apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    external-dns.alpha.kubernetes.io/set-identifier: cccd-app-ingress-cccd-dev-green
    external-dns.alpha.kubernetes.io/aws-weight: "100"
  name: cccd-app-ingress
  namespace: cccd-dev
spec:
  rules:
    - host: dev.claim-crown-court-defence.service.justice.gov.uk
      http:
        paths:
          - path: /
            backend:
              serviceName: cccd-app-service
              servicePort: 80
  tls:
    - hosts:
      - dev.claim-crown-court-defence.service.justice.gov.uk
      secretName: cccd-dev-cert

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    external-dns.alpha.kubernetes.io/set-identifier: cccd-app-ingress-cccd-dev-green
    external-dns.alpha.kubernetes.io/aws-weight: "100"
    kubernetes.io/ingress.class: "modsec01"
    nginx.ingress.kubernetes.io/enable-modsecurity: "true"
    nginx.ingress.kubernetes.io/modsecurity-snippet: |
      SecRuleEngine On
  name: cccd-app-ingress
  namespace: cccd-dev
spec:
  rules:
    - host: dev.claim-crown-court-defence.service.justice.gov.uk
      http:
        paths:
          - path: /
            backend:
              serviceName: cccd-app-service
              servicePort: 80
  tls:
    - hosts:
      - dev.claim-crown-court-defence.service.justice.gov.uk
      secretName: cccd-dev-cert

Enable ModSecurity WAF on dev
Enable ModSecurity WAF on dev
