ingress updates (#749)

CDCgov · Jan 23, 2025 · 2fe9311 · 2fe9311
1 parent ecb35f0
commit 2fe9311
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 4 deletions.
diff --git a/charts/modernization-api/templates/ingress.yaml b/charts/modernization-api/templates/ingress.yaml
@@ -11,6 +11,7 @@ metadata:
     nginx.ingress.kubernetes.io/configuration-snippet: |
       more_set_headers "X-Frame-Options: Allow";
       more_set_headers "Cross-Origin-Opener-Policy: same-origin";
+      more_set_headers "Cache-Control: max-age=1209600, immutable";
     # nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
     # nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
     # nginx.ingress.kubernetes.io/proxy-connect-timeout: "3600"

diff --git a/charts/nbs6/values.yaml b/charts/nbs6/values.yaml
@@ -21,6 +21,7 @@ ingress:
     nginx.ingress.kubernetes.io/configuration-snippet: |
       more_set_headers "X-Frame-Options: Allow";
       more_set_headers "Cross-Origin-Opener-Policy: same-origin";
+      more_set_headers "Cache-Control: max-age=1209600, immutable";
   tls:
     - secretName: app-classic.example.com
       hosts:

diff --git a/charts/nginx-ingress/values-azure.yaml b/charts/nginx-ingress/values-azure.yaml
@@ -7,17 +7,18 @@ controller:
     prometheus.io/port: "10254"
     prometheus.io/path: /metrics
   config:
-    proxy-body-size: "8m"
+    proxy-body-size: "12m"
     compute-full-forwarded-for: "true"
     use-forwarded-headers: "true"
+    allow-snippet-annotations: "true"
     upstream-keepalive-timeout: 300
     proxy-send-timeout: 300
     proxy-read-timeout: 300
     proxy-connect-timeout: 300
     client-body-timeout: 300
     client-header-timeout: 300
     keep-alive: 300
-    #proxy-body-size: "0"
+    client-body-buffer-size: 10m
   ingressClassResource:
     enabled: true
     default: false

diff --git a/charts/nginx-ingress/values.yaml b/charts/nginx-ingress/values.yaml
@@ -3,7 +3,7 @@ controller:
   podAnnotations:
     linkerd.io/inject: enabled
   config:
-    proxy-body-size: "8m"
+    proxy-body-size: "12m"
     compute-full-forwarded-for: "true"
     use-forwarded-headers: "true"
     allow-snippet-annotations: "true"
@@ -14,8 +14,8 @@ controller:
     client-body-timeout: 300
     client-header-timeout: 300
     keep-alive: 300
+    client-body-buffer-size: 10m
     #whitelist-source-range: ""         # VPC/VNET CIDR to be passed at run runtime to restrict traffic allowed to nodes to that of the VPC cidr
-    #proxy-body-size: "0"
   ingressClassResource:
     enabled: true
     default: false