DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deploy GitHub Pages

Browse source
This commit is contained in:
k8s-ci-robot 2021-12-06 13:47:38 +00:00
parent 8b9f431ba7
commit 9277a9288a
8 changed files with 57 additions and 57 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
developer-guide/code-overview/index.html
View file

File diff suppressed because one or more lines are too long

2
developer-guide/getting-started/index.html
View file

File diff suppressed because one or more lines are too long

2
search/search_index.json
View file

File diff suppressed because one or more lines are too long

102
sitemap.xml
View file

@ -1,207 +1,207 @@
<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url>
<loc>https://kubernetes.github.io/ingress-nginx/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/how-it-works/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/troubleshooting/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/kubectl-plugin/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/baremetal/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/rbac/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/upgrade/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/hardening-guide/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/basic-usage/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/custom-template/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/log-format/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/cli-arguments/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/custom-errors/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/default-backend/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/exposing-tcp-udp-services/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/fcgi-services/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/ingress-path-matching/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/external-articles/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/miscellaneous/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/monitoring/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/multiple-ingress/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/tls/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/third-party-addons/modsecurity/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/third-party-addons/opentracing/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/PREREQUISITES/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/affinity/cookie/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/basic/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/client-certs/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/external-auth/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/oauth-external-auth/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/configuration-snippets/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-configuration/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-errors/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-headers/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/external-auth-headers/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/ssl-dh-param/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/sysctl/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/docker-registry/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/grpc/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/multi-tls/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/rewrite/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/static-ip/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/tls-termination/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/psp/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/developer-guide/getting-started/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/developer-guide/code-overview/</loc>
<lastmod>2021-12-04</lastmod>
<lastmod>2021-12-06</lastmod>
<changefreq>daily</changefreq>
</url>
</urlset>

BIN
sitemap.xml.gz
View file

Binary file not shown.

2
user-guide/monitoring/index.html
View file

@ -48,7 +48,7 @@ ingress-nginx NodePort 10.97.44.72 &lt;none&gt; 80:30100/
prometheus-server NodePort 10.98.233.86 &lt;none&gt; 9090:32630/TCP 10m
grafana NodePort 10.98.233.87 &lt;none&gt; 3000:31086/TCP 10m
</code></pre></div></p> </li> <li> <p>Open your browser and visit the following URL: <em>http://{node IP address}:{grafana-svc-nodeport}</em> to load the Grafana Dashboard. According to the above example, this URL will be http://10.192.0.3:31086</p> </li> </ul> <p>The username and password is <code>admin</code></p> <ul> <li> <p>After the login you can import the Grafana dashboard from <a href=https://github.com/kubernetes/ingress-nginx/tree/main/deploy/grafana/dashboards>official dashboards</a>, by following steps given below :</p> <ul> <li>Navigate to lefthand panel of grafana</li> <li>Hover on the gearwheel icon for Configuration and click "Data Sources"</li> <li>Click "Add data source"</li> <li>Select "Prometheus"</li> <li>Enter the details (note: I used http://CLUSTER_IP_PROMETHEUS_SVC:9090)</li> <li>Left menu (hover over +) -&gt; Dashboard</li> <li>Click "Import"</li> <li>Enter the copy pasted json from https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/grafana/dashboards/nginx.json</li> <li>Click Import JSON</li> <li>Select the Prometheus data source</li> <li>Click "Import"</li> </ul> </li> </ul> <p><img alt="Grafana Dashboard" src=../../images/grafana.png></p> <h2 id=caveats>Caveats<a class=headerlink href=#caveats title="Permanent link"></a></h2> <h3 id=wildcard-ingresses>Wildcard ingresses<a class=headerlink href=#wildcard-ingresses title="Permanent link"></a></h3> <ul> <li>By default request metrics are labeled with the hostname. When you have a wildcard domain ingress, then there will be no metrics for that ingress (to prevent the metrics from exploding in cardinality). To get metrics in this case you need to run the ingress controller with <code>--metrics-per-host=false</code> (you will lose labeling by hostname, but still have labeling by ingress).</li> </ul> <h2 id=grafana-dashboard-using-ingress-resource>Grafana dashboard using ingress resource<a class=headerlink href=#grafana-dashboard-using-ingress-resource title="Permanent link"></a></h2> <ul> <li>If you want to expose the dashboard for grafana using a ingress resource, then you can : <ul> <li>change the service type of the prometheus-server service and the grafana service to "ClusterIP" like this : <div class=highlight><pre><span></span><code>kubectl -n ingress-nginx edit svc grafana
</code></pre></div></li> <li>This will open the currently deployed service grafana in the default editor configured in your shell (vi/nvim/nano/other)</li> <li>scroll down to line 34 that looks like "type: NodePort"</li> <li>change it to look like "type: ClusterIP". Save and exit.</li> <li>create a ingress reource with backend as "grafana" and port as "3000"</li> </ul> </li> <li>Similarly, you can edit the service "prometheus-server" and add a ingress resource.</li> </ul> </article> </div> </div> </main> <footer class=md-footer> <div class=md-footer-nav> <nav class="md-footer-nav__inner md-grid" aria-label=Footer> <a href=../miscellaneous/ class="md-footer-nav__link md-footer-nav__link--prev" rel=prev> <div class="md-footer-nav__button md-icon"> <svg xmlns=http://www.w3.org/2000/svg viewbox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12z"/></svg> </div> <div class=md-footer-nav__title> <div class=md-ellipsis> <span class=md-footer-nav__direction> Previous </span> Miscellaneous </div> </div> </a> <a href=../multiple-ingress/ class="md-footer-nav__link md-footer-nav__link--next" rel=next> <div class=md-footer-nav__title> <div class=md-ellipsis> <span class=md-footer-nav__direction> Next </span> Multiple Ingress controllers </div> </div> <div class="md-footer-nav__button md-icon"> <svg xmlns=http://www.w3.org/2000/svg viewbox="0 0 24 24"><path d="M4 11v2h12l-5.5 5.5 1.42 1.42L19.84 12l-7.92-7.92L10.5 5.5 16 11H4z"/></svg> </div> </a> </nav> </div> <div class="md-footer-meta md-typeset"> <div class="md-footer-meta__inner md-grid"> <div class=md-footer-copyright> Made with <a href=https://squidfunk.github.io/mkdocs-material/ target=_blank rel=noopener> Material for MkDocs </a> </div> </div> </div> </footer> </div> <script src=../../assets/javascripts/vendor.93c04032.min.js></script> <script src=../../assets/javascripts/bundle.83e5331e.min.js></script><script id=__lang type=application/json>{"clipboard.copy": "Copy to clipboard", "clipboard.copied": "Copied to clipboard", "search.config.lang": "en", "search.config.pipeline": "trimmer, stopWordFilter", "search.config.separator": "[\\s\\-]+", "search.placeholder": "Search", "search.result.placeholder": "Type to start searching", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.term.missing": "Missing"}</script> <script>
</code></pre></div></li> <li>This will open the currently deployed service grafana in the default editor configured in your shell (vi/nvim/nano/other)</li> <li>scroll down to line 34 that looks like "type: NodePort"</li> <li>change it to look like "type: ClusterIP". Save and exit.</li> <li>create a ingress resource with backend as "grafana" and port as "3000"</li> </ul> </li> <li>Similarly, you can edit the service "prometheus-server" and add a ingress resource.</li> </ul> </article> </div> </div> </main> <footer class=md-footer> <div class=md-footer-nav> <nav class="md-footer-nav__inner md-grid" aria-label=Footer> <a href=../miscellaneous/ class="md-footer-nav__link md-footer-nav__link--prev" rel=prev> <div class="md-footer-nav__button md-icon"> <svg xmlns=http://www.w3.org/2000/svg viewbox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12z"/></svg> </div> <div class=md-footer-nav__title> <div class=md-ellipsis> <span class=md-footer-nav__direction> Previous </span> Miscellaneous </div> </div> </a> <a href=../multiple-ingress/ class="md-footer-nav__link md-footer-nav__link--next" rel=next> <div class=md-footer-nav__title> <div class=md-ellipsis> <span class=md-footer-nav__direction> Next </span> Multiple Ingress controllers </div> </div> <div class="md-footer-nav__button md-icon"> <svg xmlns=http://www.w3.org/2000/svg viewbox="0 0 24 24"><path d="M4 11v2h12l-5.5 5.5 1.42 1.42L19.84 12l-7.92-7.92L10.5 5.5 16 11H4z"/></svg> </div> </a> </nav> </div> <div class="md-footer-meta md-typeset"> <div class="md-footer-meta__inner md-grid"> <div class=md-footer-copyright> Made with <a href=https://squidfunk.github.io/mkdocs-material/ target=_blank rel=noopener> Material for MkDocs </a> </div> </div> </div> </footer> </div> <script src=../../assets/javascripts/vendor.93c04032.min.js></script> <script src=../../assets/javascripts/bundle.83e5331e.min.js></script><script id=__lang type=application/json>{"clipboard.copy": "Copy to clipboard", "clipboard.copied": "Copied to clipboard", "search.config.lang": "en", "search.config.pipeline": "trimmer, stopWordFilter", "search.config.separator": "[\\s\\-]+", "search.placeholder": "Search", "search.result.placeholder": "Type to start searching", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.term.missing": "Missing"}</script> <script>
app = initialize({
base: "../..",
features: ['navigation.tabs', 'navigation.tabs.sticky', 'navigation.instant', 'navigation.sections'],

2
user-guide/nginx-configuration/annotations/index.html
View file

@ -35,7 +35,7 @@
</code></pre></div> <h3 id=enable-access-log>Enable Access Log<a class=headerlink href=#enable-access-log title="Permanent link"></a></h3> <p>Access logs are enabled by default, but in some scenarios access logs might be required to be disabled for a given ingress. To do this, use the annotation:</p> <div class=highlight><pre><span></span><code><span class=nt>nginx.ingress.kubernetes.io/enable-access-log</span><span class=p>:</span> <span class=s>&quot;false&quot;</span>
</code></pre></div> <h3 id=enable-rewrite-log>Enable Rewrite Log<a class=headerlink href=#enable-rewrite-log title="Permanent link"></a></h3> <p>Rewrite logs are not enabled by default. In some scenarios it could be required to enable NGINX rewrite logs. Note that rewrite logs are sent to the error_log file at the notice level. To enable this feature use the annotation:</p> <div class=highlight><pre><span></span><code><span class=nt>nginx.ingress.kubernetes.io/enable-rewrite-log</span><span class=p>:</span> <span class=s>&quot;true&quot;</span>
</code></pre></div> <h3 id=enable-opentracing>Enable Opentracing<a class=headerlink href=#enable-opentracing title="Permanent link"></a></h3> <p>Opentracing can be enabled or disabled globally through the ConfigMap but this will sometimes need to be overridden to enable it or disable it for a specific ingress (e.g. to turn off tracing of external health check endpoints)</p> <div class=highlight><pre><span></span><code><span class=nt>nginx.ingress.kubernetes.io/enable-opentracing</span><span class=p>:</span> <span class=s>&quot;true&quot;</span>
</code></pre></div> <h3 id=opentracing-trust-incoming-span>Opentracing Trust Incoming Span<a class=headerlink href=#opentracing-trust-incoming-span title="Permanent link"></a></h3> <p>The option to trust incoming trace spans can be enabled or disabled globally through the ConfigMap but this will sometimes need to be overriden to enable it or disable it for a specific ingress (e.g. only enable on a private endpoint)</p> <div class=highlight><pre><span></span><code><span class=nt>nginx.ingress.kubernetes.io/opentracing-trust-incoming-span</span><span class=p>:</span> <span class=s>&quot;true&quot;</span>
</code></pre></div> <h3 id=opentracing-trust-incoming-span>Opentracing Trust Incoming Span<a class=headerlink href=#opentracing-trust-incoming-span title="Permanent link"></a></h3> <p>The option to trust incoming trace spans can be enabled or disabled globally through the ConfigMap but this will sometimes need to be overridden to enable it or disable it for a specific ingress (e.g. only enable on a private endpoint)</p> <div class=highlight><pre><span></span><code><span class=nt>nginx.ingress.kubernetes.io/opentracing-trust-incoming-span</span><span class=p>:</span> <span class=s>&quot;true&quot;</span>
</code></pre></div> <h3 id=x-forwarded-prefix-header>X-Forwarded-Prefix Header<a class=headerlink href=#x-forwarded-prefix-header title="Permanent link"></a></h3> <p>To add the non-standard <code>X-Forwarded-Prefix</code> header to the upstream request with a string value, the following annotation can be used:</p> <div class=highlight><pre><span></span><code><span class=nt>nginx.ingress.kubernetes.io/x-forwarded-prefix</span><span class=p>:</span> <span class=s>&quot;/path&quot;</span>
</code></pre></div> <h3 id=modsecurity>ModSecurity<a class=headerlink href=#modsecurity title="Permanent link"></a></h3> <p><a href=http://modsecurity.org/ >ModSecurity</a> is an OpenSource Web Application firewall. It can be enabled for a particular set of ingress locations. The ModSecurity module must first be enabled by enabling ModSecurity in the <a href=../configmap/#enable-modsecurity>ConfigMap</a>. Note this will enable ModSecurity for all paths, and each path must be disabled manually.</p> <p>It can be enabled using the following annotation: <div class=highlight><pre><span></span><code><span class=nt>nginx.ingress.kubernetes.io/enable-modsecurity</span><span class=p>:</span> <span class=s>&quot;true&quot;</span>
</code></pre></div> ModSecurity will run in "Detection-Only" mode using the <a href=https://github.com/SpiderLabs/ModSecurity/blob/v3/master/modsecurity.conf-recommended>recommended configuration</a>.</p> <p>You can enable the <a href=https://www.modsecurity.org/CRS/Documentation/ >OWASP Core Rule Set</a> by setting the following annotation: <div class=highlight><pre><span></span><code><span class=nt>nginx.ingress.kubernetes.io/enable-owasp-core-rules</span><span class=p>:</span> <span class=s>&quot;true&quot;</span>

2
user-guide/nginx-configuration/configmap/index.html
View file

File diff suppressed because one or more lines are too long