WAFv2 service controller

[yuyuvn]

New ACK Service Controller

Support for WAFv2

List of API resources

List the API resources in order of importance to you:

1. WAF ACL
2. WAF ip set
3. WAF rules group

[RedbackThomson]

/lifecycle frozen

[jescarri]

+1

[camclay]

PCI DSS v4 has a requirement for WAFs for all public apps, coming into effect in Q1 2025, and we'd love to use this in our environments. https://www.schellman.com/blog/new-requirements-in-pci-dss-v4

[gopinaath]

+1.

[rjmorse]

This would be quite useful for our use case of EKS cluster(s) in an AWS account where the stance is to limit creation of resources outside Kubernetes, and the primary mode of interaction is via clusters. Consuming teams can then provision WAF for their applications via kubectl or relevant Kubernetes commands and tooling. WAF is particularly problematic because of the inability to have cross account resources, so while some resources could be created in a separate AWS account via any method, WAF must be in the same account, and limiting creation to only use Kubernetes methods, this becomes problematic.

[Thedonutz]

+1

[abebars]

+1

[marksteele]

+1

[david-shato-sisense]

+1

[burninmedia]

+1

[rmnicholson0612]

+1