Merge pull request #488 from wallarm/NODE-5848-Release-4.10.14

NODE-5848 Release 4.10.14

Author: alexorekhov

AIO_BASE

@@ -1 +1 @@
-4.10.13
+4.10.14

TAG

@@ -1 +1 @@
-4.10.13-1
+4.10.14-1

charts/ingress-nginx/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: wallarm-ingress
-version: 4.10.13
-appVersion: 4.10.13
+version: 4.10.14
+appVersion: 4.10.14
 home: https://github.com/wallarm/ingress
 description: Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer with Wallarm module
 icon: https://static.wallarm.com/wallarm-logo.svg

charts/ingress-nginx/templates/_helpers.tpl

@@ -367,6 +367,18 @@ Create the name of the controller service account to use
       value: 5s
     - name: APIFW_WRITE_TIMEOUT
       value: 5s
+    - name: APIFW_READ_BUFFER_SIZE
+      value: "{{ .Values.controller.wallarm.apiFirewall.readBufferSize | int64 }}"
+    - name: APIFW_WRITE_BUFFER_SIZE
+      value: "{{ .Values.controller.wallarm.apiFirewall.writeBufferSize | int64 }}"
+    - name: APIFW_MAX_REQUEST_BODY_SIZE
+      value: "{{ .Values.controller.wallarm.apiFirewall.maxRequestBodySize | int64 }}"
+    - name: APIFW_DISABLE_KEEPALIVE
+      value: "{{ .Values.controller.wallarm.apiFirewall.disableKeepalive }}"
+    - name: APIFW_MAX_CONNS_PER_IP
+      value: "{{ .Values.controller.wallarm.apiFirewall.maxConnectionsPerIp }}"
+    - name: APIFW_MAX_REQUESTS_PER_CONN
+      value: "{{ .Values.controller.wallarm.apiFirewall.maxRequestsPerConnection }}"
     - name: APIFW_API_MODE_DEBUG_PATH_DB
       value: "{{ include "wallarm-apifw.path" . }}/2/wallarm_api.db"
 {{- if .Values.controller.wallarm.apiFirewall.extraEnvs }}

charts/ingress-nginx/values.yaml

@@ -26,7 +26,7 @@ controller:
     ## for backwards compatibility consider setting the full image url via the repository value below
     ## use *either* current default registry/image or repository format or installing chart by providing the values.yaml will fail
     ## repository:
-    tag: "4.10.13-1"
+    tag: "4.10.14-1"
     pullPolicy: IfNotPresent
     runAsNonRoot: true
     # www-data -> uid 101
@@ -936,7 +936,7 @@ controller:
       ## The image name and tag for the helper image
       ##
       image: docker.io/wallarm/node-helpers
-      tag: 4.10.13-1
+      tag: 4.10.14-1
     tarantool:
       kind: Deployment
       service:
@@ -1080,6 +1080,27 @@ controller:
       ### Enable or disable API Firewall functionality (true|false)
       ###
       enabled: true
+      ### Per-connection buffer size (in bytes) for requests' reading. This also limits the maximum header size.
+      ### Increase this buffer if your clients send multi-KB RequestURIs and/or multi-KB headers (for example, BIG cookies)
+      ###
+      readBufferSize: 8192
+      ### Per-connection buffer size (in bytes) for responses' writing.
+      ###
+      writeBufferSize: 8192
+      ### Maximum request body size (in bytes). The server rejects requests with bodies exceeding this limit.
+      ###
+      maxRequestBodySize: 4194304
+      ### Whether to disable keep-alive connections. The server will close all the incoming connections after sending
+      ## the first response to client if this option is set to 'true'
+      ###
+      disableKeepalive: false
+      ### Maximum number of concurrent client connections allowed per IP. '0' means unlimited
+      ###
+      maxConnectionsPerIp: 0
+      ### Maximum number of requests served per connection. The server closes connection after the last request.
+      ### 'Connection: close' header is added to the last response. '0' means unlimited
+      ###
+      maxRequestsPerConnection: 0
       config:
         mainPort: 18081
         healthPort: 18082