Skip to content
Snippets Groups Projects
Verified Commit 6cdfc888 authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

fix(monitoring): Disable modsecurity

After some considerations regarding resource use and false-positives, it
seems like a good idea to disable modsecurity especially since it seems
to cause issues with oauth-proxy and general high entrophy workload.
parent 51c1539a
No related branches found
No related tags found
No related merge requests found
...@@ -15,12 +15,6 @@ metadata: ...@@ -15,12 +15,6 @@ metadata:
ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)") ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
end end
} }
nginx.ingress.kubernetes.io/enable-modsecurity: "true"
nginx.ingress.kubernetes.io/enable-owasp-core-rules: "true"
nginx.ingress.kubernetes.io/modsecurity-transaction-id: $request_id
nginx.ingress.kubernetes.io/modsecurity-snippet: |
SecRuleEngine On
SecRuleRemoveById 949110
spec: spec:
rules: rules:
- host: ENC[AES256_GCM,data:k1mCBDKYvRLLC489r7yvk9PRDsQh5IgUpOaOfdhpQCwUNN8=,iv:AuBQnC2duZJM5/aYASq6gcovFPhECGk9EWjMaBgeRzQ=,tag:VdMb/Rn54dWpbDjxbEjPvA==,type:str] - host: ENC[AES256_GCM,data:k1mCBDKYvRLLC489r7yvk9PRDsQh5IgUpOaOfdhpQCwUNN8=,iv:AuBQnC2duZJM5/aYASq6gcovFPhECGk9EWjMaBgeRzQ=,tag:VdMb/Rn54dWpbDjxbEjPvA==,type:str]
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment