Commit Graph

101 Commits

Author SHA1 Message Date
Josh Soref a8728f3d2c Spelling 2020-12-15 16:10:48 -05:00
inosato 11825698ff
fix log-format-upstream sample
- Align column names to snake case.
- Align the space.
2020-12-03 23:14:06 +09:00
Kubernetes Prow Robot 35338c4193
Merge pull request #6553 from agile6v/stream
fixes: allow user to specify the maxmium number of retries in stream block
2020-12-02 03:08:51 -08:00
agile6v 06f53bcf05 feat: allow user to specify the maxmium number of retries in stream block. 2020-12-02 14:54:14 +08:00
Matthieu Paret 948265f2e8
indicate configuration for DHE based ciphers 2020-12-01 16:43:11 +01:00
Kubernetes Prow Robot e3a3ea8826
Merge pull request #6294 from ianbuss/auth-error-redirect-param
Allow customisation of redirect URL parameter in external auth redirects
2020-11-23 01:27:37 -08:00
Aditya Purandare 57b10f5693
Add datadog environment as a configuration option
(cherry picked from commit 4306558baa595606cd6befff08c8c815d6fe2bd4)
2020-10-12 13:52:15 -07:00
Ian Buss 41cf628bdf Add a configurable URL redirect parameter for error URLs 2020-10-08 12:53:46 +01:00
Stevo Slavić d4152c74fc Sync user guide with config defaults changes
PRs #6226 and #6143 changed the configuration defaults but didn't update
all the configuration defaults docs in the user guide.

This PR updates the user guide to be in sync with the defaults.

Signed-off-by: Stevo Slavić <sslavic@gmail.com>
2020-10-05 10:15:06 +02:00
Manuel Alejandro de Brito Fontes a990ac3910
Change defaults 2020-09-24 21:33:56 -03:00
Elvin Efendi e050ff1b9f disable session tickets by default 2020-09-18 00:08:00 -04:00
Manuel Alejandro de Brito Fontes 87aa96b468 Change server-tokens default value to false 2020-09-17 09:52:07 -03:00
Bernard Van De Walle 2baca9e32a Merge branch 'add-opentracing-operation-name-settings' of https://github.com/JorritSalverda/ingress-nginx into add-opentracing-operation-name-settings 2020-07-23 11:42:44 -07:00
David Schwartz d52141c2b9 Add enable-real-ip 2020-07-15 15:25:29 -04:00
agile6v 3402d07ff0
doc: update docs and fixed typos (#5821) 2020-07-01 10:02:52 -04:00
mengqi.wmq f232a264ab Add default-type as a configurable for default_type 2020-06-21 11:10:51 +08:00
agile6v fc1c043437 Add http-access-log-path and stream-access-log-path options in configMap 2020-06-05 01:27:26 +08:00
Mark Janssen 4a36c804e6 Add 0-RTT warning 2020-05-08 12:40:11 +02:00
Kubernetes Prow Robot 0d2c6db75e
Merge pull request #5358 from praseodym/update-tls-configuration
Update TLS configuration
2020-04-28 07:46:08 -07:00
Manuel Alejandro de Brito Fontes d18fa90cfd Add e2e test for OCSP and new configmap setting 2020-04-17 12:53:47 -04:00
Manuel Alejandro de Brito Fontes 0257068b9b Fix plugin README.md link 2020-04-14 11:48:23 -04:00
Elvin Efendi b60e25f1db ingress-nginx lua plugins documentation 2020-04-14 09:47:58 -04:00
Mark Janssen 049b25e566 Update TLS configuration
Enable TLSv1.3 by default and update list of ciphers. The new
configuration matches the 'Intermediate' configuration recommended by
the Mozilla SSL Configuration Generator:
https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=modern&openssl=1.1.1d&guideline=5.4
2020-04-13 17:46:33 +02:00
Manuel Alejandro de Brito Fontes c0db19b0ec Enable configuration of plugins using configmap 2020-04-13 11:38:42 -04:00
Weihang Lo 12dddcca17
docs: fix use-gzip wrong markdown style 2020-04-11 14:28:04 +08:00
Luis Valdés e001b5a5b7
I found a typo :)
Change *onyl* to * only*
2020-02-27 23:05:37 -03:00
Kubernetes Prow Robot 6cd223558f
Merge pull request #4981 from janosi/proxy-ssl-scope
Applying proxy-ssl-* directives on locations only
2020-02-24 15:53:36 -08:00
Daniel Arifin d48d5a61ae Add gzip-min-length as a configurable 2020-02-14 13:29:51 +07:00
Manuel Alejandro de Brito Fontes 34b6d083b8
Cleanup docs (#5043) 2020-02-09 20:50:27 -03:00
Laszlo Janosi bc79fe1532 Add: documentation for proxy-ssl-location-only 2020-01-29 10:00:55 +01:00
Manuel Alejandro de Brito Fontes 74944b99e9
Enable download of GeoLite2 databases (#4896) 2020-01-08 19:46:43 -03:00
Sungmin Lee d7be5db7de Support sample rate and global sampling configuration for Datadog in ConfigMap 2020-01-07 16:59:59 -08:00
Matt Busche 6b0a6ec8b3 Fix extra word 2019-11-20 19:01:56 -06:00
Rustam Zagirov d9cfad1894 add configuration for http2_max_concurrent_streams 2019-10-31 15:13:38 +03:00
Peter Pan ee24bf1bbc Doc: Add `remote_addr` into default values in configmap for TCP logging format 2019-10-21 10:18:17 +08:00
Kubernetes Prow Robot fb025ab501
Merge pull request #4087 from MRoci/master
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
MRoci 72c4ffa8b5
add modsecurity-snippet key 2019-09-28 09:54:07 +02:00
Manuel Alejandro de Brito Fontes 6715108d8a
Release 0.26.0 2019-09-27 10:23:12 -03:00
Manuel Alejandro de Brito Fontes 2bd8121338
Change default for proxy-add-original-uri-header 2019-09-25 10:57:31 -03:00
Manuel Alejandro de Brito Fontes 4b4176c830
Fix log format after #4557 2019-09-18 12:52:09 -03:00
Kubernetes Prow Robot 87ad033483
Merge pull request #4569 from mkabischev/jaeger-header-configuration
allow to configure jaeger header names
2019-09-17 20:29:29 -07:00
Mike Kabischev d5563a7e47 allow to configure jaeger header names 2019-09-17 12:35:53 +03:00
Manuel Alejandro de Brito Fontes 9af574a234
Remove the_real_ip variable 2019-09-12 20:01:33 -03:00
Manuel Alejandro de Brito Fontes 7d6ce5701f
Fix log format markdown (#4489) 2019-08-24 22:48:17 -04:00
Kubernetes Prow Robot 0b375989f3
Merge pull request #4412 from Shopify/ssl-early-data
Add nginx ssl_early_data option support
2019-08-15 10:08:35 -07:00
Elvin Efendi b21c721196 lua-shared-dicts improvements, fixes and documentation 2019-08-14 22:10:56 -04:00
Manuel Alejandro de Brito Fontes 4a9b02bc03
Remove dynamic TLS records 2019-08-08 15:52:56 -04:00
Maxime Ginters 7219130da4 Add nginx ssl_early_data option support 2019-08-07 16:04:09 -04:00
Moritz Johner 23504db770 feat: auth-req caching
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.

[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
Jorrit Salverda f77eaaee50 Add opentracing-operation-name and opentracing-location-operation-name config settings
With these settings custom span names can be used for the server span and location span

Signed-off-by: Jorrit Salverda <jsalverda@travix.com>
2019-06-07 14:19:34 +02:00