Closed
Description
As a user
I want to be able to toggle WAF protection on for my Gateway
So that my dataplane deployment is running with the NAP engine enabled
Acceptance
- Extend NGINXProxy to provide a configuration option to enable WAF, and to support optional setting of other WAF related fields, e.g.
apiVersion: gateway.nginx.org/v1alpha2
kind: NginxProxy
metadata:
name: nginx-proxy-waf
namespace: nginx-gateway
spec:
# WAF policy configuration (extensible design)
waf: "Enabled" # "Enabled" | "Disabled"
# configuration tweaks optional, e.g.:
# kubernetes:
# deployment:
# # NGINX container with NAP module (will set to default if waf is "Enabled" but these values are not configured)
# container:
# image:
# repository: private-registry.nginx.com/nginx-gateway-fabric/nginx-plus-waf
# tag: "2.1.0"
# # NAP v5 required containers (will set to defaults if waf is "Enabled" but these values are not configured)
# wafContainers:
# enforcer:
# image:
# repository: private-registry.nginx.com/nap/waf-enforcer
# tag: "5.6.0"
# configManager:
# image:
# repository: private-registry.nginx.com/nap/waf-config-mgr
# tag: "5.6.0"
- Update the provisioner to conditionally deploy WAF containers as part of the NGINX deployment when waf is enabled
Metadata
Metadata
Assignees
Type
Projects
Status
✅ Done