3ca344ee2d
Fix CVE-2024-56171, CVE-2025-15467, CVE-2025-49794/49796 (libxml2, openssl) Fix CVE-2025-68121 (Go crypto/tls session resumption) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
51 lines
1.3 KiB
YAML
51 lines
1.3 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: nginx-ingress
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
source:
|
|
chart: ingress-nginx
|
|
repoURL: https://kubernetes.github.io/ingress-nginx
|
|
targetRevision: "4.14.3"
|
|
helm:
|
|
values: |
|
|
controller:
|
|
kind: DaemonSet
|
|
service:
|
|
type: NodePort
|
|
nodePorts:
|
|
http: 31080
|
|
https: 31443
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 256Mi
|
|
ingressClassResource:
|
|
default: true
|
|
config:
|
|
use-forwarded-headers: "true"
|
|
compute-full-forwarded-for: "true"
|
|
X-Frame-Options: SAMEORIGIN
|
|
X-Content-Type-Options: nosniff
|
|
X-XSS-Protection: "1; mode=block"
|
|
Referrer-Policy: strict-origin-when-cross-origin
|
|
hide-headers: Server,X-Powered-By
|
|
defaultBackend:
|
|
enabled: false
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: ingress-nginx
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|