Some upstreams are configured by default in nginz that have no backing service. This leads to many unnecessary DNS lookups and opens unused routes into our K8s clusters (which might be a security issue).
Upstream configuration in nginz goes from two entries (ignored_upstreams, upstreams) to four (ignored_upstreams, upstreams, enabled_extra_upstreams, extra_upstreams):
- ignored_upstreams : default upstreams that should be ignored (for backwards compatibility)
- upstreams : default upstreams (kept for backwards compatibility)
- enabled_extra_upstreams : Extra upstreams that should be enabled (routed / rendered; this one is new)
- extra_upstreams : Contains upstreams that are usually not deployed by default (this is new, too)
Co-authored-by: jschaul <[email protected]>
