Coding Cloud

WAAP SideCar

MD
S
Markdown

WAAP (Web Applications and API Protection) Accomplished in K8s by using a SideCar Pod A sidecar is just a container that runs on the same Pod as the application container, because it shares the same volume and network as the main container, it can “help” or enhance how the application operates. Sidecar containers are log shippers, log watchers, monitoring agents among others. -- The primary use case for WAAP is to protect public-facing web applications and APIs. https://www.gartner.com/doc/reprints?id=1-27HQI0PY&ct=210920&st=sb

apiVersion: v1 kind: Pod metadata: name: webserver spec: volumes: - name: shared-logs emptyDir: {}

containers: - name: nginx image: nginx volumeMounts: - name: shared-logs mountPath: /var/log/nginx

- name: sidecar-container
  image: busybox
  command: ["sh","-c","while true; do cat /var/log/nginx/access.log /var/log/nginx/error.log; sleep 30; done"]
  volumeMounts:
    - name: shared-logs
      mountPath: /var/log/nginx

Created on 10/2/2021