Update open-appsec-k8s-full-example-config-v1beta2.yaml

config/k8s/v1beta2/open-appsec-k8s-full-example-config-v1beta2.yaml

@@ -84,42 +84,45 @@ spec:
         threatPreventionPractices: [threat-prevention-practice-example]
         triggers: [log-trigger-example]
         customResponse: custom-response-response-code-example
-        sourceIdentifiers: ""
+        sourceIdentifiers: sources-identifier-example
-        trustedSources: ""
+        trustedSources: trusted-sources-example
         exceptions:
         - exception-example
-
 ---
 apiVersion: openappsec.io/v1beta2
 kind: ThreatPreventionPractice
 metadata:
   name: threat-prevention-practice-example
 spec:
-  name: custom-web-protection
+  practiceMode: inherited
-  practiceMode: prevent
   webAttacks:
-    overrideMode: prevent-learn
+    overrideMode: inherited
     minimumConfidence: high
-    maxUrlSizeBytes: 4096
+  intrusionPrevention:
-    maxObjectDepth: 10
+  # intrusion prevention (IPS) requires "Premium Edition"
-    maxBodySizeKb: 1024
+    overrideMode: inherited
-    maxHeaderSizeBytes: 8192
+    maxPerformanceImpact: medium
-    protections:
+    minSeverityLevel: medium
-      csrfProtection: prevent
+    minCveYear: 2016
-      errorDisclosure: detect
+    highConfidenceEventAction: inherited
-      openRedirect: inactive
+    mediumConfidenceEventAction: inherited
-      nonValidHttpMethods: true
+    lowConfidenceEventAction: detect
-  antiBot:
+  fileSecurity:
-    overrideMode: detect
+  # file security requires "Premium Edition"
-    injectedUris:
+    overrideMode: inherited
-      - /admin/login
+    minSeverityLevel: medium
-      - /user/auth
+    highConfidenceEventAction: inherited
-    validatedUris:
+    mediumConfidenceEventAction: inherited
-      - /secure-area
+    lowConfidenceEventAction: detect
   snortSignatures:
+    # you must specify snort signatures in configmap or file to activate snort inspection
     overrideMode: inherited
     configmap: []
+    # relevant for deployments on kubernetes
+    # 0 or 1 configmaps supported in array
     files: []
+    # relevant for docker and linux embedded deployments
+    # 0 or 1 files supported in array
   schemaValidation: # schema validation requires "Premium Edition"
     overrideMode: inherited
     configmap: []
@@ -128,13 +131,10 @@ spec:
     files: []
     # relevant for docker and linux embedded deployments
     # 0 or 1 files supported in array
-  intrusionPrevention:
+  antiBot: # antibot requires "Premium Edition"
-    overrideMode: detect
+    overrideMode: inherited
-    maxPerformanceImpact: medium
+    injectedUris: []
-    minSeverityLevel: high
+    validatedUris: []
-    minCveYear: 2015
-    highConfidenceEventAction: prevent
-    mediumConfidenceEventAction: detect
 
 ---
 apiVersion: openappsec.io/v1beta2
@@ -147,3 +147,15 @@ spec:
     - 1.0.0.27
     - 1.0.0.28
     - 1.0.0.29
+
+---
+kind: SourcesIdentifier
+metadata:
+  name: sources-identifier-example
+spec:
+  sourcesIdentifiers:
+    - identifier: sourceip
+      value:
+        - "192.168.1.1" 
+        - "10.0.0.1"
+