tomsolem / waf-syncer

A thing that syncs Istio VirtualServices/Gateways to WAF

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Prerequisites

Create a Azure SP that has Owner level permissions to the desired WAF instance. Then create a secret on the cluster that is going to run the director.

kubectl create secret generic -n kube-system ace-waf-director \
    --from-literal="client_id=$AZURE_CLIENT_ID" \
    --from-literal="client_secret=$AZURE_CLIENT_SECRET" \
    --from-literal="tenant_id=$AZURE_TENANT_ID" \
    --from-literal="subscription_id=$AZURE_SUBSCRIPTION_ID"

Use the helm chart to install it into k8s.

Inspiration for http redirect

Azure/application-gateway-kubernetes-ingress#132

About

A thing that syncs Istio VirtualServices/Gateways to WAF


Languages

Language:Go 96.1%Language:Makefile 2.1%Language:Shell 1.8%Language:Dockerfile 0.1%