feat: test deny rules

oscaromeu · Mar 25, 2024 · 484a705 · 484a705
1 parent c4ed226
commit 484a705
Showing 1 changed file with 3 additions and 8 deletions.
diff --git a/kubernetes/apps/dev/podinfo/app/helmrelease.yaml b/kubernetes/apps/dev/podinfo/app/helmrelease.yaml
@@ -46,20 +46,15 @@ spec:
         hajimari.io/icon: simple-icons:podinfo
         hajimari.io/group: "Public"
         nginx.ingress.kubernetes.io/server-snippet: |
-          location ~* "^/metrics" {
-              deny all;
+          if ($request_uri = /metrics) {
               return 403;
-            }
+          }
         #nginx.ingress.kubernetes.io/auth-url: http://authelia.kube-system.svc.cluster.local/api/verify
         #nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_DOMAIN}
       hosts:
         - host: &host "podinfo.${SECRET_DOMAIN}"
           paths:
-            - path: /(.*)
-              pathType: ImplementationSpecific
-        - host: *host
-          paths:
-            - path: /metrics(/.*)
+            - path: /
               pathType: ImplementationSpecific
       tls:
         - hosts: