Commit Graph

1154 Commits

Author SHA1 Message Date
Myst 57e6899d86
Annotations: Fix log format. (#13998) 2025-09-30 08:36:17 -07:00
Mathieu Parent 66d8d6c61c
Config: Use stronger ciphers first. (#13921) 2025-09-10 12:23:57 -07:00
Johannes Scheerer 4a04d61bcc
SSL Proxy: Support PROXY protocol v2. (#13861) 2025-09-04 15:05:14 -07:00
Marco Ebert a78d971822
Go: Update dependencies. (#13899) 2025-09-04 13:25:14 -07:00
Roman Orudzhov 59dbc01fea
Metrics: Fix `nginx_ingress_controller_config_last_reload_successful`. (#13830)
Signed-off-by: Roman Orudzhov <roman.orudzhov@flant.com>
2025-08-28 09:41:10 -07:00
Dean Coakley 2fb7fd2e5c
Annotations/AuthTLS: Allow named redirects. (#13752)
Signed-off-by: Dean Coakley <dean.s.coakley@gmail.com>
2025-08-25 02:01:09 -07:00
Pascal Zimmermann 618aae1851
Ingresses: Allow `.` in `Exact` and `Prefix` paths. (#13798) 2025-08-18 22:15:10 -07:00
Marco Ebert da24841bc9
Config/Annotations: Remove `proxy-busy-buffers-size` default value. (#13780) 2025-08-18 06:39:12 -07:00
Michael cca7690f31
Security: Harden socket creation and validate error code input. (#13765) 2025-08-16 22:54:57 +02:00
Michael 02b3870f07
Chores: Migrate deprecated `wait.Poll*` to context-aware equivalents. (#13766) 2025-08-16 11:51:07 -07:00
Marcel 1e1824b34c
Docs: Fix default config values and links. (#13737)
Co-authored-by: marcel2012 <13705842+marcel2012@users.noreply.github.com>
2025-08-10 00:13:43 -07:00
Jan-Otto Kröpke 3d90678bfe
Annotations: Quote auth proxy headers. (#13371) 2025-08-04 06:47:39 -07:00
Burkov Egor ae7a44cc9f
Controller: Fix nil pointer in path validation. (#13679)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2025-07-28 09:00:28 -07:00
Marcel 4e1b438988
Docs: Use HTTPS for NGINX links. (#13653)
Co-authored-by: marcel2012 <13705842+marcel2012@users.noreply.github.com>
2025-07-23 01:44:27 -07:00
pando85 75a590772c
Config/Annotations: Fix `proxy-busy-buffers-size`. (#13610) 2025-07-18 09:56:26 -07:00
cuithon cbf5f27508
Docs: Fix function names in comments. (#13517)
Signed-off-by: cuithon <dscs@outlook.com>
2025-06-15 22:32:58 -07:00
DM cf0a44191c
NGINX: Correctly determine client IP. (#12768) 2025-05-27 23:10:17 -07:00
Andrei Vydrin df48ec7a21
Controller: Add traffic distribution support. (#12974) 2025-05-26 22:48:16 -07:00
Clément Nussbaumer da54ac6b25
NGINX: Add X-Original-Forwarded-Host header. (#12999)
Signed-off-by: Clément Nussbaumer <clement.nussbaumer@postfinance.ch>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2025-05-26 22:34:15 -07:00
steve21168 8c1ecd7655
Annotations: Allow ciphers with underscores. (#13110) 2025-04-01 07:14:41 -07:00
Marco Ebert cfe3923bd6
Controller: Several security fixes. (#13068)
Co-authored-by: Tabitha Sable <tabitha.c.sable@gmail.com>
2025-03-24 16:04:38 -07:00
Marco Ebert 07a1133585
Go: Bump to v1.24.1. (#12935) 2025-03-05 06:35:45 -08:00
maxgio92 ba22a30c66
Network: Rework IPv6 check. (#12905)
Signed-off-by: Massimiliano Giovagnoli <me@maxgio.it>
2025-02-27 02:50:33 -08:00
Clément Nussbaumer 683c203df4
Config: Remove notes about future defaults. (#12896)
Signed-off-by: Clément Nussbaumer <clement.nussbaumer@postfinance.ch>
2025-02-24 22:28:29 -08:00
Eng Zer Jun 68a35a8a12
Go: Replace `golang.org/x/exp/slices` with `slices`. (#12779)
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2025-02-03 05:26:57 -08:00
James Strong 698c3c0df1
Annotations: Deny newlines. (#12640) 2025-01-10 15:24:31 -08:00
Jurgen Goelen 29d1e2014b
Annotations: Reload on custom header changes. (#11709) 2025-01-09 12:36:31 -08:00
Boris Kreitchman d1dc3e827f
Config/Annotations: Add `proxy-busy-buffers-size`. (#12433) 2024-12-05 18:10:00 +00:00
Elizabeth Martin Campos 0a927b65af
Allow CORS `Access-Control-Allow-Origin: null` (#12402) 2024-11-24 17:32:55 +00:00
Johannes Rudolph a5cd15d74a Controller: Fail annotation parsing fast and report errors. (#11740) 2024-11-21 00:54:39 +01:00
chriss-de 698960e9b7
Config/Annotations: Add `relative-redirects`. (#12161) 2024-11-13 21:02:48 +00:00
Marco Ebert 7f0350b4b3
Auth TLS: Add `_` to redirect RegEx. (#12325) 2024-11-07 20:32:44 +00:00
James Strong ca81d5bcdd
Auth TLS: Improve redirect RegEx. (#12249) 2024-11-07 00:19:29 +00:00
Aleksa Cukovic ac23d4069b
Config: Fix panic on invalid `lua-shared-dict`. (#12281) 2024-11-02 21:21:26 +00:00
Ricardo Katz 7356c4f40f
Lua: Extract external auth into file. (#12250)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-10-29 13:22:54 +00:00
Stepan Paksashvili dc3acbd786
[fix] fix nginx temp configs cleanup (#11569)
Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
2024-10-22 16:38:53 +01:00
alexey-gavrilov-flant 9e6c40664f
Metrics: Fix namespace in `nginx_ingress_controller_ssl_expire_time_seconds`. (#10274) 2024-09-17 20:12:43 +01:00
Ricardo Katz 6510535ae0
NGINX: Remove inline Lua from template. (#11806) 2024-09-08 18:48:12 -03:00
Nathan Baulch 4f23049374
Fix minor typos (#11935) 2024-09-06 15:59:43 +01:00
Adam Sunderland 2cec24143d
Allow any protocol for cors origins (#11153)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-31 16:26:45 +01:00
James Strong d4c49112a4
Annotations: Allow commas in URLs. (#11882)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-08-26 23:39:30 +02:00
Marco Ebert e9f6c8e8f2
Security: Follow-up on recent changes. (#11874) 2024-08-26 21:09:16 +01:00
Jon Carl 034c3ccad4
Metrics: Add `--metrics-per-undefined-host` argument. (#11818)
Signed-off-by: Jon Carl <grounded042@joncarl.com>
2024-08-26 20:09:11 +01:00
Ricardo Katz 21cd966d1c
Remove global-rate-limit feature (#11851) 2024-08-25 21:03:29 +01:00
lou-lan 24450ea509
Add custom code handling for temporal redirect (#10651)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-23 21:10:20 +01:00
Sebastian Rabenhorst ffee96c58c
Add native histogram support for histogram metrics (#9971)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-23 17:32:48 +01:00
Ricardo Katz 1ea376a0ee
Replace deprecated queue method (#11853) 2024-08-23 15:55:52 +01:00
Ricardo Katz 7b4e4e2fa1
Enable security features by default (#11819) 2024-08-23 04:45:51 +01:00
Ricardo Katz 3bec99ecfc
Remove 3rd party lua plugin support (#11821) 2024-08-21 14:54:29 +01:00
Ricardo Katz cf8e374290
Auto-generate annotation docs (#11820) 2024-08-18 16:13:18 -07:00