kubernetes.yml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: modsecdeployment
  labels:
    app: modsecurity
spec:
  replicas: 3
  selector:
    matchLabels:
      app: modsecurity
  template:
    metadata:
      labels:
        app: modsecurity
    spec:
      containers:
      - name: modsec
        image: quay.io/laurobmb/mod_sec:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 80
        env:
        - name: FRONTEND
          value: app5.w0rm30.seg.br
        - name: BACKEND
          value: www2.recife.pe.gov.br
        resources:
          requests:
            cpu: "50m"
            memory: "32Mi"
          limits:
            cpu: "100m"
            memory: "64Mi"

---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: modsecingress
  annotations:
   kubernetes.io/ingress.class: "nginx"
   nginx.ingress.kubernetes.io/enable-owasp-modsecurity-crs: "true"
   nginx.ingress.kubernetes.io/enable-modsecurity: "true"
   nginx.ingress.kubernetes.io/modsecurity-snippet: |
      SecRuleEngine On
      SecRequestBodyAccess On
      SecAuditEngine RelevantOnly
      SecAuditLogParts ABIJDEFHZ
      SecAuditLog /var/log/modsec_audit.log
      SecRule REQUEST_HEADERS:User-Agent \"fern-scanner\" \"log,deny,id:107,status:403,msg:\'Fern Scanner Identified\'\"
spec:
  rules:
#  - host: mod.conectado.local
#    http:
#      paths:
#      - backend:
#          service:
#            name: modsecsvc
#            port:
#              number: 80
#        path: /
#        pathType: Prefix

  - host: app5.w0rm30.seg.br
    http:
      paths:
      - backend:
          service:
            name: modsecsvc
            port:
              number: 80
        path: /
        pathType: Prefix

---
apiVersion: v1
kind: Service
metadata:
  name: modsecsvc
  labels:
    app: modsecurity
spec:
  selector:
    app: modsecurity
  type: ClusterIP
  ports:
  - port: 80
    targetPort: 80
    protocol: TCP
    
---
apiVersion: autoscaling/v1
kind: HorizontalPodAutoscaler
metadata:
  name: modsechpa
  labels:
    app: modsecurity
spec:
  maxReplicas: 10
  minReplicas: 2
  scaleTargetRef: 
    apiVersion: apps/v1
    kind: Deployment
    name: modsecdeployment
  targetCPUUtilizationPercentage: 80