Skip to content

feat: Add support for modsecurity secruleengine configuration

Lucas Charles requested to merge 8558-support-modsecurity-secruleengine into master

In support of gitlab-org/gitlab#8558 (closed), this MR adds support for passing AUTO_DEVOPS_MODSECURITY_SEC_RULE_ENGINE to the underlying chart to customize execution of modsecurity within the ingress nginx configuration.

This configuration is enabled as "DetectionOnly" by default within the nginx-controller ConfigMap but overridable per ingress resource. This allows customization of the specific handling of the ruleset, in this case enabling the engine to be toggled to "Off" or "On" to either disable rulechecks entirely or enable blocking mode.

This MR is paired with gitlab-org/charts/auto-deploy-app!12 (merged) which adds the necessary fields to the chart

Edited by Lucas Charles

Merge request reports