v3.0.1

feat: add monitoring and fluentbit tags @bschaatsbergen (#126)

what

• See #116

why

• See #116

references

• Closes #116

🚀 Enhancements

feat: add option to attach a security policy to the default backend @d-costa (#132)

what

• Give clients the option to attach a security policy to the default backend service.
• Create a new deployment example, using IAP and Cloud Armor, allowing only events coming from GitHub Webhooks.

why

• Google Cloud Armor security policies to protect applications running behind a load balancer from distributed denial-of-service (DDoS) and other web-based attacks. It also features preconfigured security policies.
• Improve the security of the default backend service: even if the webhook secret is compromised, only requests coming from the whitelisted IPs are allowed.

references

• GitHub Webhook IPs: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses
• Log4j preconfigured WAF rule: https://cloud.google.com/armor/docs/waf-rules