extra waf rules per ingress (#2315)

* extra waf rules per ingress * document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules * regenerate internal/file/bindata.go
2018-04-09 06:14:30 -04:00 · 2018-04-09 06:14:30 -04:00 · bad8295a42
commit bad8295a42
parent 16faf309ca
5 changed files with 67 additions and 8 deletions
--- a/rootfs/etc/nginx/template/nginx.tmpl
+++ b/rootfs/etc/nginx/template/nginx.tmpl
@ -839,6 +839,10 @@ stream {
                waf:set_option("ignore_ruleset", "{{ $ruleset }}")
                {{ end }}

+                {{ if gt (len $location.LuaRestyWAF.ExtraRulesetString) 0 }}
+                waf:set_option("add_ruleset_string", "10000_extra_rules", {{ $location.LuaRestyWAF.ExtraRulesetString }})
+                {{ end }}
+
                waf:exec()
            }
            header_filter_by_lua_block {