github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-08-12 21:05:59 +03:00
Code Issues Packages Projects Releases Wiki Activity

Add kong gateway (#42)

Browse Source 
* add gateway

* fix right command

* fix CMakeLists

* add uzip package

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
This commit is contained in:
wiaam-mhameed 2025-07-29 09:44:19 +03:00 committed by GitHub
parent 4667ec899a
commit 6154961b0b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 40 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
docker/CMakeLists.txt
View File

@ -10,3 +10,4 @@ add_custom_target(docker DEPENDS ${CMAKE_INSTALL_PREFIX}/nginx-docker.img)
add_subdirectory(openappsec-envoy-attachments)
add_subdirectory(openappsec-waf-webhook)
add_subdirectory(openappsec-kong-plugin)
add_subdirectory(openappsec-kong-gateway-plugin)

9
docker/openappsec-kong-gateway-plugin/CMakeLists.txt Executable file
View File

@ -0,0 +1,9 @@
message(STATUS "OUTPUT_KONG_PLUGIN_DOCKER_IMAGE = ${OUTPUT_KONG_PLUGIN_DOCKER_IMAGE}")
add_custom_command(
OUTPUT ${CMAKE_INSTALL_PREFIX}/kong-gateway-plugin-docker.img
COMMAND docker build --load -t kong-gateway-plugin-docker --network host -f ${CMAKE_CURRENT_SOURCE_DIR}/Dockerfile ${CMAKE_INSTALL_PREFIX}
COMMAND docker tag kong-gateway-plugin-docker ${OUTPUT_KONG_PLUGIN_DOCKER_IMAGE}
COMMAND docker image save kong-gateway-plugin-docker -o ${CMAKE_INSTALL_PREFIX}/kong-gateway-plugin-docker.img
)
add_custom_target(kong-gateway-plugin-docker DEPENDS ${CMAKE_INSTALL_PREFIX}/kong-gateway-plugin-docker.img)

30
docker/openappsec-kong-gateway-plugin/Dockerfile Executable file
View File

@ -0,0 +1,30 @@
FROM kong/kong-gateway
USER root
RUN apt-get update && apt-get install -y --no-install-recommends \
build-essential git curl zlib1g-dev ca-certificates unzip && \
rm -rf /var/lib/apt/lists/*
RUN curl -sL https://github.com/USCiLab/cereal/archive/refs/tags/v1.3.2.tar.gz | tar xz && \
mkdir -p /usr/local/include/cereal && \
cp -r cereal-1.3.2/include/cereal /usr/local/include/ && \
rm -rf cereal-1.3.2
ENV LUAROCKS_VER=3.11.0
RUN curl -fSL https://luarocks.org/releases/luarocks-${LUAROCKS_VER}.tar.gz -o luarocks-${LUAROCKS_VER}.tar.gz && \
tar xzf luarocks-${LUAROCKS_VER}.tar.gz && \
cd luarocks-${LUAROCKS_VER} && \
./configure \
--with-lua=/usr/local/openresty/luajit \
--with-lua-include=/usr/local/openresty/luajit/include/luajit-2.1 && \
make && make install && \
cd .. && rm -rf luarocks-${LUAROCKS_VER}*
# Install the plugin via LuaRocks
RUN luarocks install https://raw.githubusercontent.com/openappsec/attachment/main/attachments/kong/plugins/open-appsec-waf-kong-plugin/open-appsec-waf-kong-plugin-1.0.0-1.rockspec
USER kong
# Enable the plugin
ENV KONG_PLUGINS=bundled,open-appsec-waf-kong-plugin