🔒 first iteration ingress hardenning

scality · Nov 28, 2024 · 7f80c99 · 7f80c99
1 parent f6153c1
commit 7f80c99
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/salt/metalk8s/addons/nginx-ingress/config/ingress-controller.yaml.j2 b/salt/metalk8s/addons/nginx-ingress/config/ingress-controller.yaml.j2
@@ -6,3 +6,6 @@ kind: IngressControllerConfig
 spec:
   config:
     allow-snippet-annotations: 'true'
+    hide-headers: 'Server,X-Powered-By'
+    ssl-ciphers: 'EECDH+AESGCM:EDH+AESGCM'
+    ssl-protocols: 'TLSv1.2 TLSv1.3'
diff --git a/salt/metalk8s/addons/nginx-ingress/deployed/config-map.sls b/salt/metalk8s/addons/nginx-ingress/deployed/config-map.sls
@@ -23,6 +23,7 @@ Create Ingress Controller configuration Config Map:
             app.kubernetes.io/name: ingress-nginx
             app.kubernetes.io/part-of: metalk8s
             heritage: metalk8s
+          annotations:
+            ingressclass.kubernetes.io/is-default-class: "true"
         data:
           {{ ingress_controller.spec.config | yaml(False) | indent(10) }}
-