added waf in monitor mode

ministryofjustice · Mar 17, 2022 · 0971122 · 0971122
1 parent 1401569
commit 0971122
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/helm_deploy/cla-public/templates/ingress.yaml b/helm_deploy/cla-public/templates/ingress.yaml
@@ -8,13 +8,15 @@ metadata:
   labels:
     {{- include "cla-public.labels" . | nindent 4 }}
   annotations:
+    kubernetes.io/ingress.class: "modsec01"
     {{- if .Values.ingress.cluster.name }}
     external-dns.alpha.kubernetes.io/set-identifier: "{{ $fullName }}-{{ .Release.Namespace }}-{{- .Values.ingress.cluster.name -}}"
     external-dns.alpha.kubernetes.io/aws-weight: "{{- .Values.ingress.cluster.weight -}}"
     {{- end }}
   {{- with .Values.ingress.annotations }}
     {{- toYaml . | nindent 4 }}
   {{- end }}
+    nginx.ingress.kubernetes.io/enable-modsecurity: "true"
 spec:
   tls:
     - hosts: