feat: add monitoring and fluentbit tags @bschaatsbergen (#126)
what
- See #116
why
- See #116
references
- Closes #116
🚀 Enhancements
feat: add option to attach a security policy to the default backend @d-costa (#132)
what
- Give clients the option to attach a security policy to the default backend service.
- Create a new deployment example, using IAP and Cloud Armor, allowing only events coming from GitHub Webhooks.
why
- Google Cloud Armor security policies to protect applications running behind a load balancer from distributed denial-of-service (DDoS) and other web-based attacks. It also features preconfigured security policies.
- Improve the security of the default backend service: even if the webhook secret is compromised, only requests coming from the whitelisted IPs are allowed.
references
- GitHub Webhook IPs: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses
- Log4j preconfigured WAF rule: https://cloud.google.com/armor/docs/waf-rules