Do not apply the regular WAF rules for /jupyter links

Author: DriesVerachtert

obp_private_alb_config/private-alb-waf.tf

@@ -65,6 +65,36 @@ resource "aws_wafv2_web_acl" "basic_protection" {
     }
   }
 
+  rule {
+    name     = "obi-allow-all-jupyterhub"
+    priority = 6
+
+    action {
+      allow {}
+    }
+
+    statement {
+      byte_match_statement {
+        field_to_match {
+          uri_path {}
+        }
+        positional_constraint = "STARTS_WITH"
+        search_string         = "/jupyterhub"
+        text_transformation {
+          priority = 0
+          type     = "NONE"
+        }
+      }
+    }
+
+    visibility_config {
+      cloudwatch_metrics_enabled = false
+      metric_name                = "obi_allow-jupyterhub-traffic"
+      sampled_requests_enabled   = false
+    }
+  }
+
+
   rule {
     name     = "aws-common-ruleset"
     priority = 10