github-personal/firezone
1
0
Fork 0
mirror of https://github.com/outbackdingo/firezone.git synced 2026-01-28 02:18:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(infra): Update gcp cloud armor rules (#7293)

Browse Source 
The expression for one of the rules was not able to be applied due to
invalid characters (`\n`) and even once the invalid characters were
removed there is a limit of 5 subexpressions, but the previous
expression contained 10.

Along with the expression change, the `deny(451)` is not allowed. The
only `deny` codes allowed are `403`, `404`, `502`
This commit is contained in:
Brian Manifold
2024-11-09 10:09:16 -05:00
committed by GitHub
parent 1dda915376
commit 50ba752d30
1 changed files with 2 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
terraform/modules/google-cloud/apps/elixir/network.tf
View File

@@ -68,23 +68,12 @@ resource "google_compute_security_policy" "default" {
rule {
description = "block sanctioned countries"
action = "deny(451)"
action = "deny(403)"
priority = "101"
match {
expr {
expression = <<EOT
request.path.matches(\"/sign_up\") && (\
origin.region_code == 'RU' || \
origin.region_code == 'BY' || \
origin.region_code == 'KP' || \
origin.region_code == 'IR' || \
origin.region_code == 'SY' || \
origin.region_code == 'CU' || \
origin.region_code == 'VE' || \
origin.region_code == 'XC' || \
origin.region_code == 'XD')"
EOT
expression = "request.path.matches('/sign_up') && !origin.region_code.matches('^RU|BY|KP|IR|SY|CU|VE|XC|XD$')"
}
}
}