From d93e294b7c7366385916a5e382393b55cf5e0398 Mon Sep 17 00:00:00 2001 From: Melvin Zottola Date: Mon, 4 Sep 2023 11:47:28 +0200 Subject: [PATCH 1/2] feat: Add nginx service advanced settings * network.ingress.extra_headers * network.ingress.proxy_buffering * network.ingress.proxy_request_buffering --- src/schemas/ApplicationAdvancedSettings.yaml | 12 ++++++++++++ src/schemas/ContainerAdvancedSettings.yaml | 12 ++++++++++++ 2 files changed, 24 insertions(+) diff --git a/src/schemas/ApplicationAdvancedSettings.yaml b/src/schemas/ApplicationAdvancedSettings.yaml index 79c07d7d..3d100ea5 100644 --- a/src/schemas/ApplicationAdvancedSettings.yaml +++ b/src/schemas/ApplicationAdvancedSettings.yaml @@ -94,6 +94,14 @@ properties: type: integer default: 60 description: Sets a timeout (in seconds) for reading a response from the proxied server + network.ingress.proxy_buffering: + type: string + default: "on" + description: Allows to enable or disable nginx `proxy-buffering` + network.ingress.proxy_request_buffering: + type: string + default: "on" + description: Allows to enable or disable nginx `proxy-request-buffering` network.ingress.whitelist_source_range: type: string description: | @@ -128,6 +136,10 @@ properties: type: integer description: Sets a timeout (in seconds) for transmitting a request to the grpc server default: 60 + network.ingress.extra_headers: + type: string + default: "{}" + description: Allows to define response headers hpa.cpu.average_utilization_percent: type: integer description: Percentage value of cpu usage at which point pods should scale up. diff --git a/src/schemas/ContainerAdvancedSettings.yaml b/src/schemas/ContainerAdvancedSettings.yaml index 751a9bca..b24bd3d2 100644 --- a/src/schemas/ContainerAdvancedSettings.yaml +++ b/src/schemas/ContainerAdvancedSettings.yaml @@ -83,6 +83,14 @@ properties: type: integer default: 60 description: Sets a timeout (in seconds) for reading a response from the proxied server + network.ingress.proxy_buffering: + type: string + default: "on" + description: Allows to enable or disable nginx `proxy-buffering` + network.ingress.proxy_request_buffering: + type: string + default: "on" + description: Allows to enable or disable nginx `proxy-request-buffering` network.ingress.grpc_send_timeout_seconds: type: integer description: Sets a timeout (in seconds) for transmitting a request to the grpc server @@ -106,6 +114,10 @@ properties: list of source ranges to deny access to ingress proxy. This property can be used to blacklist source IP ranges for ingress proxy. The value is a comma separated list of CIDRs, e.g. 10.0.0.0/24,172.10.0.1 + network.ingress.extra_headers: + type: string + default: "{}" + description: Allows to define response headers network.ingress.basic_auth_env_var: type: string default: "" From e394cd173df0a0788b4cbc9de21976a744545d8b Mon Sep 17 00:00:00 2001 From: Melvin Zottola Date: Mon, 4 Sep 2023 14:23:07 +0200 Subject: [PATCH 2/2] Add extra_headers examples --- src/schemas/ApplicationAdvancedSettings.yaml | 1 + src/schemas/ContainerAdvancedSettings.yaml | 1 + 2 files changed, 2 insertions(+) diff --git a/src/schemas/ApplicationAdvancedSettings.yaml b/src/schemas/ApplicationAdvancedSettings.yaml index 3d100ea5..d7042da2 100644 --- a/src/schemas/ApplicationAdvancedSettings.yaml +++ b/src/schemas/ApplicationAdvancedSettings.yaml @@ -140,6 +140,7 @@ properties: type: string default: "{}" description: Allows to define response headers + example: '{"X-Frame-Options":"DENY ","X-Content-Type-Options":"nosniff"}' hpa.cpu.average_utilization_percent: type: integer description: Percentage value of cpu usage at which point pods should scale up. diff --git a/src/schemas/ContainerAdvancedSettings.yaml b/src/schemas/ContainerAdvancedSettings.yaml index b24bd3d2..437788cd 100644 --- a/src/schemas/ContainerAdvancedSettings.yaml +++ b/src/schemas/ContainerAdvancedSettings.yaml @@ -118,6 +118,7 @@ properties: type: string default: "{}" description: Allows to define response headers + example: '{"X-Frame-Options":"DENY ","X-Content-Type-Options":"nosniff"}' network.ingress.basic_auth_env_var: type: string default: ""