Refactor ingress configuration to disable SSL redirect and force SSL …

…backend protocol
adamlahbib · Nov 17, 2024 · 264be3f · 264be3f
1 parent 754149c
commit 264be3f
Showing 1 changed file with 3 additions and 10 deletions.
diff --git a/terraform/ingress.tf b/terraform/ingress.tf
@@ -43,11 +43,9 @@ resource "kubernetes_ingress_v1" "dev-ingress" {
         namespace = "dev"
         annotations = {
             "nginx.ingress.kubernetes.io/rewrite-target" = "/"
-            "nginx.ingress.kubernetes.io/ssl-redirect"    = "true"
+            "nginx.ingress.kubernetes.io/ssl-redirect"    = "false"
             "nginx.ingress.kubernetes.io/force-ssl-redirect" = "false"
             "nginx.ingress.kubernetes.io/backend-protocol" = "HTTPS"
-            "nginx.ingress.kubernetes.io/configuration-snippet" = "if ($http_x_forwarded_proto = 'http') {return 301 https://$host$request_uri;}"
-            "openappsec.io/policy" = "open-appsec-best-practice-policy"
         }
     }
 
@@ -88,12 +86,9 @@ resource "kubernetes_ingress_v1" "prod-ingress" {
         namespace = "prod"
         annotations = {
             "nginx.ingress.kubernetes.io/rewrite-target" = "/"
-            "nginx.ingress.kubernetes.io/ssl-redirect"    = "true"
+            "nginx.ingress.kubernetes.io/ssl-redirect"    = "false"
             "nginx.ingress.kubernetes.io/force-ssl-redirect" = "false"
             "nginx.ingress.kubernetes.io/backend-protocol" = "HTTPS"
-            "nginx.ingress.kubernetes.io/configuration-snippet" = "if ($http_x_forwarded_proto = 'http') {return 301 https://$host$request_uri;}"
-            "openappsec.io/policy" = "open-appsec-best-practice-policy"
-
         }
     }
 
@@ -134,11 +129,9 @@ resource "kubernetes_ingress_v1" "monitoring-ingress" {
         namespace = "monitoring"
         annotations = {
             "nginx.ingress.kubernetes.io/rewrite-target" = "/"
-            "nginx.ingress.kubernetes.io/ssl-redirect"    = "true"
+            "nginx.ingress.kubernetes.io/ssl-redirect"    = "false"
             "nginx.ingress.kubernetes.io/force-ssl-redirect" = "false"
             "nginx.ingress.kubernetes.io/backend-protocol" = "HTTPS"
-            "nginx.ingress.kubernetes.io/configuration-snippet" = "if ($http_x_forwarded_proto = 'http') {return 301 https://$host$request_uri;}"
-            "openappsec.io/policy" = "open-appsec-best-practice-policy"
         }
     }