viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(ingress): wire up max_body_size as Traefik buffering middleware

Browse source 
The max_body_size variable existed but was never used. Now creates a
per-ingress buffering middleware enforcing maxRequestBodyBytes (default 50MB).

[ci skip]

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-03-18 08:36:01 +00:00
parent 586f8345d1
commit 8c4942779f
1 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

18
modules/kubernetes/ingress_factory/main.tf
View file

@ -123,6 +123,7 @@ resource "kubernetes_ingress_v1" "proxied-ingress" {
var.rybbit_site_id != null ? "traefik-strip-accept-encoding@kubernetescrd" : null,
var.rybbit_site_id != null ? "${var.namespace}-rybbit-analytics-${var.name}@kubernetescrd" : null,
var.custom_content_security_policy != null ? "${var.namespace}-custom-csp-${var.name}@kubernetescrd" : null,
"${var.namespace}-body-size-${var.name}@kubernetescrd",
], var.extra_middlewares)))
"traefik.ingress.kubernetes.io/router.entrypoints" = "websecure"
}, var.extra_annotations)
@ -203,3 +204,20 @@ resource "kubernetes_manifest" "custom_csp" {
}
}
}
# Max request body size middleware - enforces var.max_body_size per ingress
resource "kubernetes_manifest" "body_size" {
manifest = {
apiVersion = "traefik.io/v1alpha1"
kind = "Middleware"
metadata = {
name = "body-size-${var.name}"
namespace = var.namespace
}
spec = {
buffering = {
maxRequestBodyBytes = parseint(replace(var.max_body_size, "m", ""), 10) * 1024 * 1024
}
}
}
}