[{"_1":2,"_178":-5,"_179":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_157":158},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":85,"_109":110,"_148":-5,"_149":11,"_150":17,"_151":11,"_152":-5,"_153":11,"_154":-5,"_155":156},"canonicalUrl","https://hub.docker.com/r/zevenet/zproxy-ingress/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","zevenet","reponame","zproxy-ingress","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":58,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2020-10-05T12:27:28.873142Z","description","Zproxy-ingress is an ingress controller for Kubernetes","is_private","last_updated","2020-10-05T12:40:00.042568Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",1536,"repository_type","star_count",1,"status","status_description","active","source","collaborator_count",0,"full_description","\n\n# zproxy-ingress\n\n[![Go report card](https://goreportcard.com/badge/github.com/zevenet/zproxy-ingress)](https://goreportcard.com/report/github.com/zevenet/zproxy-ingress)\n![License](https://img.shields.io/github/license/zevenet/kube-nftlb)\n\n`zproxy-ingress` is an ingress controller for Kubernetes. It connects with kubernetes API and configures a\n[`zproxy`](https://github.com/zevenet/zproxy) daemon to route the HTTP requests that income in the Kubernetes cluster.\n\nThis controller needs some permissions to read information from the Kubernetes API and create the zproxy configuration. Such information is about:\n* ingresses rules: to create the zproxy services.\n\n* configmaps: to configure the global and defaults zproxy settings.\n\n* secrets: to create the SSL certificates for HTTPS incoming requests.\n\nThe zproxy-ingress container contains two daemons, a GO client that connects with the k8s API and a zproxy daemon that manages the incoming requests and forwards them to the k8s services.\n\n## Index\n\n1. [ Starting ](#starting)\n\t1.1 [Build](#build)
\n\t1.2 [Some commands to inspect the pod and container](#build)\n\n2. [ Settings ](#settings)\n\t2.1 [Container configuration files](#configfiles)
\n\t2.2 [Environment varibles](#environment)
\n\t2.3 [ConfigMaps](#configmaps)
\n\t2.4 [Annotations](#annotations)\n\n3. [Some notes ](#someNotes)\n\t3.1 [Ingress Namespace](#ingressNamespace)
\n\t3.2 [How to link an ingress rule with zproxy-ingress](#linkAnIngressRule)
\n\t3.3 [How to set up the default ingress controller](#defaultIngressController)
\n\t3.4 [How SSL certificates work](#certificatesWork)
\n\t3.5 [How to configure SSL certificates](#configureCertificates)
\n\t3.6 [How to configure the default SSL certificate](#configureDefaultCertificate)
\n\t3.7 [Configuring DH param](#configureDHparam)
\n\t3.8 [Load balancing among ingress backends](#loadBalancingAmongIngress)
\n\t3.9 [Define a redirect in an ingress rule](#defineRediret)
\n\t3.10 [Default backend](#defaultBackend)\n\n4. [ Contributing ](#contributing)\n5. [ Authors ](#authors)\n\n\n## Starting :rocket:\n\n\n### Build\n\nThis project depends on ZEVENET CE repository to create the container with the latest zproxy package. So, this project\ncontains only the code for the Kubernetes GO client and to create the docker container, it does not manage any zproxy source code or compilation.\n\n```shell\nroot@k8s:~# git clone https://github.com/zevenet/zproxy-ingress\nroot@k8s:~# cd zproxy-ingress\nroot@k8s:~# ./build.sh\nroot@k8s:~# kubectl apply -f yaml/\n```\n\n\n### Some commands to inspect the pod and container\n\n* Get the logs of the pod:\n\n```shell\nroot@k8s:~# kubectl logs `kubectl get pods -n zproxy-ingress | grep zproxy | grep -Ev Terminating | cut -d \" \" -f1` -n zproxy-ingress\n```\n\n* Get the zproxy configuration file:\n\n```shell\nroot@k8s:~# kubectl exec -it `kubectl get pods -n zproxy-ingress | grep zproxy-ingress | grep -Ev Terminating | cut -d \" \" -f1` -n zproxy-ingress -- cat /run/ingress.cfg\n```\n\n* Check if all objects where created properly:\n\n```shell\nroot@k8s:~# kubectl logs `kubectl get pods -n zproxy-ingress | grep zproxy | grep -Ev Terminating | cut -d \" \" -f1` -n zproxy-ingress | grep \"Latest reload was: \" | tail -1 | sed 's/Latest reload was: //'\n```\n\n\n\n## Settings :gear:\n\n\n### Container configuration files\n\nThose configuration files defined the configuration that the container is configured. This configuration can be modified through the different k8s features (ENV, configmaps and annotations).\n\n* Paths: paths to deploy configuration files and binaries in the container.\n\n* Client: parameters to the GO client that manages the zproxy daemon. They can be modified using ENV variables.\n\n* Global: global parameters of the zproxy daemon, they only can be modified in the container start using ENV variables.\n\n* Listener: parameters for the HTTP and HTTPS listeners. They can be modified using configmap.\n\n* Service: parameters for a zproxy services. The default values can be modified using configmap or can be specified for a service through annotations.\n\n\n### Environment variables\n\nSome examples can be checked in the test: tests/010_env_params/\n\nThose variables cannot be modified in the container runtime, it only is configured in the container starting time. They are variables for the GO client and the zproxy daemon.\n\nVariables for the GO client\n* DaemonsCheckTimeout: This time is the interval (in seconds) to check that both processes are alive, else the container will be closed.\n\n* ClientLogsLevel: It is the debug log level for the zproxy-ingress GO client. More log level will include more log details. (Values: 0, 1 or 2 ).\n\n* ClientStartGraceTme: It is the time in seconds to wait between two client controllers starting. It is useful to avoid race conditions when a controller depends on another. For example, before applying services rules it is needed to load the certificates.\n\nVariables for the global configuration of the zproxy daemon.\n\n* ProxyLogsLevel: It is the zproxy daemon log level.\n\n* DHFile: Use the supplied dhparams pem file for DH key exchange for non-export-controlled negotiations. Generate such a file with openssl dhparam.\n\n* TotalTO: How long should zproxy wait for a response from the back-end (in seconds).\n\n* ConnTO: How long should zproxy wait for a connection to the back-end (in seconds).\n\n* AliveTO: Specify how often zproxy will check for resurrected back-end hosts.\n\n* ClientTO: Specify how long zproxy will wait for a client request. After this long has passed without the client sending any data zproxy will close the connection.\n\n\n\n### ConfigMaps\n\nSome examples can be checked in the test: tests/009_configmap/\n\nThe listener parameters will be used for all the incoming requests.\n\n* listener-http-port: It is the port used by the controller to listen to the HTTP request. The port used by default is **80**.\n\n* listener-https-port: It is the port used by the controller to listen to the HTTPS request. The port used by default is **443**.\n\n* listener-error-414: It is a string with *HTML* syntaxis used as the reponse in the case that proxy will return the HTTP error code 414.\n\n* listener-error-500: It is a string with *HTML* syntaxis used as the reponse in the case that proxy will return the HTTP error code 500.\n\n* listener-error-501: It is a string with *HTML* syntaxis used as the reponse in the case that proxy will return the HTTP error code 501.\n\n* listener-error-503: It is a string with *HTML* syntaxis used as the reponse in the case that proxy will return the HTTP error code 503.\n\n* listener-xhttp: It is the set of HTTP verbs that the proxy will accept. The available options are:\n * 0 (default) accepts only standard HTTP requests (GET, POST, HEAD).\n * 1 accepts the above methods and additionally allow extended HTTP requests (PUT, PATCH, DELETE).\n * 2 accepts the above methods and additionally allow standard WebDAV verbs (LOCK, UNLOCK, PROPFIND, PROPPATCH, SEARCH, MKCOL, MOVE, COPY, OPTIONS, TRACE, MKACTIVITY, CHECKOUT, MERGE, REPORT).\n * 3 accepts the above methods and additionally allow MS extensions WebDAV verbs (SUBSCRIBE, UNSUBSCRIBE, NOTIFY, BPROPFIND, BPROPPATCH, POLL, BMOVE, BCOPY, BDELETE, CONNECT).\n * 4 accepts the above methods and additionally allow MS RPC extensions verbs (RPC_IN_DATA, RPC_OUT_DATA).\n\n* listener-rewrite-location: If 1 force zproxy to change the Location: and Content-location: headers in responses. If they point to the back-end itself or the listener (but with the wrong protocol) the response will be changed to show the virtual host in the request. Default:\n 1 (active). If the value is set to 2 only the back-end address is compared; this is useful for redirecting a request to an HTTPS listener on the same server as the HTTP listener.\n\n* listener-remove-request-header: It removes certain headers from the incoming requests (request from the client). All occurrences of the matching specified header will be removed.\n Multiple directives may be specified (using new line separator \"\\n\") in order to remove more than one header, and the header itself may be a regular pattern (though this should be used with caution).\n\n* listener-remove-response-header: It removes certain headers from the outcoming requests (response from the backend). All occurrences of the matching specified header will be removed.\n Multiple directives may be specified (using new line separator \"\\n\") in order to remove more than one header, and the header itself may be a regular pattern (though this should be used with caution).\n\n* listener-add-request-header: It adds the defined header to the request passed to the back-end server. The header is added verbatim. Several headers can be added using the new line separator \"\\n\".\n\n* listener-add-response-header: It adds the defined header to the response passed to the client. The header is added verbatim. Several headers can be added using the new line separator \"\\n\".\n* listener-default-cert: It is the certificate used for HTTPS requests when the incoming request does not match with any TLS certificate.\n* listener-ciphers: This is the list of ciphers that will be accepted by the SSL connection; it is a string in the same format as in OpenSSL ciphers(1) and SSL_CTX_set_cipher_list(3).\n* listener-disable-ssl-protocol: Disable the protocol and all lower protocols as well. This is due to a limitation in OpenSSL, which does not support disabling a single protocol. For example, Disable TLSv1 would disable SSLv2, SSLv3 and TLSv1, thus allowing only TLSv1_1 and TLSv1_2.\n [NOTE]Disable TLSv1_3 would disable only TLSv1_3.\n The options are: SSLv2, SSLv3, TLSv1, TLSv1_1, TLSv1_2 or TLSv1_3\n* listener-ssl-honor-cipher-order: If this field is 1, the server will broadcast a preference to use Ciphers in the order supplied in the Ciphers directive. If the value is 0, the server will treat the Ciphers list as the list of Ciphers it will accept, but no preference will be indicated. The default value is 1.\n\n\nThe service parameters will be used as the default configuration for services. They can be overwritten for each ingress rule using the annotations:\n\n* service-https-backends: It uses SSL to encrypt the request when it is sent to the backend.\n\n* service-strict-transport-security: It is the time in seconds for the StrictTransportSecurity header. By default *21600000*.\n\n* service-cookie-name: Cookie parameters is used to insert a cookie in the HTTP communications with the client. The cookie name (session ID) will be used for identifying the sticky process to backends. This parameter has to be defined as different from an empty string \"\" to insert the cookie.\n\n* service-cookie-path: It manages the cookie path value for the given cookie.\n\n* service-cookie-domain: Cookie insertion will be executed if the domain matches in the cookie content.\n\n* service-cookie-ttl: It is the time to live in seconds of the cookie, the cookie will be expired after this time.\n\n* service-redirect-url: This parameter it a URI to redirect the client as the response for a service, when it is used, the backend parameter of an ingress rule is ignored. To avoid this behavior for each service, it cannot be set using configmap, it is set up through annotation in the rule which will be required.\n\n* service-redirect-code: It is the HTTP code returned with the redirect, the options are: 301, 302 (by default) or 307. It is not used while RedirectURL is not configured.\n\n* service-redirect-type: It is how the redirect URL is done. The options are: **default** to send the same URL defined in the RedirectURL field, or **append** to append the incoming URL to the - service-redirect-url field. It is not used while - service-redirect-url is not configured.\n\n\tExamples: if you specified `Redirect \"http://abc.example\"` and the client requested `http://xyz/a/b/c` then it will be redirected to `http://abc.example`, but if you specified `RedirectAppend \"http://abc.example\"` it will be sent to `http://abc.example/a/b/c`.\n\n* service-session-type: This parameter defines how the HTTP service is going to manage the client session. The options are:\n\t* **\"\"** empty string, no action is taken and persistence is not activated;\n\t* **IP** the persistence session is done based on the client IP;\n\t* **BASIC** the persistence session is done based on the BASIC headers;\n\t* **URL** the persistence session is done based on a field in the URI;\n\t* **PARM** the persistence session is done based on a value separated by “;” at the end of the URI;\n\t* **COOKIE** the persistence session is done based on a cookie name, this cookie has to be created by the backends; and\n\t* **HEADER**, the persistence session is done based on a Header name.\n\n* service-session-id: It is available if the persistence field is URL, COOKIE or HEADER, the parameter value will be searched by the profile in the HTTP header and will manage the client session.\n\n* service-session-ttl: The time to live for an inactive client session (max session age) in seconds.\n\n\n\n### Annotations\n\nThey are used to overwritten the global service configuration. The selected domain for zproxy annotations is \"**`zproxy.ingress.kubernetes.io/`**\".\n\nSome example can be checked in the test: tests/008_annotations/\n\nThe description about each annotation can be checked in the [configmap](https://github.com/zevenet/zproxy-ingress/###configmap) section, and the accepted annotations are the following ones:\n\n* `zproxy.ingress.kubernetes.io/service-https-backends`\n* `zproxy.ingress.kubernetes.io/service-strict-transport-security`\n* `zproxy.ingress.kubernetes.io/service-cookie-name`\n* `zproxy.ingress.kubernetes.io/service-cookie-path`\n* `zproxy.ingress.kubernetes.io/service-cookie-domain`\n* `zproxy.ingress.kubernetes.io/service-cookie-ttl`\n* `zproxy.ingress.kubernetes.io/service-redirect-url`\n* `zproxy.ingress.kubernetes.io/service-redirect-code`\n* `zproxy.ingress.kubernetes.io/service-redirect-type`\n* `zproxy.ingress.kubernetes.io/service-session-type`\n* `zproxy.ingress.kubernetes.io/service-session-id`\n* `zproxy.ingress.kubernetes.io/service-session-ttl`\n\n\n\n## Some notes :memo:\n\n\n### Ingress Namespace\n\nAn ingress rule has assigned a namespace. The resources (secrets and services) that the rule manages have to be in the same namespace than the ingress rule\n\n\n### How to link an ingress rule with zproxy-ingress\n\nZproxy-ingress will configure the ingress rules that contain the incressClassName **zproxy-ingress**.\nIt should be defined in the spec context:\n\n```yml\napiVersion: networking.k8s.io/v1beta1\nkind: Ingress\nmetadata:\n name: 004-complex-ruleset\nspec:\n ingressClassName: zproxy-ingress\n ...\n```\n\n\n### How to set up the default ingress controller\n\nA Kubernetes IngressClass object is required to set the zproxy-ingress as the default one.\n\nThe configuration yaml **yaml/default-ingressclass.yaml** can be used for this porpuse.\n\n```yml\napiVersion: networking.k8s.io/v1beta1\nkind: IngressClass\nmetadata:\n name: zproxy-ingress\n annotations:\n ingressclass.kubernetes.io/is-default-class: \"true\"\nspec:\n controller: zevenet/ingress-controller\n```\n\n\n### How SSL certificates work\n\nHTTPS listener will be configured in the ingress rules that contain the **tls** field.\n\nZproxy-ingress will ignore the field *hosts* to apply the certificate. The certificate will be applied using its own domain parameter, if the domain defined in the certificate matches with an HTTPS request, the certificate that matches first will be used.\n\nThe certificates are added to the listener in the same order than appear in the ingress rules. So the certificates more specific should be applied before than more general. I.E.: A certificate for the domain *.internal.zevenet .com\n should appear above than *zevenet.com in the tls certificates list.\n\nBefore than apply a certificate to a ingress rule, it should be created, else it doesn't be apply until a ingress object will be added/modified/deleted.\n\n```yml\nspec:\n tls:\n - hosts:\n - 005.tls\n secretName: tls-cert\n - hosts:\n - 005.pem\n secretName: pem-cert\n - hosts:\n - 005.not.found\n secretName: tls-cert-2\n```\n\n\n\n### How to configure SSL certificates\n\nSSL certificates have been integrated with Kubernetes using the secret feature. Zproxy uses certificates with *pem* format, for that reason, the secrets should be created from a PEM file or using Kubunernetes *TLS* secrets (then, zproxy-ingress client will create the *pem* certificate).\n\nNOTE:\n* The certificate name will be the secret name.\n* The key used to save the secret is important to specify the certificate format.\n* The certificate should be in the same namespace as the ingress rule which will be linked.\n\nCreating a secret from a *pem* file (notice that is saved in a secret with **pem** key):\n```shell\nroot@k8s:~# kubectl create secret generic --from-file=pem=./zencert.pem [-n namespace]\n```\nCreating an autosigned certificate and a secret (notice that is saved in a secret adding the **key** and the **cert** files):\n```shell\nroot@k8s:~# openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout -out -subj \"O=/CN=\"\nroot@k8s:~# kubectl create secret tls --key --cert [-n namespace]\n```\n\n\n### How to configure the default SSL certificate\n\nTo define a certificate as the default one when any other is used for an HTTP request, it has to comply with the following requirements:\n* It should be created using the common name '*' to mach any FQDN.\n* It has to be defined in the \"**zproxy-ingress**\" namespace.\n\n\n### Configuring DH param\n\nThe DH params file used to encrypt the HTTPS communication has been included in the container for saving time in the pod deployment, but, it is recommended to generate a new one and linked it with the zproxy-ingress configuration.\n\nThe following command can be executed to create a DH param file:\n\n```shell\nroot@k8s:~# openssl dhparam -5 -out /tmp/dh2048.pem 2048\n```\n\n Once it is created, it should be copied in the Kubernetes node and linked it in the zproxy daemonset yaml mounting the file.\n The commented blocks of the file \"tests/010_env_params/daemonset.yaml\" show an example.\n\n The ENV variable **DHFile** (daemontset.yaml file) can be modified in order to change the DH param path inside the container.\n\n\n\n### Load balancing among ingress backends\n\nZproxy-ingress will load balance the incoming requests among different backends if there are several ingress rules with the same match information (host and URI).\nNote that the services should be in the same namespace as the ingress rule.\n\nYaml example:\n\n```yml\napiVersion: networking.k8s.io/v1beta1\nkind: Ingress\nmetadata:\n name: ingress-lb-svcs\nspec:\n ingressClassName: zproxy-ingress\nspec:\n rules:\n - host: lb.zevenet.com\n http:\n paths:\n - path: /\n backend:\n serviceName: svc-app-v1\n servicePort: 80\n - path: /\n backend:\n serviceName: svc-app-v2\n servicePort: 80\n```\n\n\n### Define a redirect in an ingress rule\n\nA redirect can be configured as the response to a client in an ingress rule. If the redirect is configured, the backend struct from the ingress rule will be ignored.\n\nThe following annotations define the behavior of the redirect action:\n\n* zproxy.ingress.kubernetes.io/service-redirect-url: it is the URL to redirect the client.\n* zproxy.ingress.kubernetes.io/service-redirect-code: it is the HTTP code to send in the response.\n* zproxy.ingress.kubernetes.io/service-redirect-type: it specifies how to create the response URL regarding the incoming one. See the configmap \"service-redirect-type\" parameter for further information.\n\n\n\n### Default backend\n\nZproxy-ingress allows adding a default backend that will respond in case that any rule matches the incoming request (the *path* and *host* fields are not achieved).\n\nThe default backend is defined in the spect context without any path and host sets.\n\nOnly one default backend will be configured in the case in which several ingress rules include this struct.\n\nHere is shown a yaml example.\n\n```yml\napiVersion: networking.k8s.io/v1beta1\nkind: Ingress\nmetadata:\n name: default-bck\nspec:\n ingressClassName: zproxy-ingress\n\nspec:\n backend:\n serviceName: default-svc\n servicePort: 80\n```\n\n\n## Contributing :clap:\n\n**Pull Requests are WELCOME!** Please submit any fixes or improvements:\n\n* [Project Github Home](https://github.com/zevenet/zproxy-ingress)\n* [Submit Issues](https://github.com/zevenet/zproxy-ingress/issues)\n* [Pull Requests](https://github.com/zevenet/zproxy-ingress/pulls)\n\n\n## Authors :nerd_face:\n\nZEVENET Team\n\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",64701820,"orgData",{"_86":87,"_88":89,"_90":91,"_92":29,"_93":94,"_95":96,"_97":98,"_99":100,"_101":102,"_103":104,"_105":106,"_107":106,"_108":17},"id","fabadb0a574d445ca96eed604fd6f36f","uuid","fabadb0a-574d-445c-a96e-ed604fd6f36f","type","organization","orgname","full_name","ZEVENET","location","Seville (Spain)","company","ZEVENET SL","profile_url","https://www.zevenet.com","date_joined","2016-08-24T10:46:58.754506Z","gravatar_url","https://www.gravatar.com/avatar/e9b4dd470b5504a68186362564997906?s=80&r=g&d=mm","gravatar_email","","badge","is_active","recentTags",[111],{"_112":40,"_113":114,"_115":116,"_86":117,"_118":119,"_46":136,"_137":114,"_138":139,"_140":52,"_53":141,"_142":143,"_144":127,"_145":136,"_146":61,"_147":17},"content_type","creator",10995090,"full_size",64693960,120048725,"images",[120],{"_121":122,"_123":124,"_125":106,"_126":127,"_128":129,"_130":131,"_132":106,"_133":-5,"_134":116,"_59":61,"_135":-5},"architecture","amd64","digest","sha256:75c9ce6bf1f6b002cb782d80b711ba1e5dbebb7cbce6e55d2ff9623cc07e54ae","features","last_pulled","2026-09-23T10:58:28.395750343Z","last_pushed","2020-10-05T12:40:00Z","os","linux","os_features","os_version","size","variant","2020-10-05T12:39:59.605973Z","last_updater","last_updater_username","alvarocano","media_type","latest","repository",9965729,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":159,"_166":167,"_155":176,"_177":11},{"_36":160,"_38":161,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":162,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":58,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":11,"_68":29,"_69":163,"_75":11,"_76":165,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":164},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_168":58,"_169":-5,"_170":-5,"_171":172},"count","next","previous","results",[173],{"_112":40,"_113":114,"_115":116,"_86":117,"_118":174,"_46":136,"_137":114,"_138":139,"_140":52,"_53":141,"_142":143,"_144":127,"_145":136,"_146":61,"_147":17},[175],{"_121":122,"_123":124,"_125":106,"_126":127,"_128":129,"_130":131,"_132":106,"_133":-5,"_134":116,"_59":61,"_135":-5},[],"canDeleteTags","actionData","errors"]

zevenet/zproxy-ingress

Tags for zevenet/zproxy-ingress