ingress-nginx-helm/internal
Moh Basher fea7fed6da
Disable default modsecurity_rules_file if modsecurity-snippet is specified (#8021)
* Disabled default modsecurity_rules_file if modsecurity-snippet is specifed

The default modsecurity_rules_file overwrites the ModSecurity-snippet if it is specified with custom config settings like "SecRuleEngine On". This will not let Modsecurity be in blocking mode even if "SecRuleEngine On" is specified in the ModSecurity-snippet configuration

* Remove unnecessary comments

Only have the default Modsecurity conf settings in case Modsecurity configuration snippet is not present and remove unnecessary comments

* Fixed modsecurity default file only if Modsecurity snippet present

Fixed if condition  Modsecurity snippet present have modsecurity default config file

* Added e2e test to disabling modsecurity conf

Added e2e in case modsecurity-snippet enabled to disable settings in default modsecurity.conf

* Validate writing to a different location

Validate also modsecurity to write to a different location instead of the default directory

* Fixed the formatting

* Fixed if empty ModsecuritySnippet

* Fixed ModsecuritySnippet condition

* Fixed the condition also in ingress controller template

* Removed the default config condition  in ingress controller template

* Fixed the default config condition in ingress controller template

* Fixed pull-ingress-nginx-test

* Revert "Fixed the default config condition in ingress controller template"

This reverts commit 9d38eca40f.

* Revert template_test

* Adjusted the formating %v
2021-12-23 03:34:38 -08:00
..
admission/controller admission: improved log messages for ingress name (#7944) 2021-11-23 15:35:45 -08:00
file Update go version, modules and remove ioutil 2021-08-06 14:15:21 -03:00
ingress Disable default modsecurity_rules_file if modsecurity-snippet is specified (#8021) 2021-12-23 03:34:38 -08:00
k8s Update ingress to go 1.17 (#7521) 2021-08-23 14:25:25 -07:00
net use listen to ensure the port is free (#6990) (#7467) 2021-08-09 05:31:31 -07:00
nginx fix: discover mounted geoip db files (#7228) 2021-08-10 11:24:39 -07:00
runtime Update ingress to go 1.17 (#7521) 2021-08-23 14:25:25 -07:00
sets Refactor isIterable 2019-04-08 10:11:44 -04:00
task remove timestamp when requeuing Element (#7440) 2021-09-06 10:12:28 -07:00
watch Update go version, modules and remove ioutil 2021-08-06 14:15:21 -03:00