Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Terraform WAF Managed rulesets: deprecate enabled in overrides in favour of status #4797

Merged
merged 4 commits into from
Jun 14, 2022
+7 −5
Merged

Terraform WAF Managed rulesets: deprecate enabled in overrides in favour of status #4797

Changes from 3 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
0da1380
Change enabled inside overrides by status
vences Jun 13, 2022
3e67ab4
add status usage inside the warning
vences Jun 13, 2022
dba0289
Formating fix, line return
vences Jun 13, 2022
e1b33d7
Update content/terraform/additional-configurations/waf-managed-rulese…
crwaters16 Jun 13, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 7 additions & 5 deletions content/terraform/additional-configurations/waf-managed-rulesets.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -140,6 +140,8 @@ The following example adds three [overrides](/ruleset-engine/managed-rulesets/ov

{{<Aside type="warning" header="Important">}}
Ruleset overrides and tag overrides apply to both existing and **future** rules in the Managed Ruleset. If you wish to override existing rules only, you must use rule overrides.

Inside `overrides` object, `status` has to be used instead of `enabled`. `status` defines if the current rules-level or categories-level override enables or disables the ruleset rules or categorie.
crwaters16 marked this conversation as resolved.
Show resolved Hide resolved
{{</Aside>}}

The following configuration includes the three overrides in the rule that executes the Cloudflare Managed Ruleset:
Expand All @@ -158,16 +160,16 @@ highlight: [7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22]
rules {
id = "5de7edfa648c4d6891dc3e7f84534ffa"
action = "log"
enabled = true
status = "enabled"
}
rules {
id = "75a0060762034a6cb663fd51a02344cb"
enabled = false
status = "disabled"
}
categories {
category = "wordpress"
action = "js_challenge"
enabled = true
status = "enabled"
}
}
}
Expand Down Expand Up @@ -239,11 +241,11 @@ highlight: [6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23]
# tags "paranoia-level-3" and "paranoia-level-4".
categories {
category = "paranoia-level-3"
enabled = false
status = "disabled"
}
categories {
category = "paranoia-level-4"
enabled = false
status = "disabled"
}
rules {
id = "6179ae15870a4bb7b2d480d4843b323c"
Expand Down