Skip to content

Commit

Permalink
Fix documentation table layout
Browse files Browse the repository at this point in the history
  • Loading branch information
aledbf committed Sep 2, 2020
1 parent 2d44f62 commit fb92b3a
Show file tree
Hide file tree
Showing 3 changed files with 22 additions and 7 deletions.
20 changes: 17 additions & 3 deletions docs/deploy/hardening-guide.md
Original file line number Diff line number Diff line change
@@ -1,13 +1,14 @@

# Hardening Guide

## Overview
There are several ways to do hardening and securing of nginx. In this documentation two guides are used, the guides are
There are several ways to do hardening and securing of nginx. In this documentation two guides are used, the guides are
overlapping in some points:

- [nginx CIS Benchmark](https://www.cisecurity.org/benchmark/nginx/)
- [cipherlist.eu](https://cipherlist.eu/) (one of many forks of the now dead project cipherli.st)

This guide describes, what of the different configurations described in those guides is already implemented as default
This guide describes, what of the different configurations described in those guides is already implemented as default
in the nginx implementation of kubernetes ingress, what needs to be configured, what is obsolete due to the fact that
the nginx is running as container (the CIS benchmark relates to a non-containerized installation) and what is difficult
or not possible.
Expand All @@ -18,6 +19,7 @@ lead to have specific clients unable to reach your site or similar consequences.
This guide refers to chapters in the CIS Benchmark. For full explanation you should refer to the benchmark document itself

## Configuration Guide

| Chapter in CIS benchmark | Status | Default | Action to do if not default|
|:-------------------------|:-------|:--------|:---------------------------|
| __1 Initial Setup__ ||| |
Expand Down Expand Up @@ -109,4 +111,16 @@ This guide refers to chapters in the CIS Benchmark. For full explanation you sho
| 5.3.4 Ensure that Content Security Policy (CSP) is enabled and configured properly (Not Scored) | ACTION NEEDED| See previous answer| See previous answer |
| 5.3.5 Ensure the Referrer Policy is enabled and configured properly (Not Scored)| ACTION NEEDED | Depends on application. It should be handled in the applications webserver itself, not in the load balancing ingress | check backend webserver |
| ||| |
| __6 Mandatory Access Control__| n/a| too high level, depends on backends | |
| __6 Mandatory Access Control__| n/a| too high level, depends on backends | |

<style type="text/css" rel="stylesheet">
@media only screen and (min-width: 768px) {
td:nth-child(1){
white-space:normal !important;
}

.md-typeset table:not([class]) td {
padding: .2rem .3rem;
}
}
</style>
7 changes: 3 additions & 4 deletions docs/extra.css
Original file line number Diff line number Diff line change
@@ -1,10 +1,9 @@
.md-typeset__table {
min-width: 100%;
min-width: 100%;
}

@media only screen and (min-width: 768px)
{
td:nth-child(1){
@media only screen and (min-width: 768px) {
td:nth-child(1) {
white-space: nowrap;
}
}
2 changes: 2 additions & 0 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ repo_url: https://github.com/kubernetes/ingress-nginx
site_url: https://kubernetes.github.io/ingress-nginx

markdown_extensions:
- attr_list
- pymdownx.emoji
- admonition
- codehilite
- pymdownx.inlinehilite
Expand Down

0 comments on commit fb92b3a

Please sign in to comment.