SOC: ssl policy creation script and use for internet facing load bala…

…ncers (#2279)

* ssl policy creation script

* Use new ssl policy

* final state

k8s/apply_infra.sh

@@ -1,10 +1,10 @@
-#!/bin/sh
+#!/bin/bash
 
 set -e
 
 
 function apply_deployment {
-    # This function applies a deployment, but if the deployment already exists, 
+    # This function applies a deployment, but if the deployment already exists,
     # it will replace the image with the current image to avoid a rolling update
     DEPLOYMENT_NAME=$1
     YAML_FILE="$(dirname "$0")/deployments/$DEPLOYMENT_NAME.yaml"
@@ -40,7 +40,7 @@ else
     helm repo update
     helm install dust-datadog-agent datadog/datadog -f "$(dirname "$0")/datadog-values.yml" \
         --set datadog.apiKey=$DD_API_KEY \
-        --set datadog.appKey=$DD_APP_KEY 
+        --set datadog.appKey=$DD_APP_KEY
 fi
 
 

k8s/create_ssl_policy.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+
+gcloud compute ssl-policies create dust-front-ssl-policy \
+  --profile MODERN \
+  --min-tls-version 1.2

k8s/frontend-configs/dust-frontend-config.yaml

@@ -6,3 +6,4 @@ spec:
   redirectToHttps:
     enabled: true
     responseCodeName: MOVED_PERMANENTLY_DEFAULT
+  sslPolicy: dust-front-ssl-policy