Skip to content

Set the '/' pathType to be Exact to reject any other requests

Rémy Coutable requested to merge restrict-requests-to-only-root-path into master

What does this MR do and why?

This would restricts the requests that can reach the backend to the ones matching exactly /.

This pathType is documented at https://kubernetes.io/docs/concepts/services-networking/ingress/#path-types.

Expected impact & dry-runs

We actually don't look at the path being requested in the application, but we do receive a lot of proving requests that the application shouldn't even receive.

Action items

  • (If applicable) Add documentation to the handbook pages for Triage Operations =>
  • (If applicable) Identify the affected groups and how to communicate to them:
    • /cc @person_or_group =>
    • Relevant Slack channels =>
    • Engineering week-in-review

Related to https://gitlab.com/gitlab-org/quality/engineering-productivity-infrastructure/-/issues/9.

Edited by Rémy Coutable

Merge request reports