WAF violations for dashboard /api location if App Protect is enabled with DoS liveness checks

[shsingh]

As per release notes: https://docs.nginx.com/nginx-app-protect-dos/releases/learn-about-releases-v4.1/

The following configuration snippet is needed if App Protect and App Protect DoS are enabled:

location /api { app_protect_enable off; app_protect_dos_api; }

To Reproduce
Steps to reproduce the behaviour:

1. Enable App Protect and App Protect DoS
2. View logs to see App Protect violations for the DoS liveness checks

Expected behaviour
App Protect DoS should not be generating WAF violation logs

Your environment

• Version of the Ingress Controller:
  app.kubernetes.io/version=3.2.0
  app.nginx.org/version=1.23.4-nginx-plus-r29

• Version of Kubernetes:
  Client Version: v1.27.2
  Kustomize Version: v5.0.1
  Server Version: v1.27.2

• Kubernetes platform (e.g. Mini-kube or GCP)
  MicroK8s v1.27.2 revision 5372

Additional context
The template and relevant configuration to change look to be here: https://github.com/nginxinc/kubernetes-ingress/blob/v3.2.0/internal/configs/version1/nginx-plus.tmpl#L227-L229

[github-actions[bot]]

Hi @shsingh thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!