Skip to content

Commit

Permalink
Increase ingress timeouts
Browse files Browse the repository at this point in the history
  • Loading branch information
josecsotomorales committed Feb 22, 2024
1 parent 3c3df91 commit a577adb
Showing 1 changed file with 8 additions and 2 deletions.
10 changes: 8 additions & 2 deletions charts/qualytics/templates/ingress.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,9 @@ metadata:
{{- end }}
nginx.ingress.kubernetes.io/proxy-redirect-from: 'http'
nginx.ingress.kubernetes.io/proxy-redirect-to: 'https'
nginx.ingress.kubernetes.io/proxy-connect-timeout: '3600'
nginx.ingress.kubernetes.io/proxy-read-timeout: '3600'
nginx.ingress.kubernetes.io/proxy-send-timeout: '3600'
nginx.ingress.kubernetes.io/use-regex: 'true'
nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
nginx.ingress.kubernetes.io/enable-modsecurity: 'true'
Expand Down Expand Up @@ -82,6 +85,11 @@ metadata:
{{- if ( eq .Values.certmanager.enabled true ) }}
cert-manager.io/cluster-issuer: 'letsencrypt'
{{- end }}
nginx.ingress.kubernetes.io/proxy-redirect-from: 'http'
nginx.ingress.kubernetes.io/proxy-redirect-to: 'https'
nginx.ingress.kubernetes.io/proxy-connect-timeout: '3600'
nginx.ingress.kubernetes.io/proxy-read-timeout: '3600'
nginx.ingress.kubernetes.io/proxy-send-timeout: '3600'
nginx.ingress.kubernetes.io/use-regex: 'true'
nginx.ingress.kubernetes.io/rewrite-target: /$1
nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
Expand All @@ -99,8 +107,6 @@ metadata:
SecAuditEngine RelevantOnly # could be On/Off/RelevantOnly
# addresses SC-14854
SecRule REQUEST_URI "@rx ^.*/\?(/\?)+/?$" "id:14854,phase:2,deny,status:403"
nginx.ingress.kubernetes.io/proxy-redirect-from: 'http'
nginx.ingress.kubernetes.io/proxy-redirect-to: 'https'
nginx.ingress.kubernetes.io/configuration-snippet: |
add_header X-Frame-Options "sameorigin";
add_header X-Content-Type-Options nosniff;
Expand Down

0 comments on commit a577adb

Please sign in to comment.