WIP: Missing checks in test

[aledbf]

• Add rules without HTTP paths (Add test for store helper ListIngresses #2399)
• Dynamic configuration should return 503 if there is no endpoints
• Add tests for modsecurity (sending bad traffic, not just enabling the module)
• Verify ForceNamespaceIsolation feature
• Add tests for Equals method in stucts
• Add e2e X-Forwarded-Host (X-Forwarded-Host header is copied into the Host header #2463)

[Stono]

Here's an example sql injection request that should return a 403 if SecRuleEngine On is enabled:

❯ curl -s -o /dev/null -w '%{http_code}' "http://127.0.0.1?username=1'%20or%20'1'%20=%20'"
403

[aledbf]

@Stono well, I will use your post for inspiration 😉
https://karlstoney.com/2018/02/23/nginx-ingress-modsecurity-and-secchatops/

[aledbf]

@Stono please use quay.io/aledbf/nginx-ingress-controller:0.360

[ElvinEfendi]

Dynamic configuration should return 503 if there is no endpoints

is done now:
https://github.com/kubernetes/ingress-nginx/blob/master/rootfs/etc/nginx/lua/balancer.lua#L171

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[fejta-bot]

Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle rotten