Skip to content

Minor fixes and screenshot updates #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Jan 31, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified labs/lab2/media/lab2_none-instances.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 changes: 2 additions & 0 deletions labs/lab2/nginx-plus/etc/nginx/nginx.conf
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,8 @@ http {
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';

include /etc/nginx/includes/log_formats/*.conf; # Custom Access logs formats found here

access_log /var/log/nginx/access.log main;

sendfile on;
Expand Down
2 changes: 1 addition & 1 deletion labs/lab2/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -140,7 +140,7 @@ You will run some Docker containers to build out various workshop components, us
5cde3c462a27 nginxinc/ingress-demo "/docker-entrypoint.…" 44 minutes ago Up 44 minutes 0.0.0.0:33380->80/tcp, :::33379->80/tcp, 0.0.0.0:33376->443/tcp, :::33375->443/tcp web3
```

Go back to your NGINX One Console Instance page, and click `Refresh`. You should see all 6 of your `basics-` instances appear in the list, and the Online icon should be `green`. If they did not Register with the One Console, it is likely you have an issue with the $TOKEN used, create a new Dataplane Key and try again. It should look similar to this:
Go back to your NGINX One Console Instance page, and click `Refresh`. You should see all 6 of your `one-workshop-` instances appear in the list, and the Online icon should be `green`. If they did not Register with the One Console, it is likely you have an issue with the $TOKEN used, create a new Dataplane Key and try again. It should look similar to this:

![NGINX Instances](media/lab2_none-instances.png)

Expand Down
Binary file modified labs/lab3/media/lab3_30-day-cert-details.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file removed labs/lab3/media/lab3_basics-oss1-certs.png
Binary file not shown.
Binary file removed labs/lab3/media/lab3_basics-oss1-config-colors.png
Binary file not shown.
Binary file removed labs/lab3/media/lab3_basics-plus1-cves.png
Binary file not shown.
Binary file removed labs/lab3/media/lab3_basics-plus2-cves.png
Binary file not shown.
Binary file modified labs/lab3/media/lab3_cafe-best-practice.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified labs/lab3/media/lab3_nginx-conf-best-practice.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified labs/lab3/media/lab3_none-cpu.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified labs/lab3/media/lab3_none-cves-high.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified labs/lab3/media/lab3_none-network.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified labs/lab3/media/lab3_none-ram.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified labs/lab3/media/lab3_none-security-pane-details.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/lab3/media/lab3_one-workshop-oss1-certs.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/lab3/media/lab3_one-workshop-plus1-cves.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/lab3/media/lab3_one-workshop-plus2-cves.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified labs/lab3/media/lab3_stub-status-best-practice.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
28 changes: 14 additions & 14 deletions labs/lab3/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -78,11 +78,11 @@ This Panel is a great tool to show you the CVEs that you might have in your NGIN

![CVEs](media/lab3_none-cves.png)

Click on the `basics-plus2` Instance, you should see a list of all the CVEs identified by NGINX One Console CVE scanner. NOTE: *This list may not include ALL CVEs*, rather just the list that NGINX One Console knows about at the time of the last scan.
Click on `one-workshop-plus2` Instance, you should see a list of all the CVEs identified by NGINX One Console CVE scanner. NOTE: *This list may not include ALL CVEs*, rather just the list that NGINX One Console knows about at the time of the last scan.

Basics Plus1 | Basics Plus2
One Workshop Plus1 | One Workshop Plus2
:-------------------------:|:-------------------------:
![Container CVEs](media/lab3_basics-plus1-cves.png) | ![Container CVEs](media/lab3_basics-plus2-cves.png)
![Container CVEs](media/lab3_one-workshop-plus1-cves.png) | ![Container CVEs](media/lab3_one-workshop-plus2-cves.png)

### CPU, RAM, Disk Utilization

Expand Down Expand Up @@ -117,13 +117,13 @@ One of the nice security feature of the NGINX One Console is the ability to prov

![High CVEs](media/lab3_none-cves-high.png)

1. Click on the `basics-plus1` Instance. This will provide the Instance level Details, you will see a `CVEs` Section, this time with the Name, Severity and Description for each CVEs applicable to the instance.
1. Click on the `one-workshop-plus1` Instance. This will provide the Instance level Details, you will see a `CVEs` Section, this time with the Name, Severity and Description for each CVEs applicable to the instance.

![Basics-plus1 CVE](media/lab3_basics-plus1-cves.png)
![Basics-plus1 CVE](media/lab3_one-workshop-plus1-cves.png)

1. If you click on one of the CVEs name hyperlink, for example `CVE-2024-39792`, it will directly open the CVE website on a new tab with detailed information and possible remediations.

![High CVE redirect](media/lab3_basics-plus1-cves-redirect.png)
![High CVE redirect](media/lab3_one-workshop-plus1-cves-redirect.png)

1. In similar fashion explore, click on the `Medium` Severity link within the Overview Dashboard and explore all the other CVEs that are classified under `Medium` Severity.

Expand All @@ -148,9 +148,9 @@ Another nice feature of the NGINX One Console is the ability to quickly see the

1. Using the Overview Dashboard Certificates Panel, Click on the `Expiring` link. This will provide a List View of the Instances affected, with metadata about the Instances using the Certificate.

1. Click on the `basics-oss1` Instance. This will provide the Instance level Details, you will see a `Certificates` Section, this time with the Name, Status, `Expiration Date`, and Subject Name for each certificate file.
1. Click on the `one-workshop-oss1` Instance. This will provide the Instance level Details, you will see a `Certificates` Section, this time with the Name, Status, `Expiration Date`, and Subject Name for each certificate file.

![Certs](media/lab3_basics-oss1-certs.png)
![Certs](media/lab3_one-workshop-oss1-certs.png)

1. If you Click on the actual certificate file, for example `30-day.crt`, it will give you a List of all the Instances that are using that same certificate.

Expand Down Expand Up @@ -185,12 +185,12 @@ Fix the Expired Certificate! If you want to create a new certificate, say with a
1. Once you have made this file edits, you would need to reload nginx within all the NGINX OSS containers to incorporate these configuration changes. To do so run below command in your terminal

```bash
docker exec -it basics-oss1 nginx -s reload
docker exec -it basics-oss2 nginx -s reload
docker exec -it basics-oss3 nginx -s reload
docker exec -it one-workshop-oss1 nginx -s reload
docker exec -it one-workshop-oss2 nginx -s reload
docker exec -it one-workshop-oss3 nginx -s reload
```

The above set of commands would reload nginx in all the three NGINX OSS containers: basics-oss1, basics-oss2 and basics-oss3.
The above set of commands would reload nginx in all the three NGINX OSS containers: one-workshop-oss1, one-workshop-oss2 and one-workshop-oss3.

<br/>

Expand All @@ -202,13 +202,13 @@ One of the Best Features of the NGINX ONE Console is the Configuration analysis
- Optimization: NGINX configurations known to provide optimal performance.
- Best Practices: Common configurations that follow standards and conform to ideal configs.

1. From the Overview Dashboard, click on the `Security` and then Click on the `basics-oss1` Instance.
1. From the Overview Dashboard, click on the `Security` and then Click on the `one-workshop-oss1` Instance.

![Config Rec Security](media/lab3_none-config-recommendations.png)

1. Switch view to `Configuration` tab to see the recommendation details. The Recommendations are at the bottom of the screen, and if you look at the config file list, you see small numbers next to each config file that is affected. These are `color-coded`: the Orange numbers are for Security, Blue numbers are for Best Practices, and the Green numbers for for Optimizations.

![Config Recs](media/lab3_basics-oss1-config-colors.png)
![Config Recs](media/lab3_one-workshop-oss1-config-colors.png)

1. If you click on the `cafe.example.com.conf` file, the Recommendations will be shown on the bottom, with details and Line Numbers, so you know which ones are being highlighted.

Expand Down
Binary file modified labs/lab4/media/lab4_csg.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
3 changes: 1 addition & 2 deletions labs/lab4/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -309,5 +309,4 @@ This ends lab4.

---

Navigate to ([Lab5](../lab5/readme.md) | [LabGuide](../readme.md))

Navigate to ([LabGuide](../readme.md))