[FR] Add an nginx security/protection container in the mix about k8s-mediaserver-operator

[JosefWN]

as all the 'Ingress' controllers are on the LB for the K8S cluster anyone on the network can hit any of them with out issue.

You can set-up basic authentication in the ingress itself using annotations, you don't need to set up another NGINX instance for this, see this example with ingress-nginx: https://kubernetes.github.io/ingress-nginx/examples/auth/basic/

[kubealex]

hey @veenarm!
I get your point, but as @JosefWN, ingress basic auth can be configured on the ingress itself, and we actually support annotations in the chart.

All the tools allow adding authentication to them, it is just not set up in the initial script (the intent of the operator was just to ensure all the stack up and running, rather than being a full-rounded configurator), but you can add it later.

[veenarm]

Ah yes, that also works :)

I still find having 1 with 1 domain with mutliple contextPaths easier to manage, but due to the above i would also deem it to be not part of this project.