bluejay/bluejay-infra
1
0
Fork 0
Code Issues Pull Requests 15 Actions Packages Projects Releases Wiki Activity

deploy(tenant): add bluejay.dev edge controls

Browse Source
This commit is contained in:
Andrew Stoltz
2026-06-18 12:56:41 -05:00
parent b015c8a8e1
commit 6e0d33b5b9
5 changed files with 94 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
apps-gx10/fc-tenant-andrew/ingressroute-andrew-web.json
View File

@@ -13,6 +13,16 @@
{
"kind": "Rule",
"match": "Host(`bluejay.dev`) || Host(`www.bluejay.dev`)",
"middlewares": [
{
"name": "andrew-tenant-rate-limit",
"namespace": "fc-tenant-andrew"
},
{
"name": "andrew-tenant-secure-headers",
"namespace": "fc-tenant-andrew"
}
],
"priority": 100,
"services": [
{
@@ -23,6 +33,10 @@
}
],
"tls": {
"options": {
"name": "andrew-tenant-tls13",
"namespace": "fc-tenant-andrew"
},
"secretName": "cf-origin-bluejay-dev"
}
}

15
apps-gx10/fc-tenant-andrew/middleware-andrew-tenant-rate-limit.json Normal file
View File

@@ -0,0 +1,15 @@
{
"apiVersion": "traefik.io/v1alpha1",
"kind": "Middleware",
"metadata": {
"name": "andrew-tenant-rate-limit",
"namespace": "fc-tenant-andrew"
},
"spec": {
"rateLimit": {
"average": 120,
"burst": 240,
"period": "1m"
}
}
}

18
apps-gx10/fc-tenant-andrew/middleware-andrew-tenant-secure-headers.json Normal file
View File

@@ -0,0 +1,18 @@
{
"apiVersion": "traefik.io/v1alpha1",
"kind": "Middleware",
"metadata": {
"name": "andrew-tenant-secure-headers",
"namespace": "fc-tenant-andrew"
},
"spec": {
"headers": {
"contentTypeNosniff": true,
"browserXssFilter": true,
"referrerPolicy": "strict-origin-when-cross-origin",
"stsSeconds": 31536000,
"stsIncludeSubdomains": true,
"stsPreload": false
}
}
}

11
apps-gx10/fc-tenant-andrew/tlsoption-andrew-tenant-tls13.json Normal file
View File

@@ -0,0 +1,11 @@
{
"apiVersion": "traefik.io/v1alpha1",
"kind": "TLSOption",
"metadata": {
"name": "andrew-tenant-tls13",
"namespace": "fc-tenant-andrew"
},
"spec": {
"minVersion": "VersionTLS13"
}
}

30
tests/bluejay-infra-lint/FleetManifestLintTests.cs
View File

@@ -1110,9 +1110,10 @@ public sealed class FleetManifestLintTests
servicePort.GetProperty("targetPort").GetInt32().Should().Be(8080);
using var ingressRoute = JsonDocument.Parse(File.ReadAllText(Path.Combine(appRoot, "ingressroute-andrew-web.json")));
var serviceRef = ingressRoute.RootElement
var route = ingressRoute.RootElement
.GetProperty("spec")
.GetProperty("routes")[0]
.GetProperty("routes")[0];
var serviceRef = route
.GetProperty("services")
.EnumerateArray()
.Should()
@@ -1120,6 +1121,31 @@ public sealed class FleetManifestLintTests
.Subject;
serviceRef.GetProperty("name").GetString().Should().Be("andrew-web-waf");
serviceRef.GetProperty("port").GetInt32().Should().Be(8080);
route.GetProperty("middlewares")
.EnumerateArray()
.Select(item => item.GetProperty("name").GetString())
.Should()
.Equal("andrew-tenant-rate-limit", "andrew-tenant-secure-headers");
using var rateLimit = JsonDocument.Parse(File.ReadAllText(Path.Combine(appRoot, "middleware-andrew-tenant-rate-limit.json")));
rateLimit.RootElement.GetProperty("spec").GetProperty("rateLimit").GetProperty("average").GetInt32().Should().Be(120);
using var headers = JsonDocument.Parse(File.ReadAllText(Path.Combine(appRoot, "middleware-andrew-tenant-secure-headers.json")));
var headerSpec = headers.RootElement.GetProperty("spec").GetProperty("headers");
headerSpec.GetProperty("contentTypeNosniff").GetBoolean().Should().BeTrue();
headerSpec.GetProperty("stsSeconds").GetInt32().Should().Be(31536000);
using var tlsOption = JsonDocument.Parse(File.ReadAllText(Path.Combine(appRoot, "tlsoption-andrew-tenant-tls13.json")));
tlsOption.RootElement.GetProperty("spec").GetProperty("minVersion").GetString().Should().Be("VersionTLS13");
ingressRoute.RootElement
.GetProperty("spec")
.GetProperty("tls")
.GetProperty("options")
.GetProperty("name")
.GetString()
.Should()
.Be("andrew-tenant-tls13");
}
[Fact]