小亿 发布的文章

K8S Traefik Ingress

为了提升所谓的安全性

创建一个 Middleware

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: block-swagger
  namespace: line-database
spec:
  replacePathRegex:
    regex: ^/(swagger-ui/|swagger-ui\.html|v3/api-docs|actuator)(.*)$
    replacement: /traefik-blocked

应用到 Ingress 的 annotations

traefik.ingress.kubernetes.io/router.middlewares: line-database-block-swagger@kubernetescrd

独立部署 Nginx

http {
    server {
        location ~ ^/(swagger-ui/|swagger-ui\.html|v3/api-docs|actuator)(/.*)?$ {
            return 403; # Return 403 Forbidden
            # Alternatively, use `return 404;` for Not Found
        }
...
    }
}