GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → ergon → airlock-waf-kubernetes-openshift-integration

ergon / airlock-waf-kubernetes-openshift-integration

Licence: MIT license
Integrate Airlock WAF in a Kubernetes or OpenShift Environment

Programming Languages

java
68154 projects - #9 most used programming language

Labels

kubernetesopenshiftwafairlock

Projects that are alternatives of or similar to airlock-waf-kubernetes-openshift-integration

camunda-cloud-helm
Camunda Platform 8 Self-Managed Helm charts
Stars: ✭ 41 (+241.67%)
Mutual labels:  openshift
django-probes
Django app to run database liveness probe in a Kubernetes project
Stars: ✭ 32 (+166.67%)
Mutual labels:  openshift
shepherd
A Drupal-based controller to the Shepherd site management platform.
Stars: ✭ 16 (+33.33%)
Mutual labels:  openshift
Chowkidar
A kubernetes controller that watches/observes events & then takes configured actions – [✩Star] if you're using it!
Stars: ✭ 55 (+358.33%)
Mutual labels:  openshift
kubernetes-kafka
Managing kafka clusters in Kubernetes and OpenShift
Stars: ✭ 18 (+50%)
Mutual labels:  openshift
istio-workspace
Safely develop and test on any Kubernetes cluster without affecting others.
Stars: ✭ 55 (+358.33%)
Mutual labels:  openshift
ChRIS ultron backEnd
Backend for ChRIS
Stars: ✭ 28 (+133.33%)
Mutual labels:  openshift
openshift-wiki
Gitbook URL of WIKI
Stars: ✭ 16 (+33.33%)
Mutual labels:  openshift
ingress
Kubernetes Ingress controller with integrated Wallarm services
Stars: ✭ 31 (+158.33%)
Mutual labels:  waf
web
Hugo content for the openshift.tips blog
Stars: ✭ 48 (+300%)
Mutual labels:  openshift
s2i-ruby-container
Ruby container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running Ruby applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
Stars: ✭ 55 (+358.33%)
Mutual labels:  openshift
dockerevil
My security researches involving Docker and Openshift
Stars: ✭ 28 (+133.33%)
Mutual labels:  openshift
kuberig
Deploy to Kubernetes/OpenShift by leveraging your developer skills - no yaml required!
Stars: ✭ 31 (+158.33%)
Mutual labels:  openshift
ocp4upc
OCP4 Upgrade Paths Checker
Stars: ✭ 30 (+150%)
Mutual labels:  openshift
waflab
A web-based testing platform for WAF (Web Application Firewall)'s correctness
Stars: ✭ 25 (+108.33%)
Mutual labels:  waf
backup-repository
Backup storage for E2E GPG-encrypted files, with multi-user, quotas, versioning, using a object storage (S3/Min.io/GCS etc.) and deployed on Kubernetes or standalone.
Stars: ✭ 21 (+75%)
Mutual labels:  openshift
openshift-slack-notifications
OpenShift slack notifications
Stars: ✭ 14 (+16.67%)
Mutual labels:  openshift
bobbycar
IoT Transportation demo using Red Hat OpenShift and Middleware technologies
Stars: ✭ 33 (+175%)
Mutual labels:  openshift
openshift-golang-template
Template for running Go programs on OpenShift v3
Stars: ✭ 17 (+41.67%)
Mutual labels:  openshift
ose-pivproxy
A containerized PIV/CAC/x509 proxy for OSE
Stars: ✭ 19 (+58.33%)
Mutual labels:  openshift
View All Similar Projects ➔

Introduction

To use Airlock WAF as Reverse Proxy without human interaction in a Kubernetes or OpenShift environment, our recommendations are:

  • place Airlock WAF in front of a Kubernetes or OpenShift environment
  • use Ingress in case of Kubernetes or Route in case of OpenShift
  • listen on Ingress or Route events and create an Airlock WAF configuration via REST API
  • use metadata annotations and ConfigMap for parameterization

Blueprint

The demo application listens to Ingress and Route events. It builds and activates a new Airlock WAF configuration using the Airlock WAF REST API and lives inside a Pod in a Kubernetes Worker Node.

Disclaimer

This Proof of Concept application is NOT for production use.

Requirements

  • Airlock WAF 7.1 or newer
  • Airlock WAF JWT token (API Key)
  • Kubernetes or OpenShift
  • Airlock WAF and Kubernetes/OpenShift need to be in the same sub network

Software Architecture Hints

  • Based on Spring Boot
  • Application Entry Point is in case of
    • Kuberentes: IngressEventWatcher.java
    • Openshift: RouteEventWatcher.java
  • The official Kubernetes Java Client is used to communicate with the API Server
  • The OpenShift Route REST API has been implemented in OpenShiftV1Api.java
  • It uses a client certificate to authenticate against the Kubernetes API Server

Tutorial

Under examples you will find some tutorials and detail description.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].