-
Notifications
You must be signed in to change notification settings - Fork 129
Closed
Labels
enhancementNew feature or requestNew feature or requestrefinedRequirements are refined and the issue is ready to be implemented.Requirements are refined and the issue is ready to be implemented.
Milestone
Description
As a user
I want to be able to toggle WAF protection on for my Gateway
So that my dataplane deployment is running with the NAP engine enabled
Acceptance
- Extend NGINXProxy to provide a configuration option to enable WAF, and to support optional setting of other WAF related fields, e.g.
apiVersion: gateway.nginx.org/v1alpha2
kind: NginxProxy
metadata:
name: nginx-proxy-waf
namespace: nginx-gateway
spec:
# WAF policy configuration (extensible design)
waf: "Enabled" # "Enabled" | "Disabled"
# configuration tweaks optional, e.g.:
# kubernetes:
# deployment:
# # NGINX container with NAP module (will set to default if waf is "Enabled" but these values are not configured)
# container:
# image:
# repository: private-registry.nginx.com/nginx-gateway-fabric/nginx-plus-waf
# tag: "2.1.0"
# # NAP v5 required containers (will set to defaults if waf is "Enabled" but these values are not configured)
# wafContainers:
# enforcer:
# image:
# repository: private-registry.nginx.com/nap/waf-enforcer
# tag: "5.6.0"
# configManager:
# image:
# repository: private-registry.nginx.com/nap/waf-config-mgr
# tag: "5.6.0"
- Update the provisioner to conditionally deploy WAF containers as part of the NGINX deployment when waf is enabled
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestrefinedRequirements are refined and the issue is ready to be implemented.Requirements are refined and the issue is ready to be implemented.
Type
Projects
Status
✅ Done