Azure / application-gateway-kubernetes-ingress

This is an ingress controller that can be run on Azure Kubernetes Service (AKS) to allow an Azure Application Gateway to act as the ingress for an AKS cluster.
https://azure.github.io/application-gateway-kubernetes-ingress
MIT License
667 stars 413 forks source link

How to remove "defaulthttpsetting" because it raises security issue #1589

Open xelex2007 opened 5 months ago

xelex2007 commented 5 months ago

Hello all. Maybe someone faced default AGIC configuration changing. One of my customers decided to use app gateway + aks + application gateway. From infrastructure point of view everything works as expected and according documentation but our security team reach out me and tell that we cant proceed with http configuration. As far as I know that default behavior of AGIC implies creating two configurations: image The questions are: 1 - is it possible to change default behavior of AGIC? 2 - if it is impossible to change default behavior how we can remove default settings for http protocol at all(I mean http health probes, http backend settings and http backend pool) We have workaround for this problem but would be better to have out of box solution for this. Thanks in advance.