Add a backend config to associate browser service with cloudarmor policy

broadinstitute · Nov 15, 2023 · 6856972 · 6856972
1 parent 0eb6920
commit 6856972
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/deploy/deployctl/subcommands/ingress_production.py b/deploy/deployctl/subcommands/ingress_production.py
@@ -14,6 +14,8 @@
   name: gnomad-browser
   labels:
     tier: production
+  annotations:
+    cloud.google.com/backend-config: '{"ports": {"80":"gnomad-backend-config"}}'
 spec:
   type: NodePort
   selector:

diff --git a/deploy/manifests/ingress/gnomad.backendconfig.yaml b/deploy/manifests/ingress/gnomad.backendconfig.yaml
@@ -0,0 +1,7 @@
+apiVersion: cloud.google.com/v1
+kind: BackendConfig
+metadata:
+  name: gnomad-backend-config
+spec:
+  securityPolicy:
+    name: 'deny-problematic-requests'