[Pent Test] reconfigure Ingress manifest according to Pen Test findings
found some issues which can be fixed with Ingres settings
- Cleartext Transmission of Sensitive Information -> set annotation at ingress:
nginx.ingress.kubernetes.io/ssl-redirect: "true"
- Information Disclosure – Leakage of Configurational Details -> set annotation at ingress:
nginx.ingress.kubernetes.io/server-snippet: |
location /actuator {
deny all;
return 403;
}
- Potentially Denial of Service (DoS) -> should be also fixed with above setting