alb-ingress-waf

ingress.yml

apiVersion: networking:k8s.io/v1
kind: Ingress
metadata:
  name: app-name
  annotations:
    alb.ingress.kubernetes.io/group.name: staging
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/target-type: ip
    alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:eu-west-2:123456789:certificate/124-123-12babc
    alb.ingress.kubernetes.io/actions.ssl-redirect: '{"type":"redirect", "redirectconfig": {"protocol":"https","port":"443","statuscode":"HTTP_301"}}'
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP":80}, {"HTTPS":443}'
    alb.ingress.kubernetes.io/healthcheck-path: /
    alb.ingress.kubernetes.io/waf-acl-id: abc1234567890
  spec:
    ingressClassName: alb
    rules:
    - host: "app.pipeops.dev"
      http:
        paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: app-svc
              port:
                number: 80