diff --git a/profisee-platform/Chart.yaml b/profisee-platform/Chart.yaml index cbfcb3e..8b8d79f 100644 --- a/profisee-platform/Chart.yaml +++ b/profisee-platform/Chart.yaml @@ -3,4 +3,4 @@ appVersion: 1.16.0 description: A Helm chart for Profisee Platform on Kubernetes name: profisee-platform type: application -version: 0.1.26 +version: 0.1.27 diff --git a/profisee-platform/templates/ingress-profisee.yaml b/profisee-platform/templates/ingress-profisee.yaml index 9931afd..21a2647 100644 --- a/profisee-platform/templates/ingress-profisee.yaml +++ b/profisee-platform/templates/ingress-profisee.yaml @@ -17,6 +17,20 @@ metadata: nginx.ingress.kubernetes.io/proxy-read-timeout: "5400" nginx.ingress.kubernetes.io/proxy-request-buffering: "off" nginx.ingress.kubernetes.io/proxy-send-timeout: "5400" + nginx.ingress.kubernetes.io/server-snippet: | + set $block 0; + if ($http_x_gateway_validated != 1) { + set $block 1; + } + if ($http_x_from_agw != 1) { + set $block 0; + } + if ($uri = "/healthcheck" ) { + set $block 0; + } + if ($block = 1) { + return 403; + } {{- if .Values.profiseeRunTime.isPaaS }} nginx.ingress.kubernetes.io/rewrite-target: /$1 {{- end }} diff --git a/profisee-platform/values.yaml b/profisee-platform/values.yaml index 2cb33db..82f619e 100644 --- a/profisee-platform/values.yaml +++ b/profisee-platform/values.yaml @@ -3,6 +3,8 @@ sqlServer: databaseName: "$SQLDBNAME" userName: "$SQLUSERNAME" password: "$SQLUSERPASSWORD" +ingress: + impervaHeaderId: "" profiseeRunTime: useLetsEncrypt: $USELETSENCRYPT adminAccount: "$ADMINACCOUNTNAME"