4b4176c830
Fix log format after #4557
2019-09-18 12:52:09 -03:00
87ad033483
Merge pull request #4569 from mkabischev/jaeger-header-configuration
...
allow to configure jaeger header names
2019-09-17 20:29:29 -07:00
d5563a7e47
allow to configure jaeger header names
2019-09-17 12:35:53 +03:00
846ff00363
Merge pull request #4560 from Shopify/basic-auth-map
...
Support configuring basic auth credentials as a map of user/password hashes
2019-09-16 07:52:39 -07:00
376b862c23
Add annotation to support map of user/pass pairs in basic auth
2019-09-13 11:33:33 -04:00
9af574a234
Remove the_real_ip variable
2019-09-12 20:01:33 -03:00
74031cc8b8
Merge pull request #4528 from aledbf/clean-docker
...
Cleanup of docker images
2019-09-03 18:04:58 -07:00
dc20551288
Cleanup of docker images
2019-09-03 19:10:40 -04:00
9c51676f17
Add support to CRL ( #3164 )
...
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Add support to CRL
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
2019-09-03 16:47:28 -04:00
d7dc7be276
Fix relative links ( #4522 )
2019-09-03 09:02:07 -04:00
2ba1a9e71a
fix typo ( #4520 )
2019-09-02 17:29:37 -04:00
9170591185
Added new affinity mode for maximum session stickyness. Fixes kubernetes/ingress-nginx#4475
2019-08-30 11:40:29 +02:00
8def5ef7ca
Add support for multiple alias and remove duplication of SSL certificates ( #4472 )
2019-08-26 10:58:44 -04:00
7d6ce5701f
Fix log format markdown ( #4489 )
2019-08-24 22:48:17 -04:00
2c604e7d38
Add rate limit units and error status
...
Signed-off-by: Tim Hobbs <timothy.hobbs@ic-consult.com>
2019-08-22 16:03:41 +02:00
75d65bbd15
Merge pull request #4327 from leki75/proxyssl
...
Add proxy_ssl_* directives
2019-08-18 09:14:04 -07:00
65b9e2c574
Merge branch 'master' of https://github.com/kubernetes/ingress-nginx into proxyssl
2019-08-16 06:21:53 +02:00
a8a68dd3f5
implementation proposal for zone aware routing
2019-08-15 23:31:47 -04:00
d9de505341
KEP: availability zone aware routing
2019-08-15 19:46:36 -04:00
0b375989f3
Merge pull request #4412 from Shopify/ssl-early-data
...
Add nginx ssl_early_data option support
2019-08-15 10:08:35 -07:00
6948cd7d65
Merge pull request #4351 from aledbf/static-mode
...
KEP: Remove static SSL configuration mode
2019-08-14 21:26:33 -07:00
b21c721196
lua-shared-dicts improvements, fixes and documentation
2019-08-14 22:10:56 -04:00
0d690fba1a
Merge pull request #4356 from aledbf/only-dynamic-mode
...
Only support SSL dynamic mode
2019-08-14 17:08:35 -07:00
adef152db8
Merge pull request #4379 from diazjf/mirror
...
Allow Requests to be Mirrored to different backends
2019-08-13 17:52:24 -07:00
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
f459515d0d
Add quote function in template
...
Co-authored-by: Charle Demers <charle.demers@gmail.com>
2019-08-09 15:47:29 -04:00
8c472190d1
Merge pull request #4086 from jeroen92/issue-4038
...
Resolve #4038 , move X-Forwarded-Port variable to the location context
2019-08-09 08:07:25 -07:00
4a9b02bc03
Remove dynamic TLS records
2019-08-08 15:52:56 -04:00
7219130da4
Add nginx ssl_early_data option support
2019-08-07 16:04:09 -04:00
39144bb987
Add documentation on how to build the Docker image for end-to-end testing
2019-08-06 17:00:56 +02:00
041a8457aa
Fix docs build due to an invalid link ( #4389 )
2019-08-01 19:57:09 -04:00
386486e969
Allow Requests to be Mirrored to different backends
...
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.
See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
2019-08-01 11:53:58 -05:00
292aca7c7a
Merge pull request #4329 from steakunderscore/update-oauth2_proxy-docs
...
Update references to oauth2_proxy
2019-08-01 06:58:15 -07:00
3b34d56c92
Add support for psp
2019-08-01 09:45:58 +03:00
c8a3710fb8
Merge pull request #4344 from Nuglif/fastcgi-backend-support
...
Add FastCGI backend support (#2982 )
2019-07-31 11:20:14 -07:00
72271e9313
FastCGI backend support ( #2982 )
...
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
1abc11af90
Remove static SSL configuration mode
2019-07-25 09:19:06 -04:00
e1f062dd53
Merge pull request #4348 from aledbf/kep
...
KEP process
2019-07-24 18:39:51 -07:00
cb33c4ed26
Start using KEPs for new features or breaking changes
2019-07-24 21:08:07 -04:00
cbc5d3a917
duplicate argument "--disable-catch-all"
2019-07-22 14:48:23 +03:00
5e64b6834c
Add [$proxy_alternative_upstream_name]
...
https://github.com/kubernetes/ingress-nginx/pull/4246
2019-07-19 07:36:13 +08:00
b8cedabbff
Update references to oauth2_proxy
...
The custodian of the project has been shifted from [bitly] to [pusher].
So this diff updates these references.
[bitly]: https://github.com/bitly/oauth2_proxy
[pusher]: https://github.com/pusher/oauth2_proxy
2019-07-18 07:59:22 +01:00
def13fc06c
Add proxy_ssl_* directives
...
Add support for backends which require client certificate (eg. NiFi)
authentication. The `proxy-ssl-secret` k8s annotation references a
secret which is used to authenticate to the backend server. All other
directives fine tune the backend communication.
The following annotations are supported:
* proxy-ssl-secret
* proxy-ssl-ciphers
* proxy-ssl-protocol
* proxy-ssl-verify
* proxy-ssl-verify-depth
2019-07-18 03:21:52 +02:00
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
...
feat: auth-req caching
2019-07-17 12:06:12 -07:00
23504db770
feat: auth-req caching
...
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.
[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
d9c0ede20a
Update how-it-works.md
...
Changed text to link
2019-07-12 14:12:15 +05:30
3b0c523e49
added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends
2019-07-08 14:32:00 -04:00
cd25a0c17a
adjust docs
2019-07-01 10:24:09 -04:00
ef3ebbeab5
Add notes on timeouts while using long GRPC streams
...
GRPC streams longer than 60s hit multiple timeouts that NGINX has defined. Not all of them are easy to find, so I added some notes to the GRPC example to warn users of setting the correct timeouts if the wish their stream to not be aborted after 60 seconds.
2019-06-25 10:29:39 +02:00
ef4b560499
Update annotations.md
2019-06-20 20:19:11 -04:00
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 11:32:39 -04:00
e76418cd99
Merge pull request #4162 from stramel/patch-1
...
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
686f2310e4
Add "text/javascript" to compressible MIME types
...
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages , servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
286ff13af2
Merge pull request #4048 from fedunineyu/change-upstream-on-error-with-sticky-session
...
Change upstream on error when sticky session balancer is used
2019-06-06 07:22:17 -07:00
78d6ce6e6e
Partially revert usage of kustomize for installation ( #4159 )
2019-06-05 10:59:38 -04:00
4a913fac2a
Add clarification on how to enable path matching
...
The fact that you need to explicitly add the annotation is easy to miss.
This makes this more explicit, while leaving the finer details to the
linked annotations document.
2019-06-05 11:14:50 +10:00
30d3505e7e
Update README.md for external-auth Test 4
...
Title for Test 4 should be `secure service with valid auth header`. The current one is the same as Test 3.
2019-05-29 13:23:20 -05:00
254629cf16
Added support for annotation `session-cookie-change-on-failure`
...
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.
Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
dfa7f10fc9
Merge pull request #4055 from nicknovitski/kustomize
...
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
73c70e28b4
Clear up some inconsistent / unclear wording
...
IPv6 enabled/disabled working was confusing or contradicting itself. This updates the wording to what is expected, based on the default values in the table above, and the behaviour that I could find in code.
2019-05-21 15:27:58 +02:00
616b1e239a
UPT: Opentracing configmap documentation
2019-05-21 18:14:33 +08:00
d468cd5ec5
UPT: Modify configmap to include jaeger sampler host and jaeger sampler port
2019-05-21 17:54:29 +08:00
51ad0bc54b
Rearrange deployment files into kustomizations
2019-05-19 12:35:54 -07:00
19501b217d
Merge pull request #4089 from alanjcastonguay/docs/use-gzip-configmap-defaults
...
Docs: configmap: use-gzip
2019-05-18 04:09:14 -07:00
c12059bff5
Merge pull request #4098 from kevinsimper/patch-1
...
Update configmap about adding custom locations
2019-05-18 03:39:12 -07:00
3ef6689bbd
Docs - Update capture group `placeholder`
...
The current ingress example uses the `$2` capture group placeholder, however the description refers to the `$1` placeholder (this was previously correct, but was not updated when the ingress example changed from $1 to $2).
2019-05-17 16:01:17 -07:00
ddc2ce5c70
Update configmap about adding custom locations
2019-05-17 21:39:40 +02:00
f5b090518d
Docs: configmap: use-gzip
...
Move the "gzip-types" value default from the "use-gzip" to the "gzip-types"
heading, and link to it from use-gzip.
Document that the "use-gzip" default is "true", matching the style of other
configmap items.
2019-05-15 13:09:45 -04:00
5eda92b1c9
Explain references in custom-headers documentation
...
Augment description of custom-headers behavior. Explain the purpose of the two configmaps, making explicit that one cites the other by `namespace/name`. Link the two example yaml files, so they're more easily navigated to from a browser looking at https://kubernetes.github.io/ingress-nginx/examples/customization/custom-headers/
Campfire: grammar, standard installation is in the `ingress-nginx` namespace.
2019-05-13 17:50:59 -04:00
4811168d2a
Fixed typos
2019-05-06 09:04:12 +02:00
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
b4f2880ee6
Merge pull request #3802 from tjamet/admission-controller
...
Add a validating webhook for ingress sanity check
2019-05-02 07:52:25 -07:00
7ff6643372
Merge pull request #4037 from marcostvz/fix-doc-rewrite
...
[doc] fixing regex in example of rewrite
2019-05-02 07:02:23 -07:00
69c1efc0e3
[doc] fixing regex in example of rewrite
...
avoids /somethingfoo to be matched by regex
Signed-off-by: Marcos Estevez <marcos.stvz@gmail.com>
2019-04-25 12:43:32 +02:00
2a31790887
Docs have incorrect command in baremetal.md
...
The output shown is for `kubectl get node` and not `kubectl describe node`.
I've updated the docs to use the correct command.
2019-04-25 11:10:16 +01:00
a94eea2c03
🔧 fix navigation error in file baremetal.md
...
Signed-off-by: William Zhang <zhang.wanmin@zte.com.cn>
2019-04-24 15:45:04 +08:00
e68b68d20c
Merge pull request #3966 from GabrielNicolasAvellaneda/master
...
Documentation example code fix
2019-04-19 09:33:54 -07:00
1cd17cd12c
Implement a validation webhook
...
In case some ingress have a syntax error in the snippet configuration,
the freshly generated configuration will not be reloaded to prevent tearing down existing rules.
Although, once inserted, this configuration is preventing from any other valid configuration to be inserted as it remains in the ingresses of the cluster.
To solve this problem, implement an optional validation webhook that simulates the addition of the ingress to be added together with the rest of ingresses.
In case the generated configuration is not validated by nginx, deny the insertion of the ingress.
In case certificates are mounted using kubernetes secrets, when those
changes, keys are automatically updated in the container volume, and the
controller reloads it using the filewatcher.
Related changes:
- Update vendors
- Extract useful functions to check configuration with an additional ingress
- Update documentation for validating webhook
- Add validating webhook examples
- Add a metric for each syntax check success and errors
- Add more certificate generation examples
2019-04-18 19:07:04 +02:00
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
c6204d8684
Merge pull request #3978 from aledbf/ca-cert-docs
...
Fix CA certificate example docs
2019-04-09 16:52:11 -07:00
5a2bb05e80
Add kubectl plugin docs
2019-04-08 18:12:00 -04:00
d589fb485a
Fix CA certificate example docs
2019-04-08 08:35:34 -04:00
4efe549502
Update yaml files to 0.24.0 [skip-ci] ( #3975 )
2019-04-07 20:25:17 -04:00
d8764de423
Proper use of quotes for running the command
...
$1 on a shell has a special meaning and inside of double quotes (") it will be expaned to an empty string. Using single quotes fixes the issue.
2019-04-05 14:06:00 -03:00
39ecab8d5a
Merge pull request #3954 from Shopify/lb-configmap
...
Fix load-balance configmap value
2019-04-02 05:10:34 -07:00
4f819b6256
Fix load-balance configmap value
2019-04-01 15:55:36 -04:00
fd1f200eb4
fix typo: delete '`'
...
fix typo: delete '`'
2019-03-29 13:42:03 +08:00
f66902db1d
Merge pull request #3841 from shroudedcode/improve-sticky-session-docs
...
Improve "Sticky session" docs
2019-03-27 16:42:47 -07:00
bf670a314f
Update apiVersion to apps/v1, drop duplicate line
2019-03-25 11:43:36 -04:00
1bef3e75b2
Set `X-Request-ID` for the `default-backend`, too.
2019-03-22 11:33:11 +01:00
ec7247058d
Improve "Sticky sessions" documentation page
2019-03-18 22:31:59 +01:00
1d59e4f1fe
enable dynamic SSL mode by default
2019-03-17 14:58:06 -04:00
1e96671e26
Remove sort-backends flag from cli docs
2019-03-12 14:48:05 -04:00
68038eec63
Make sure cli-arguments doc is in alphabetical order
2019-03-12 14:43:05 -04:00
d8fe2d992b
Remove useless nodeip call and deprecate --force-namespace-isolation
2019-03-11 18:19:13 -04:00
5fb1116282
update GKE header to match link in contents
2019-03-10 09:13:34 -04:00
1186d88f08
Fix name of field used to sort ingresses ( #3871 )
2019-03-07 21:24:46 -03:00
d3ac73be79
Remove session-cookie-hash annotation
2019-03-04 10:34:48 -05:00
d4b14b40ff
Use incantation from release page
2019-02-27 12:57:55 -05:00
25a0d7a01c
Fix plugin install location
2019-02-27 12:26:12 -05:00
Manuel Alejandro de Brito Fontes