Skip to content

Commit

Permalink
add grpc unary support
Browse files Browse the repository at this point in the history
  • Loading branch information
Rafal Wegrzycki committed May 4, 2021
1 parent 54e0b07 commit a0e60fa
Show file tree
Hide file tree
Showing 5 changed files with 1,804 additions and 1,482 deletions.
1 change: 1 addition & 0 deletions deployments/common/crds/appprotect.f5.com_aplogconfs.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,7 @@ spec:
- arcsight
- default
- user-defined
- grpc
type: string
format_string:
type: string
Expand Down
154 changes: 154 additions & 0 deletions deployments/common/crds/appprotect.f5.com_appolicies.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -161,6 +161,11 @@ spec:
type: string
name:
enum:
- VIOL_GRPC_FORMAT
- VIOL_GRPC_MALFORMED
- VIOL_GRPC_METHOD
- VIOL_PARAMETER_ARRAY_VALUE
- VIOL_PARAMETER_VALUE_REGEXP
- VIOL_PARAMETER_VALUE_BASE64
- VIOL_MANDATORY_HEADER
- VIOL_HEADER_REPEATED
Expand Down Expand Up @@ -377,6 +382,8 @@ spec:
- explicit
- wildcard
type: string
wildcardOrder:
type: integer
type: object
type: array
data-guard:
Expand Down Expand Up @@ -427,6 +434,8 @@ spec:
filetypes:
items:
properties:
action:
type: string
allowed:
type: boolean
checkPostDataLength:
Expand Down Expand Up @@ -454,6 +463,8 @@ spec:
type: string
urlLength:
type: integer
wildcardOrder:
type: integer
type: object
type: array
fullPath:
Expand Down Expand Up @@ -482,6 +493,62 @@ spec:
pattern: ^http
type: string
type: object
grpc-profiles:
items:
properties:
associateUrls:
type: boolean
attackSignaturesCheck:
type: boolean
defenseAttributes:
properties:
allowUnknownFields:
type: boolean
maximumDataLength:
pattern: any|\d+
type: string
type: object
description:
type: string
hasIdlFiles:
type: boolean
idlFiles:
items:
properties:
idlFile:
properties:
contents:
type: string
fileName:
type: string
isBase64:
type: boolean
type: object
isPrimary:
type: boolean
primaryIdlFileName:
type: string
type: object
type: array
metacharElementCheck:
type: boolean
name:
type: string
signatureOverrides:
items:
properties:
enabled:
type: boolean
name:
type: string
signatureId:
type: integer
tag:
type: string
type: object
type: array
type: object
type: array
header-settings:
properties:
maximumHttpHeaderLength:
Expand All @@ -503,6 +570,8 @@ spec:
headers:
items:
properties:
allowRepeatedOccurrences:
type: boolean
base64Decoding:
type: boolean
checkSignatures:
Expand All @@ -525,13 +594,39 @@ spec:
type: boolean
percentDecoding:
type: boolean
signatureOverrides:
items:
properties:
enabled:
type: boolean
name:
type: string
signatureId:
type: integer
tag:
type: string
type: object
type: array
type:
enum:
- explicit
- wildcard
type: string
urlNormalization:
type: boolean
wildcardOrder:
type: integer
type: object
type: array
idl-files:
items:
properties:
contents:
type: string
fileName:
type: string
isBase64:
type: boolean
type: object
type: array
json-profiles:
Expand All @@ -558,6 +653,8 @@ spec:
type: object
description:
type: string
handleJsonValuesAsParameters:
type: boolean
hasValidationFiles:
type: boolean
metacharOverrides:
Expand Down Expand Up @@ -636,6 +733,8 @@ spec:
methods:
items:
properties:
action:
type: string
name:
type: string
type: object
Expand Down Expand Up @@ -719,6 +818,8 @@ spec:
type: boolean
exclusiveMin:
type: boolean
isBase64:
type: boolean
isCookie:
type: boolean
isHeader:
Expand All @@ -728,12 +829,20 @@ spec:
- global
- url
type: string
mandatory:
type: boolean
maximumLength:
type: integer
maximumValue:
type: integer
metacharsOnParameterValueCheck:
type: boolean
minimumLength:
type: integer
minimumValue:
type: integer
multipleOf:
type: integer
name:
type: string
nameMetacharOverrides:
Expand Down Expand Up @@ -784,6 +893,8 @@ spec:
- explicit
- wildcard
type: string
url:
type: object
valueMetacharOverrides:
items:
properties:
Expand All @@ -807,6 +918,8 @@ spec:
- user-input
- xml
type: string
wildcardOrder:
type: integer
type: object
type: array
response-pages:
Expand All @@ -826,6 +939,11 @@ spec:
type: string
ajaxRedirectUrl:
type: string
grpcStatusCode:
pattern: ABORTED|ALREADY_EXISTS|CANCELLED|DATA_LOSS|DEADLINE_EXCEEDED|FAILED_PRECONDITION|INTERNAL|INVALID_ARGUMENT|NOT_FOUND|OK|OUT_OF_RANGE|PERMISSION_DENIED|RESOURCE_EXHAUSTED|UNAUTHENTICATED|UNAVAILABLE|UNIMPLEMENTED|UNKNOWN|d+
type: string
grpcStatusMessage:
type: string
responseActionType:
enum:
- custom
Expand Down Expand Up @@ -853,6 +971,7 @@ spec:
- mobile
- persistent-flow
- xml
- grpc
type: string
responseRedirectUrl:
type: string
Expand Down Expand Up @@ -1060,6 +1179,8 @@ spec:
urls:
items:
properties:
$action:
type: string
attackSignaturesCheck:
type: boolean
description:
Expand Down Expand Up @@ -1242,6 +1363,8 @@ spec:
type: boolean
exclusiveMin:
type: boolean
isBase64:
type: boolean
isCookie:
type: boolean
isHeader:
Expand All @@ -1251,12 +1374,20 @@ spec:
- global
- url
type: string
mandatory:
type: boolean
maximumLength:
type: integer
maximumValue:
type: integer
metacharsOnParameterValueCheck:
type: boolean
minimumLength:
type: integer
minimumValue:
type: integer
multipleOf:
type: integer
name:
type: string
nameMetacharOverrides:
Expand Down Expand Up @@ -1307,6 +1438,8 @@ spec:
- explicit
- wildcard
type: string
url:
type: object
valueMetacharOverrides:
items:
properties:
Expand All @@ -1330,6 +1463,8 @@ spec:
- user-input
- xml
type: string
wildcardOrder:
type: integer
type: object
urlSegmentIndex:
type: integer
Expand Down Expand Up @@ -1361,6 +1496,11 @@ spec:
urlContentProfiles:
items:
properties:
contentProfile:
properties:
name:
type: string
type: object
headerName:
type: string
headerOrder:
Expand All @@ -1379,6 +1519,7 @@ spec:
- gwt
- json
- xml
- grpc
type: string
type: object
type: array
Expand Down Expand Up @@ -1466,6 +1607,19 @@ spec:
type: boolean
name:
type: string
signatureOverrides:
items:
properties:
enabled:
type: boolean
name:
type: string
signatureId:
type: integer
tag:
type: string
type: object
type: array
type: object
type: array
xml-validation-files:
Expand Down
Loading

0 comments on commit a0e60fa

Please sign in to comment.