Skip to content

Extend NGINXProxy with waf enabled toggle #3453

Closed
@ciarams87

Description

@ciarams87

As a user
I want to be able to toggle WAF protection on for my Gateway
So that my dataplane deployment is running with the NAP engine enabled

Acceptance

  • Extend NGINXProxy to provide a configuration option to enable WAF, and to support optional setting of other WAF related fields, e.g.
apiVersion: gateway.nginx.org/v1alpha2
kind: NginxProxy
metadata:
  name: nginx-proxy-waf
  namespace: nginx-gateway
spec:
  # WAF policy configuration (extensible design)
  waf: "Enabled"  # "Enabled" | "Disabled"
# configuration tweaks optional, e.g.:
#   kubernetes:
#     deployment:
#       # NGINX container with NAP module (will set to default if waf is "Enabled" but these values are not configured)
#       container:
#         image:
#           repository: private-registry.nginx.com/nginx-gateway-fabric/nginx-plus-waf
#           tag: "2.1.0"

#       # NAP v5 required containers (will set to defaults if waf is "Enabled" but these values are not configured)
#       wafContainers:
#         enforcer:
#           image:
#             repository: private-registry.nginx.com/nap/waf-enforcer
#             tag: "5.6.0"

#         configManager:
#           image:
#             repository: private-registry.nginx.com/nap/waf-config-mgr
#             tag: "5.6.0"
  • Update the provisioner to conditionally deploy WAF containers as part of the NGINX deployment when waf is enabled

Metadata

Metadata

Assignees

Labels

enhancementNew feature or requestrefinedRequirements are refined and the issue is ready to be implemented.

Type

No type

Projects

Status

✅ Done

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions