ingress-nginx with ModSecurity

modsecurity-configmap.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: modsecurity-plugins
data:
  empty-after.conf: |
    # no data
  empty-before.conf: |
    # no data
  empty-config.conf: |
    # no data
  generic-rule-exculsions-before.conf: |
    # ByPass RuleId=920350 for Health Checks
    SecRule REQUEST_URI "^/health(z|status|check)$" \
        "id:1000001,\
        phase:1,\
        pass,\
        nolog,\
        ctl:ruleRemoveById=920350"
  basic-rules-before.conf: |
    # Set allowed HTTP Methods (add RESTful APIs Methods)
    SecAction \
        "id:900200,\
        phase:1,\
        pass,\
        t:none,\
        nolog,\
        tag:'OWASP_CRS',\
        ver:'OWASP_CRS/4.15.0-dev',\
        setvar:'tx.allowed_methods=GET HEAD POST OPTIONS PUT PATCH DELETE'"