111,14 +107,10 @@ meshConfig:
       service: "tinyauth.tinyauth.svc.cluster.local"
       port: "3000"
       pathPrefix: "/api/auth/envoy?path="
-      includeRequestHeadersInCheck: ["cookie", "x-forwarded-for", "x-forwarded-proto", "x-forwarded-host", "accept", "user-agent"]
+      includeRequestHeadersInCheck: ["cookie", "x-forwarded-for", "x-forwarded-proto", "user-agent"]
       includeAdditionalHeadersInCheck:
-        "x-forwarded-for": "%DOWNSTREAM_REMOTE_ADDRESS_WITHOUT_PORT%"
         "x-real-ip": "%DOWNSTREAM_REMOTE_ADDRESS_WITHOUT_PORT%"
-        "x-forwarded-proto": "%REQ(:SCHEME)%"
-        "x-forwarded-host": "%REQ(:AUTHORITY)%"
-        "x-forwarded-uri": "%REQ(:PATH)%"
-        "x-forwarded-method": "%REQ(:METHOD)%"
+      headersToUpstreamOnAllow: ["remote-user", "remote-email"]
       headersToDownstreamOnAllow: ["set-cookie"]
       headersToDownstreamOnDeny: ["content-type", "set-cookie"]
 ```