diff --git a/Installation.md b/Installation.md index fc82e6dc3c06373dc569f70b3755cac0cc0f9187..192cfc2a1a0a5a372c9679b82e5ad83aa75d57dd 100644 --- a/Installation.md +++ b/Installation.md @@ -1 +1 @@ -### Installation wiki moved to [here.](http://www.sunbird.org/developer-docs/installation) +### Installation wiki moved to [here.](http://docs.sunbird.org/latest/developer-docs/server-installation/prerequisites/) diff --git a/kubernetes/ansible/cassandrainfo.yaml b/kubernetes/ansible/cassandrainfo.yaml new file mode 100644 index 0000000000000000000000000000000000000000..72ca57866db3f38b2b8d0bac9f7edc51cb0ee7be --- /dev/null +++ b/kubernetes/ansible/cassandrainfo.yaml @@ -0,0 +1,17 @@ +--- +# Retrieve information from cassandra + +- hosts: "{{server_group}}" + gather_facts: false + vars_files: + - "{{inventory_dir}}/secrets.yml" + tasks: + - name: validate the cassandra query + shell: "echo {{cassandra_query}} | grep -iE 'drop|delete|truncate|alter|update|insert'" + register: validator_output + run_once: true + + - name: execute the query on succesful validation + shell: "cqlsh --request-timeout=3600 \"{{cassandra_query}}\"" + when: validator_output.rc == 1 + run_once: true diff --git a/kubernetes/helm_charts/core/nginx-public-ingress/values.j2 b/kubernetes/helm_charts/core/nginx-public-ingress/values.j2 index c1331e76a55c51bbd691a7fabb409f8cbfa17cdd..71c9d770f460606443dfdf8cdc4cb739ed6395c6 100644 --- a/kubernetes/helm_charts/core/nginx-public-ingress/values.j2 +++ b/kubernetes/helm_charts/core/nginx-public-ingress/values.j2 @@ -117,6 +117,9 @@ proxyconfig: |- proxy_set_header X-Forwarded-Proto $scheme; ignore_invalid_headers off; #pass through headers from Jenkins which are considered invalid by Nginx server. resolver {{ kube_dns_ip }} valid=30s; + location ~* .*\/\.\..*$ { + return 401 "InvalidRoute Called."; + } # Mobile Devices Refresh token Endpoints location ~* ^/auth/v1/refresh/token { rewrite ^/auth/(.*) /auth/$1 break; @@ -1211,7 +1214,12 @@ keycloakconf: | proxy_http_version 1.1; proxy_pass http://keycloak; } + location /mirror { + proxy_set_header Requestdebugger_url https://dev.sunbirded.org; + proxy_pass http://requestdebugger-service.dev.svc.cluster.local:80$request_uri; + } location / { + mirror /mirror; rewrite ^/(.*) /$1 break; proxy_set_header Host $host; proxy_set_header X-Real-IP {{ nginx_client_public_ip_header | d('$remote_addr') }};