991f95f6bf
Migrate to openresty
2019-06-23 22:29:11 -04:00
e616f6d4ad
Get AuthTLS annotation unit tests to 100%
...
Adds more unit tests for the authtls annotation. Increases the
coverage.
2019-06-21 12:46:07 -05:00
cff97c210a
Merge pull request #4128 from cornershop/feature/service-collectLabel
...
feature(collectors): Added services to collectorLabels
2019-06-18 19:08:31 -07:00
6f1261015b
Merge pull request #4127 from aledbf/migration
...
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 09:28:19 -07:00
ec674aa22d
Merge pull request #4185 from Colstuwjx/fix/missing-healthcheck-timeout
...
Fix: fillout missing health check timeout on health check.
2019-06-13 08:38:20 -07:00
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 11:32:39 -04:00
b28577a4bf
Fix: fillout missing health check timeout on health check.
2019-06-13 21:15:50 +08:00
a9a73c6ed6
increase lua_shared_dict config data
2019-06-12 18:42:47 +03:00
c11583dc5f
Only load modsecurity_module when ModSec is active
2019-06-11 16:39:52 +02:00
e76418cd99
Merge pull request #4162 from stramel/patch-1
...
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
686f2310e4
Add "text/javascript" to compressible MIME types
...
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages , servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
83f2acbe38
Session Affinity ChangeOnFailure should be boolean
2019-06-06 11:22:05 -04:00
c4ced9d694
fix source file mods
2019-06-06 10:47:08 -04:00
286ff13af2
Merge pull request #4048 from fedunineyu/change-upstream-on-error-with-sticky-session
...
Change upstream on error when sticky session balancer is used
2019-06-06 07:22:17 -07:00
29489097c9
SSL expiration metrics cannot be tied to dynamic updates
2019-06-05 11:04:27 -04:00
14a394fc9e
Update nginx ( #4150 )
...
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
c38c66e00a
feature(collectors): Added services to collectorLabels and requests Countervec to capture the name of the kubernetes service used to serve the client request.
2019-05-27 11:19:42 -04:00
254629cf16
Added support for annotation `session-cookie-change-on-failure`
...
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.
Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
c7df848662
Merge pull request #4109 from aledbf/use-real-server
...
Use real apiserver
2019-05-26 04:47:50 -07:00
0baf75cd17
Add retry to LookupHost used to check the content of ExternalName
2019-05-23 05:07:25 -04:00
c639f490b1
Use a real apiserver to test the store
2019-05-23 04:58:14 -04:00
3e3e29b78f
Merge pull request #4102 from aledbf/listingresses
...
Refactor ListIngresses to add filters
2019-05-22 06:48:14 -07:00
bae49a4657
Refactor ListIngresses to add filters
2019-05-22 05:37:44 -04:00
31ffad8fa1
UPT: Add variable to define custom sampler host and port, add commituser
2019-05-21 12:34:38 +08:00
89c157c63b
Update generated code
2019-05-14 20:15:49 -04:00
fafa0a6e13
Merge pull request #4067 from aledbf/normalize
...
Trim spaces from annotations that can contain multiple lines
2019-05-09 07:18:51 -07:00
23e7423477
Trim spaces from annotations that can contain multiple lines
2019-05-07 14:25:52 -04:00
4811168d2a
Fixed typos
2019-05-06 09:04:12 +02:00
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
1cd17cd12c
Implement a validation webhook
...
In case some ingress have a syntax error in the snippet configuration,
the freshly generated configuration will not be reloaded to prevent tearing down existing rules.
Although, once inserted, this configuration is preventing from any other valid configuration to be inserted as it remains in the ingresses of the cluster.
To solve this problem, implement an optional validation webhook that simulates the addition of the ingress to be added together with the rest of ingresses.
In case the generated configuration is not validated by nginx, deny the insertion of the ingress.
In case certificates are mounted using kubernetes secrets, when those
changes, keys are automatically updated in the container volume, and the
controller reloads it using the filewatcher.
Related changes:
- Update vendors
- Extract useful functions to check configuration with an additional ingress
- Update documentation for validating webhook
- Add validating webhook examples
- Add a metric for each syntax check success and errors
- Add more certificate generation examples
2019-04-18 19:07:04 +02:00
34734edc6e
Merge pull request #4005 from Shopify/proxy-next-upstream-timeout
...
Support proxy_next_upstream_timeout
2019-04-15 09:10:09 -07:00
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
13a7e2c5d0
refactor GetFakeSSLCert
2019-04-14 09:35:48 -04:00
4c37e0e4b7
Merge pull request #4004 from Shopify/no-valgrind
...
Remove valgrind
2019-04-13 20:48:01 -07:00
b1a6aa2973
make sure unit test create fakecertificate
2019-04-13 16:35:52 -04:00
417af76e97
properly handle default and custom default certs in dynamic ssl mode
2019-04-13 12:32:06 -04:00
ae592821c6
Remove valgrind
2019-04-12 12:09:52 -04:00
ac043771ff
Merge pull request #3990 from ElvinEfendi/fix-dynamic-cert-issue
...
Fix dynamic cert issue with default-ssl-certificate
2019-04-09 20:30:11 -07:00
fc6e7c9be0
fix dynamic cert bug
2019-04-09 22:11:21 -04:00
6d02a9e475
Refactor isIterable
2019-04-08 10:11:44 -04:00
d3f9fbb8fb
Merge pull request #3960 from Shopify/fix-add-headers-segfault
...
Fix segfault on reference to nonexistent configmap
2019-04-04 08:52:53 -07:00
951f7d7c1b
Refactor equals
2019-04-03 22:39:32 -03:00
f6beef960d
Fix segfault on reference to nonexistent configmap
2019-04-02 16:39:42 -04:00
39ecab8d5a
Merge pull request #3954 from Shopify/lb-configmap
...
Fix load-balance configmap value
2019-04-02 05:10:34 -07:00
4f819b6256
Fix load-balance configmap value
2019-04-01 15:55:36 -04:00
b87cc5a1a6
Merge pull request #3786 from Shopify/rewrite-x-forwarded-prefix
...
Fix x-forwarded-prefix annotation
2019-03-31 16:18:32 -07:00
496ff07bf1
replace some of the Nginx configuration to Lua code
2019-03-31 12:04:52 -04:00
4bee401d16
Merge pull request #3947 from vncntvandriessche/bug/silent-custom-default-certificate-failure
...
Adds a log warning when falling back to default fake cert
2019-03-31 08:42:32 -07:00
188295550c
Simplify x-forwarded-prefix annotation
2019-03-29 16:25:25 -04:00
23902058f9
Adds a log warning when falling back to default fake cert
2019-03-29 17:30:10 +01:00
Manuel Alejandro de Brito Fontes
Fernando Diaz
Kubernetes Prow Robot
Colstuwjx
tals
Sebastiaan Tammer
Michael Stramel
Elvin Efendi
Sergio Morales
Eugene Fedunin
reynaldi.wijaya
okryvoshapka-connyun
Thibault Jamet
Alex Kursell
Vincent Van Driessche