From b5de4af033da8b6ec44bd43f044362a9760fc511 Mon Sep 17 00:00:00 2001
From: Kenneth Stigen <kenneth.stigen@knowit.no>
Date: Thu, 12 Dec 2024 12:06:12 +0100
Subject: [PATCH] adding rate-limiting

---
 deployment/kubernetes/geocoder-api.yaml | 30 ++++++++++++-------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/deployment/kubernetes/geocoder-api.yaml b/deployment/kubernetes/geocoder-api.yaml
index 0e46547..a9ebdd8 100644
--- a/deployment/kubernetes/geocoder-api.yaml
+++ b/deployment/kubernetes/geocoder-api.yaml
@@ -55,19 +55,6 @@ spec:
     forceSlash: true
 ---
 apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: cors-geocoder
-spec:
-  headers:
-    accessControlAllowMethods:
-      - "GET"
-    accessControlAllowHeaders:
-      - "*"
-    accessControlAllowOriginList:
-      - "*"
----
-apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
   name: geocoder-api
@@ -76,11 +63,24 @@ spec:
     - websecure
   routes:
   - kind: Rule
-    match: PathPrefix(`/geocoding`) && !PathPrefix(`/geocoding/metrics`)
+    match: PathPrefix(`/geocoding`) && !PathPrefix(`/geocoding/metrics`) && HeadersRegexp(`Authorization`, `.+`)
+    services:
+    - kind: Service
+      name: geocoder-api
+      port: 80
+    middlewares:
+    - name: stripprefix-geocoding
+    - name: traefikmiddleware-cors@kubernetescrd
+    - name: traefikmiddleware-jwt@kubernetescrd
+    - name: traefikmiddleware-rate-limit-registered@kubernetescrd
+  - kind: Rule
+    match: PathPrefix(`/geocoding`) && !PathPrefix(`/geocoding/metrics`) && !HeadersRegexp(`Authorization`, `.+`)
     services:
     - kind: Service
       name: geocoder-api
       port: 80
     middlewares:
     - name: stripprefix-geocoding
-    - name: cors-geocoder
+    - name: traefikmiddleware-cors@kubernetescrd
+    - name: traefikmiddleware-rate-limit-anonymous@kubernetescrd
+