mirror of
https://github.com/openappsec/openappsec.git
synced 2025-06-28 16:41:02 +03:00
57 lines
1.9 KiB
YAML
57 lines
1.9 KiB
YAML
static_resources:
|
|
listeners:
|
|
- name: listener_0
|
|
address:
|
|
socket_address:
|
|
address: 0.0.0.0
|
|
port_value: 80
|
|
filter_chains:
|
|
- filters:
|
|
- name: envoy.filters.network.http_connection_manager
|
|
typed_config:
|
|
"@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
|
|
stat_prefix: ingress_http
|
|
http_filters:
|
|
## The following 10 lines are required to load the envoy attachment filter for open-appsec
|
|
- name: envoy.filters.http.golang
|
|
typed_config:
|
|
"@type": type.googleapis.com/envoy.extensions.filters.http.golang.v3alpha.Config
|
|
library_id: cp_nano_filter
|
|
library_path: "/usr/lib/libenvoy_attachment.so"
|
|
plugin_name: cp_nano_filter
|
|
plugin_config:
|
|
"@type": type.googleapis.com/xds.type.v3.TypedStruct
|
|
value:
|
|
prefix_localreply_body: "Configured local reply from go"
|
|
- name: envoy.filters.http.router
|
|
typed_config:
|
|
"@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
|
|
|
|
##
|
|
## The following lines allow you to deploy routing of ingress traffic to the optional juice-shop example container available in the open-appsec docker-compose.yaml file.
|
|
##
|
|
route_config:
|
|
name: local_route
|
|
virtual_hosts:
|
|
- name: local_service
|
|
domains: ["*"]
|
|
routes:
|
|
- match:
|
|
prefix: "/"
|
|
route:
|
|
cluster: juiceshop
|
|
|
|
clusters:
|
|
- name: juiceshop
|
|
type: STRICT_DNS
|
|
lb_policy: ROUND_ROBIN
|
|
load_assignment:
|
|
cluster_name: juiceshop
|
|
endpoints:
|
|
- lb_endpoints:
|
|
- endpoint:
|
|
address:
|
|
socket_address:
|
|
address: juiceshop-backend
|
|
port_value: 3000
|