ingress-nginx-helm/internal/ingress
Moh Basher fea7fed6da
Disable default modsecurity_rules_file if modsecurity-snippet is specified (#8021)
* Disabled default modsecurity_rules_file if modsecurity-snippet is specifed

The default modsecurity_rules_file overwrites the ModSecurity-snippet if it is specified with custom config settings like "SecRuleEngine On". This will not let Modsecurity be in blocking mode even if "SecRuleEngine On" is specified in the ModSecurity-snippet configuration

* Remove unnecessary comments

Only have the default Modsecurity conf settings in case Modsecurity configuration snippet is not present and remove unnecessary comments

* Fixed modsecurity default file only if Modsecurity snippet present

Fixed if condition  Modsecurity snippet present have modsecurity default config file

* Added e2e test to disabling modsecurity conf

Added e2e in case modsecurity-snippet enabled to disable settings in default modsecurity.conf

* Validate writing to a different location

Validate also modsecurity to write to a different location instead of the default directory

* Fixed the formatting

* Fixed if empty ModsecuritySnippet

* Fixed ModsecuritySnippet condition

* Fixed the condition also in ingress controller template

* Removed the default config condition  in ingress controller template

* Fixed the default config condition in ingress controller template

* Fixed pull-ingress-nginx-test

* Revert "Fixed the default config condition in ingress controller template"

This reverts commit 9d38eca40f.

* Revert template_test

* Adjusted the formating %v
2021-12-23 03:34:38 -08:00
..
annotations add canary-weight-total annotation (#6338) 2021-12-07 08:40:00 -08:00
controller Disable default modsecurity_rules_file if modsecurity-snippet is specified (#8021) 2021-12-23 03:34:38 -08:00
defaults Allow the usage of Services as Upstream on a global level (#7469) 2021-09-07 12:47:15 -07:00
errors implement canary annotation and alternative backends 2018-11-06 13:13:14 -05:00
metric feature: added AdmissionController metrics (#7711) 2021-11-02 10:54:34 -07:00
resolver chore: Add test to internal ingress resolver pkg 2020-12-23 13:33:12 -03:00
status Fix selector for shutting down Pods (#7727) 2021-09-29 21:10:09 -07:00
sslcert.go Update PemSHA field for default SSL certificate 2021-01-21 19:15:03 -03:00
types.go add canary-weight-total annotation (#6338) 2021-12-07 08:40:00 -08:00
types_equals.go feat: add session-cookie-secure annotation (#7399) 2021-09-01 15:23:40 -07:00
types_equals_test.go fix crl not reload when crl got updated in the ca secret 2021-03-31 16:13:07 -04:00
zz_generated.deepcopy.go Update ingress to go 1.17 (#7521) 2021-08-23 14:25:25 -07:00