2c5819e1b3
Add flag to allow custom ingress status update intervals ( #5050 )
2020-02-10 16:52:50 -03:00
74944b99e9
Enable download of GeoLite2 databases ( #4896 )
2020-01-08 19:46:43 -03:00
19d596b72b
Allow custom CA certificate when flag --api-server is specified ( #4807 )
2019-12-05 19:12:54 -03:00
d5d2b4037c
Fix ports collision when hostNetwork=true ( #4617 )
2019-09-28 17:30:57 -03:00
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
3d7a09347d
Apply fixes suggested by staticcheck
2019-07-08 16:18:52 -04:00
8807db9748
Check and complete intermediate SSL certificates
2019-07-04 19:13:21 -04:00
b28577a4bf
Fix: fillout missing health check timeout on health check.
2019-06-13 21:15:50 +08:00
1cd17cd12c
Implement a validation webhook
...
In case some ingress have a syntax error in the snippet configuration,
the freshly generated configuration will not be reloaded to prevent tearing down existing rules.
Although, once inserted, this configuration is preventing from any other valid configuration to be inserted as it remains in the ingresses of the cluster.
To solve this problem, implement an optional validation webhook that simulates the addition of the ingress to be added together with the rest of ingresses.
In case the generated configuration is not validated by nginx, deny the insertion of the ingress.
In case certificates are mounted using kubernetes secrets, when those
changes, keys are automatically updated in the container volume, and the
controller reloads it using the filewatcher.
Related changes:
- Update vendors
- Extract useful functions to check configuration with an additional ingress
- Update documentation for validating webhook
- Add validating webhook examples
- Add a metric for each syntax check success and errors
- Add more certificate generation examples
2019-04-18 19:07:04 +02:00
1d59e4f1fe
enable dynamic SSL mode by default
2019-03-17 14:58:06 -04:00
d8fe2d992b
Remove useless nodeip call and deprecate --force-namespace-isolation
2019-03-11 18:19:13 -04:00
34b0580225
Replace Status port using a socket
2019-02-06 18:00:10 -03:00
3483eb375e
Remove flag sort-backends
2019-01-11 14:43:02 -03:00
8f57f9578d
Merge pull request #3586 from Shopify/disable-catch-all
...
Add --disable-catch-all option to disable catch-all server
2019-01-07 07:16:26 -08:00
1678d99a03
Add --disable-catch-all option to disable catch-all server
2018-12-21 13:22:26 -05:00
f33a2090dd
Add a flag to make per-host metrics optional
...
When serving many hosts from one nginx, the metrics may become too
numerous for Prometheus. Add a flag to disable the host label, so
that metrics are totalled across all hosts.
2018-12-21 17:31:54 +00:00
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
06d33c16b5
Allow to disable NGINX metrics
2018-12-05 10:14:35 -03:00
168f30d1ec
Revert removal of support for TCP and UDP services
2018-11-16 13:48:47 -03:00
9f2a0b6363
Add healthcheck timeout as CLA
2018-10-24 16:02:28 -04:00
b276800d2c
remote the command args of enable-dynamic-configuration
2018-10-16 10:52:19 +08:00
74c2f93de6
Only support dynamic configuration
2018-10-09 22:05:45 -03:00
0971f8443f
Flags publish-service and publish-status-address are mutually exclusive
2018-10-08 15:00:38 -03:00
44bdc7eb59
Remove support for TCP and UDP services
2018-10-07 10:53:37 -03:00
b3a22f7fc0
do not require --default-backend-service
2018-09-25 21:14:28 -04:00
e73510d818
fix some typos
...
Signed-off-by: Lei Gong <lgong@alauda.io>
2018-09-08 21:49:04 +08:00
7faf089082
Add dynamic certificate feature to controller
2018-08-16 20:19:33 -04:00
63aef5d652
Fixed typo in flags.go
...
ssl-passthrough-proxy-port
2018-08-13 18:14:33 +09:00
8a67ace5c3
enable dynamic backend configuration by default
2018-07-26 15:16:06 -04:00
130866b51c
Proofreading
2018-06-25 00:04:43 +02:00
80f77b7a22
Disable resync period
2018-06-13 11:28:17 -04:00
a74c34dbf1
Proofread cmd package and update flags description
2018-06-11 13:15:45 +02:00
631edb30d9
Update documentation for sort-backends flag
2018-06-02 17:36:08 -04:00
d2d7d677a0
Correct some info in flags.go
...
Correct some info in flags.go
2018-04-15 23:49:00 +08:00
1be1f658b4
disable lua for arch s390x and ppc64le
...
LuaJIT is not available for s390x and ppc64le, disable the lua part in nginx.tmpl on these platform.
2018-04-12 08:30:56 +08:00
ee30c55dfc
Disable dynamic configuration in s390x and ppc64le ( #2298 )
2018-04-05 17:37:21 -03:00
c90a4e811e
Live Nginx (re)configuration without reloading ( #2174 )
2018-03-18 10:13:41 -03:00
56036ddc57
Add publish-status-address flag ( #2148 )
...
* Add publish-status-address flag
If this flag is set, status of ingress resources will be updated
with this address.
* Address aledbf's comment
2018-02-27 00:02:19 -03:00
809aab7c82
Remove deprecated flag disable-node-list ( #2119 )
2018-02-20 11:56:25 -08:00
3fb49cb28a
remove duplicated code
2018-01-09 11:19:06 +08:00
0561ea8b87
Add control of the configuration refresh interval
2017-12-05 22:17:38 +01:00
f055022e58
Simplify annotations
2017-11-23 14:11:31 -03:00
14b5259b0f
Refactoring of ingress class annotation and main flags
2017-11-22 19:31:59 -03:00
ff9e804d9a
Refactor SSL intermediate CA certificate check
2017-11-13 12:07:14 -03:00
8f1ff15a6e
Add prefix nginx to annotations
2017-11-11 14:53:44 -03:00
73fe95722c
Rename package pkg to internal
2017-11-11 14:53:44 -03:00
f035733477
Fix default SSL certificate flag docs [ci skip]
2017-11-10 15:40:10 -03:00
754cc6a665
Fix diff execution
2017-11-05 23:53:38 -03:00
3bbe2490b3
Remove node lister
2017-11-05 20:19:38 -03:00
311d286a34
Fix license in header of files
2017-11-05 18:35:46 -03:00
Manuel Alejandro de Brito Fontes
Colstuwjx
Thibault Jamet
Elvin Efendi
Alex Kursell
Kubernetes Prow Robot
Maxime Ginters
Bryan Boreham
Zenara Daley
Hui Chen
Lei Gong
Henry Tran
Han Sol Park
Antoine Cotten
AdamDang
oilbeater
Qiu Jian
hzxuzhonghu
Max Laverse