Commit Graph

1306 Commits

Author SHA1 Message Date
Marco Ebert 75c77e5dc3
Metrics: Disable by default. (#12095) 2024-10-07 20:34:22 +01:00
Marco Ebert c9aa724f6d
Tests & Docs: Bump `e2e-test-echo` to v1.0.1. (#12143) 2024-10-07 21:26:18 +02:00
Marco Ebert d0827a6c90
Tests & Docs: Bump images. (#12118) 2024-10-06 01:12:04 +01:00
James Strong 114421f94c
Docs: Add a multi-tenant warning. (#12091) 2024-10-04 13:48:58 +02:00
Marco Ebert 3f6e6aef78
Images: Remove OpenTelemetry. (#12024) 2024-09-29 17:31:04 +02:00
Marco Ebert f369ffb073
Chart: Improve CI. (#12003) 2024-09-28 14:40:02 +01:00
Long Wu Yuan 8d6435b8a0
Docs: Add health check annotations for AWS. (#12018) 2024-09-26 12:02:01 +01:00
Marco Ebert 883c09fb57
Docs: Convert `opentelemetry.md` from CRLF to LF. (#12005) 2024-09-22 08:33:58 +01:00
Marco Ebert 027603927b
Chart: Remove Pod Security Policy. (#11971) 2024-09-15 17:03:24 +02:00
Long Wu Yuan 0b98b1783e
Docs: Add note about `--watch-namespace`. (#11947) 2024-09-08 06:15:20 +01:00
Marco Ebert 8d0e2ef9f4
Images: Use latest Alpine 3.20 everywhere. (#11944) 2024-09-07 19:51:20 +01:00
Nathan Baulch 4f23049374
Fix minor typos (#11935) 2024-09-06 15:59:43 +01:00
Adam Sunderland 2cec24143d
Allow any protocol for cors origins (#11153)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-31 16:26:45 +01:00
Marco Ebert e9f6c8e8f2
Security: Follow-up on recent changes. (#11874) 2024-08-26 21:09:16 +01:00
Marco Ebert bde6a6bc3e
Lua: Remove plugins from `.luacheckrc` & E2E docs. (#11872) 2024-08-26 21:18:18 +02:00
Jon Carl 034c3ccad4
Metrics: Add `--metrics-per-undefined-host` argument. (#11818)
Signed-off-by: Jon Carl <grounded042@joncarl.com>
2024-08-26 20:09:11 +01:00
Seonghyeon Cho 8b20427d02
Update maxmind post link about geolite2 license changes (#11861)
Signed-off-by: Seonghyeon Cho <seonghyeoncho96@gmail.com>
2024-08-25 21:12:02 +01:00
Ricardo Katz 21cd966d1c
Remove global-rate-limit feature (#11851) 2024-08-25 21:03:29 +01:00
lou-lan 24450ea509
Add custom code handling for temporal redirect (#10651)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-23 21:10:20 +01:00
Sebastian Rabenhorst ffee96c58c
Add native histogram support for histogram metrics (#9971)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-23 17:32:48 +01:00
Ricardo Katz 7b4e4e2fa1
Enable security features by default (#11819) 2024-08-23 04:45:51 +01:00
Ricardo Katz 3bec99ecfc
Remove 3rd party lua plugin support (#11821) 2024-08-21 14:54:29 +01:00
Ricardo Katz cf8e374290
Auto-generate annotation docs (#11820) 2024-08-18 16:13:18 -07:00
chengjoey eee2760907
Metrics: Remove `ingress_upstream_latency_seconds`. (#11795)
Signed-off-by: joey <zchengjoey@gmail.com>
2024-08-16 01:53:12 -07:00
Marco Ebert d70b849d25
Release controller v1.11.2/v1.10.4 & chart v4.11.2/v4.10.4. (#11816) 2024-08-16 09:25:07 +02:00
Marco Ebert 004321e265
Tests & Docs: Bump images. (#11803)
* Tests: Bump CFSSL.

* Docs: Bump Custom Error Pages.

* Tests: Bump FastCGI HelloServer.

* Tests: Bump HTTPBun.

* Docs: Bump OpenTelemetry.
2024-08-14 10:55:17 -07:00
Gaston Festari 2e3c2c121d
Docs: Fix typo in AWS LB Controller reference (#11723) 2024-08-02 08:59:07 -07:00
dvglab c6e86c86dc
Docs: Fix `from-to-www` redirect description. (#11712) 2024-08-01 03:28:03 -07:00
Chakrit Wichian e1d81b7818
Docs: Clarify `from-to-www` redirect direction. (#11682)
* docs: Clarify from-to-www redirect direction.

This was not clear to me when reading the docs whether the ingress will
redirect from non-www to with-www or the reverse. It's also not very
clear from just grepping around the codebase. I found the answer by
reading from this reddit link:

https://www.reddit.com/r/kubernetes/comments/pbl033/k8s_ingress_redirecting_www_to_nonwww_domains/

So, to save time for other people doing the same, which I assumes is a
lot of people since it's a common scenario, this little revision in the
docs is warranted.

* Docs: Implement suggestion.

---------

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-29 01:28:45 -07:00
Long Wu Yuan a4ffcfb3d8
added real-client-ip faq (#11663) 2024-07-21 09:39:46 -07:00
Marco Ebert 879747a92f
Docs: Format NGINX configuration table. (#11659) 2024-07-21 03:12:51 -07:00
Marco Ebert 56dbba3288
Release controller v1.11.1/v1.10.3 & chart v4.11.1/v4.10.3. (#11654) 2024-07-18 23:31:10 +02:00
apiwat-chantawibul 60bb8b351c
Fix indent in YAML for example pod (#11598) 2024-07-12 00:47:03 -07:00
James Strong b6fa279c0c Release Notes 1.11.0 and chart 4.11.0
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-08 14:28:53 -04:00
kiblik f0787c3027
Docs: Specify `ingressClass` for multi-controller setup. (#11493) 2024-07-01 11:11:46 +02:00
Marco 0abc9eaff1
Docs: Improve default certificate usage. (#11504) 2024-07-01 11:09:09 +02:00
JesseBot 6087e04cb1
Upgrade OWASP_MODSECURITY_CRS_VERSION 3.3.5 to 4.4.0 and update docs (#11511)
Signed-off-by: jessebot <jessebot@linux.com>
2024-07-01 11:05:15 +02:00
g1franc 5784be2784
Update getting-started.md with new prerequisites (#11486) 2024-06-19 02:20:42 -07:00
Yoofi Quansah e3750b78de
Fix boolean configuration (#11483)
* chore: fix booleans to all have quotes around their values

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>

* Revert "chore: fix booleans to all have quotes around their values"

This reverts commit 7d91e4d9ed.

* chore: fix default values for boolean configuration

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>

---------

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>
2024-06-18 09:38:39 -07:00
Long Wu Yuan 8ca27e7ee9
fixed fastcgi userguide (#11454) 2024-06-12 00:38:56 -07:00
Long Wu Yuan ec296594c7
fix for docs issue 11432 (#11433) 2024-06-09 15:53:14 -07:00
Vadim Bauer d49833be1d
Update index.md (#11437)
add section about how to setup the proxy protocol for scaleway
2024-06-09 08:29:50 -07:00
Jérémie Tarot 1d34930180
Fix helm install on cloud provider admonition block (#11394)
* Fix helm install on cloud provider admonition block

* Add missing admonition type.
* Format link to AWS LB controller.
* Add nested YAML code block for annotations example
* Add a couple of line breaks for breathing and structure

* Fix admonition block title

* Another try

* Should be nice now
2024-05-29 09:56:32 -07:00
Long Wu Yuan f22d5b90e8
edited helm-install tips (#11393) 2024-05-29 05:04:03 -07:00
Long Wu Yuan 5fea717bdb
added info for aws helm install (#11390) 2024-05-29 01:24:22 -07:00
Long Wu Yuan 8f4f15f8e3
added multiplecontrollers-howto to faq (#11389) 2024-05-29 00:41:45 -07:00
Long Wu Yuan 5639979cb5
removed tlsv1 & tlsv1.1 (#11343) 2024-05-28 11:37:30 -07:00
Anddd7 d0e9934789
feat: Add grpc timeouts annotations (#11258)
*  feat: add grpc timeouts with proxy settings if backend is grpc

* 📝  docs: Documentation only changes

* 🐛 fix: uppercase for protocol

* 📝 docs: grpc timeouts example

* 📝 docs: add links and default values for proxy timeout

* 🧪 test: add e2e test for timeout

* 🐛 fix: upgrade to 1.0.6 to fix nil pointer

* 🐛 fix: lint

* 🧪 test: trigger ci
2024-05-26 09:37:11 -07:00
Lucas Andrade Flores 20d9a609b5
Docs: Remove opentracing and zipkin from docs (#11361) 2024-05-15 13:23:21 -07:00
Rafael da Fonseca 4e11074323
Allow configuring nginx worker reload behaviour, to prevent multiple concurrent worker reloads which can lead to high resource usage and OOMKill (#10884)
* feat: allow configuring nginx worker reload behaviour, to prevent multiple concurrent worker reloads

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* appease linter, remove unnecessary log line

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* Flip to using a positive behaviour flag instead of negative

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* Update helm-docs

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* Avoid calling GetBackendConfiguration() twice, use clearer name for helm chart option

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* Fix helm-docs ordering

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

---------

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
2024-05-14 14:45:25 -07:00
James Strong 51847ac1b5
Release controller 1.10.1 (#11253)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-04-23 06:44:12 -07:00
Christian Groschupp 1f4ee0e235
feat: add annotation to allow to add custom response headers (#9742)
* add custom headers

Signed-off-by: Christian Groschupp <christian@groschupp.org>

* add tests

Signed-off-by: Christian Groschupp <christian@groschupp.org>

* add docs

* update copyright

* change comments

* add e2e test customheaders

* add custom headers validation

* remove escapeLiteralDollar filter

* validate value in custom headers

* add regex for header value

* fix annotation test

* Revert "remove escapeLiteralDollar filter"

This reverts commit ab48392b60dee4ce146a4c17e046849f9633c7fb.

* add annotationConfig

* fix test

* fix golangci-lint findings

* fix: add missung exp module

---------

Signed-off-by: Christian Groschupp <christian@groschupp.org>
2024-04-09 03:25:22 -07:00
Long Wu Yuan 3599a4c6cc
chunking related faq update (#11196) 2024-04-04 08:18:53 -07:00
Marco Ebert bf3fa53167
Owners: Promote Gacko to `ingress-nginx-maintainers` & `ingress-nginx-reviewers`. (#11165)
* Owners: Sort `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.

* Owners: Update URL in aliases.

* Images: Remove owners as it's identical to global owners.

* Images: Remove global owners from `kube-webhook-certgen` owners.

* Owners: Remove members from aliases covered by other aliases.

ingress-nginx-helm-maintainers:
- cpanato: Covered by ingress-nginx-maintainers
- strongjz: Covered by ingress-nginx-maintainers

ingress-nginx-helm-reviewers:
- cpanato: Covered by ingress-nginx-reviewers
- strongjz: Covered by ingress-nginx-reviewers

ingress-nginx-docs-maintainers:
- tao12345666333: Covered by ingress-nginx-maintainers

* Owners: Promote myself to `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.
2024-04-04 08:01:10 -07:00
Matheus Fidelis 7c8af4928b
Controller: Make Leader Election TTL configurable. (#11142)
* feature(leader_ttl): feature to customize ttl to leader be re-elected

* fix(review): docs
2024-03-28 06:36:23 -07:00
Marco Ebert 365d886c1d
Chores: Remove recently added whitespaces. (#11156) 2024-03-24 17:44:36 -07:00
Ramon Borges c0b3294bf4
Add GRPC Buffer Size to the Configmap (#11155)
* feat: add grpc buffer size in the nginx template

* feat: add grpc buffer size in the configmap struct

* feat: add test for GRCP buffer size configuration in the configmap

* chore: add documentation for the grcp buffer size configuration

* fix: fix the copyright year of the test

* fix: fix import order

* fix: fix ignore for the linter - reason was missing

* chore: seems like we don't need to ignore the error handling
2024-03-24 15:07:28 -07:00
dVerhees c25b80ca00
fix geoip2 configuration docs (#11150) 2024-03-22 01:28:24 -07:00
Matheus Fidelis 3c4e78e6b7
feature(geoip2_autoreload): Enable GeoIP2 auto_reload config (#11079)
* feature(geoip2_autoreload): GeoIP Autoreload

feature(geoip2_autoreload): fix lint

feature(geoip2_autoreload): changing flag interval

feature(geoip2_autoreload): tests - up and running

feature(geoip2_autoreload): tests - up and running

feature(geoip2): testing

feature(geoip2): remove typo

feature(geoip2_autoreload): fixing tests

* feature(geoip2_autoreload): working

* feature(geoip2_autoreload): including tests on geoip2 test file
2024-03-19 07:32:15 -07:00
Robert Ma 0bed0a4558
Fix typos in OTel doc (#11081) 2024-03-14 07:39:56 -07:00
Matheus Fidelis 9b63559cbb
feature(leader_election): flag to disable leader election feature on controller (#11064) 2024-03-06 05:59:22 -08:00
Grinish a302cc5cca
docs: update the 404 link to FAQ (#11069) 2024-03-05 21:49:14 -08:00
longwuyuan 41879b14f1 set deploy url to v1-10-0 in docs 2024-03-01 20:56:44 +05:30
Ricardo Katz dc999d81da
Release version v1.10.0 (#11039) 2024-02-28 16:41:06 -08:00
Khoo Hao Yit b4ea953cce
add missing backend-protocol annotation option (#9545) 2024-02-27 09:41:09 -08:00
zengyuxing007 536c4e7e06
Update ingress-path-matching.md (#11008) 2024-02-21 22:07:07 -08:00
zengyuxing007 7edcdeefe5
Update ingress-path-matching.md (#11007) 2024-02-21 19:00:17 -08:00
Adam Jones 7d75abb0ff
docs: Add vouch-proxy OAuth example (#10929) 2024-01-28 08:32:47 -08:00
Tore Stendal Lønøy c295cd1c4b
docs: update annotations docs with missing session-cookie section (#10917) 2024-01-27 03:40:35 -08:00
James Strong 4e97379b4e
Release controller 1.9.6 and helm 4.9.1 (#10919)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-01-26 23:45:19 -08:00
Ray Huang 66cbd57755
Improve docs for multiple instances of controller on one cluster (#10882)
* Added note to include '--ingress-class-by-name=true' for Multiple Ingress controllers instruction.

* Add note to include '-ingress-class-by-name=true' for Multiple Controllers instruction.
2024-01-19 22:04:14 +01:00
Long Wu Yuan 24d0c35525
added instructions for basic test, to troubleshooting guide (#10873) 2024-01-18 22:39:56 +01:00
Tobias Mühl 00db204d86
Fix OpenTelemetry docs typo (#10836) 2024-01-12 14:00:44 +01:00
Lucien Boix 5a72a42235
Update multiple-ingress.md (#10704)
Fixing a typo that can mislead people : it looks like the prefix k8s.io/ is automatically stripped from ingress-class parameter value (which is not the case)
2024-01-04 15:40:32 +01:00
Ben Porter 9ec84e2d43
Fix up grammar in how-it-works.md (#10737)
Change this:

  "To prevent this situation to happening"

To this:

  "To prevent this situation from happening"

Co-authored-by: Benjamin Porter <FreedomBen@users.noreply.github.com>
2023-12-27 00:59:06 +01:00
James Strong 0e47bfbfec release 1.9.5 docs
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-21 10:42:28 +01:00
James Strong 759ac63a86
supdate images from golang upgrade (#10750) 2023-12-12 03:16:59 +01:00
Claus Prüfer 14d8be4c0a
Update Documentation for Client-Cert Authentication misleading #10687 (#10705)
* Update README.md

Update / restructure "Client Cert Authentication" Documentation sub-section

* Update README.md

* Update README.md

* Update README.md

* Update README.md

Add openssl subjectAltName and remark for future releases.

* Update README.md

Moved subjectAltName to new topic "Remarks", i think it is not annotation / ingress related

* Update README.md

Typo
2023-12-09 20:31:01 +01:00
Tore 7f723c5985
docs: add index for global-auth-always-set-cookie (#10670) 2023-11-22 11:59:09 +01:00
Tore cd3e5d323d
docs: Update configmap docs for enable-global-auth option (#10667)
* docs: Include default annotation prefix is docs

Most docs includes the annotation prefix

* docs: Update annotations docs for global-auth

Correct documentation to reflect whats possible. It is not possible to use `enable-global-auth: false` in ConfigMap.
2023-11-21 14:43:36 +01:00
chriss-de ad406b64d8
Add override for proxy_intercept_errors when using Custom HTTP Errors (#9497)
* added proxy-intercept-errors config option

* fixed error when comparing locations

* fixed missing location config from annotation
added e2e test

* reversed logic for proxy-intercept-errors to disable-proxy-intercept-errors

* reversed logic to disable-proxy-intercept-errors

* reversed logic

* default has to be false

* put comment in same line as return

* run gofmt

* fixing wrong Boilerplate header

* updated code to new IngressAnnotation interface

* fixes to satisfy PR comments

* synced with upstream; fixed typo

* gofumpt disableproxyintercepterrors.go

* gofumpt
2023-11-17 05:43:54 +01:00
Ricardo Katz 9ed0d7f7af
Separate third party NGINX configuration (#10470)
* Document container separation

* Separate configurations
2023-11-03 14:46:32 +01:00
Michael Dreher 8c3aeaae4a
Increase HSTS max-age to default to one year (#10564) 2023-10-27 12:50:37 +02:00
Able Lv 560771ee80
Docs: Fixed broken link of "synchronization loop pattern" on how-it-works.md (#10554) 2023-10-24 03:43:29 +02:00
Able Lv 72fb480b81
Fix list item format on troubleshooting.md (#10552) 2023-10-24 03:40:56 +02:00
Marcelo Cyreno b1ac371dee
Documenting flag `enable-auth-access-log` (#10518) (#10535) 2023-10-19 03:43:20 +02:00
Ricardo Katz 9db8fe51c8
Update mkdocs version (#10522) 2023-10-12 16:30:12 -03:00
Tyler Brewer 2f7486b709
explicitly state TLS termination location (#10516) 2023-10-12 18:02:46 +02:00
James Strong 6f2ad83b0d
release 1.9.3
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-10-12 09:51:50 -04:00
Long Wu Yuan 3732fc6ab6
added warning for configuration-snippets usage (#10492) 2023-10-11 15:16:47 +02:00
Ricardo Katz cbed4c6831
Remove legacy GeoIP from controller (#10495) 2023-10-11 08:53:55 +02:00
James Strong 8ce61bdc67
Merge pull request #10469 from rikatz/release-v1.9.1
Release v1.9.1
2023-10-03 16:22:19 -04:00
ChangZhuo Chen (陳昌倬) a4de4debec
docs(tls): add warning for not supporting TLSv1, TLSv1.1 (#10473) 2023-10-03 15:56:07 +02:00
Ricardo Katz 24b139424d Release v1.9.1 2023-10-01 18:01:26 -03:00
Stefan Lobbenmeier ae86c07298
Fix link from #10456 (#10458) 2023-09-28 09:02:34 -07:00
Stefan Lobbenmeier e2ee3346db
Link configuration snippet to allow-snippet-annotations (#10456) 2023-09-28 08:38:34 -07:00
Thomas Burguiere fcda809ab0
fix path to faq.md in examples/rewrite/README.md (#10383) 2023-09-18 08:28:32 -07:00
Ricardo Katz cb70900609
Release v1.9.0-beta.0 (#10422) 2023-09-18 04:52:31 -07:00
Chen Chen d96b3f0082
Add a flag to enable or disable aio_write (#10394)
* Add a flag to enable or disable aio_write

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix e2e test for aio_write

Signed-off-by: z1cheng <imchench@gmail.com>

* Remove redundant spaces to fix the 2e test

Signed-off-by: z1cheng <imchench@gmail.com>

---------

Signed-off-by: z1cheng <imchench@gmail.com>
2023-09-11 05:56:12 -07:00
Mathieu Benoit 1bb8a9bba0
Update external-articles.md - advanced setup with GKE/Cloud Armor/IAP (#10372)
* Update external-articles.md

* Update external-articles.md - article publicly available
2023-09-11 05:48:11 -07:00