chore: setup rate limit

Informasjonsforvaltning · Sep 30, 2024 · f267c8a · f267c8a
1 parent 7ad01b8
commit f267c8a
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 0 deletions.
diff --git a/deploy/demo/ingress.yaml b/deploy/demo/ingress.yaml
@@ -3,6 +3,16 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: catalog-admin-service
+  annotations:
+    nginx.ingress.kubernetes.io/limit-rps: '6'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules:

diff --git a/deploy/prod/ingress.yaml b/deploy/prod/ingress.yaml
@@ -3,6 +3,16 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: catalog-admin-service
+  annotations:
+    nginx.ingress.kubernetes.io/limit-rps: '6'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules:

diff --git a/deploy/staging/ingress.yaml b/deploy/staging/ingress.yaml
@@ -3,6 +3,16 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: catalog-admin-service
+  annotations:
+    nginx.ingress.kubernetes.io/limit-rps: '6'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules: