Commit Graph

1150 Commits

Author SHA1 Message Date
k8s-infra-cherrypick-robot 4dd49959fa
Metrics: Fix `nginx_ingress_controller_config_last_reload_successful`. (#13860)
Signed-off-by: Roman Orudzhov <roman.orudzhov@flant.com>
Co-authored-by: Roman Orudzhov <roman.orudzhov@flant.com>
2025-08-28 10:41:09 -07:00
k8s-infra-cherrypick-robot 4d19f5d71f
Annotations/AuthTLS: Allow named redirects. (#13819)
Signed-off-by: Dean Coakley <dean.s.coakley@gmail.com>
Co-authored-by: Dean Coakley <dean.s.coakley@gmail.com>
2025-08-25 03:17:07 -07:00
k8s-infra-cherrypick-robot 19452d185d
Ingresses: Allow `.` in `Exact` and `Prefix` paths. (#13799)
Co-authored-by: Pascal Zimmermann <pascal.zimmermann@theiotstudio.com>
2025-08-18 23:11:34 -07:00
k8s-infra-cherrypick-robot 145ff64b1b
Config/Annotations: Remove `proxy-busy-buffers-size` default value. (#13790)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2025-08-18 07:57:11 -07:00
k8s-infra-cherrypick-robot c57e4b8759
Security: Harden socket creation and validate error code input. (#13785)
Co-authored-by: Michael <100072485+oyiz-michael@users.noreply.github.com>
2025-08-16 22:59:07 +02:00
k8s-infra-cherrypick-robot b70f25e58b
Chores: Migrate deprecated `wait.Poll*` to context-aware equivalents. (#13781)
Co-authored-by: Michael <100072485+oyiz-michael@users.noreply.github.com>
2025-08-16 13:51:07 -07:00
k8s-infra-cherrypick-robot 0eb6d74329
Docs: Fix default config values and links. (#13738)
Co-authored-by: marcel2012 <13705842+marcel2012@users.noreply.github.com>
2025-08-10 01:47:46 -07:00
k8s-infra-cherrypick-robot 5595829164
Annotations: Quote auth proxy headers. (#13708)
Co-authored-by: Jan-Otto Kröpke <mail@jkroepke.de>
2025-08-04 08:05:42 -07:00
k8s-infra-cherrypick-robot 935e1de6f5
Controller: Fix nil pointer in path validation. (#13681)
Co-authored-by: Burkov Egor <eburkov@rvision.ru>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2025-07-28 10:38:30 -07:00
k8s-infra-cherrypick-robot 3652a63864
Docs: Use HTTPS for NGINX links. (#13663)
Co-authored-by: marcel2012 <13705842+marcel2012@users.noreply.github.com>
2025-07-23 10:58:51 +02:00
k8s-infra-cherrypick-robot 89b665c493
Config/Annotations: Fix `proxy-busy-buffers-size`. (#13638)
Co-authored-by: Alexander Gil <pando855@gmail.com>
2025-07-18 12:48:27 -07:00
cuithon cbf5f27508
Docs: Fix function names in comments. (#13517)
Signed-off-by: cuithon <dscs@outlook.com>
2025-06-15 22:32:58 -07:00
DM cf0a44191c
NGINX: Correctly determine client IP. (#12768) 2025-05-27 23:10:17 -07:00
Andrei Vydrin df48ec7a21
Controller: Add traffic distribution support. (#12974) 2025-05-26 22:48:16 -07:00
Clément Nussbaumer da54ac6b25
NGINX: Add X-Original-Forwarded-Host header. (#12999)
Signed-off-by: Clément Nussbaumer <clement.nussbaumer@postfinance.ch>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2025-05-26 22:34:15 -07:00
steve21168 8c1ecd7655
Annotations: Allow ciphers with underscores. (#13110) 2025-04-01 07:14:41 -07:00
Marco Ebert cfe3923bd6
Controller: Several security fixes. (#13068)
Co-authored-by: Tabitha Sable <tabitha.c.sable@gmail.com>
2025-03-24 16:04:38 -07:00
Marco Ebert 07a1133585
Go: Bump to v1.24.1. (#12935) 2025-03-05 06:35:45 -08:00
maxgio92 ba22a30c66
Network: Rework IPv6 check. (#12905)
Signed-off-by: Massimiliano Giovagnoli <me@maxgio.it>
2025-02-27 02:50:33 -08:00
Clément Nussbaumer 683c203df4
Config: Remove notes about future defaults. (#12896)
Signed-off-by: Clément Nussbaumer <clement.nussbaumer@postfinance.ch>
2025-02-24 22:28:29 -08:00
Eng Zer Jun 68a35a8a12
Go: Replace `golang.org/x/exp/slices` with `slices`. (#12779)
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2025-02-03 05:26:57 -08:00
James Strong 698c3c0df1
Annotations: Deny newlines. (#12640) 2025-01-10 15:24:31 -08:00
Jurgen Goelen 29d1e2014b
Annotations: Reload on custom header changes. (#11709) 2025-01-09 12:36:31 -08:00
Boris Kreitchman d1dc3e827f
Config/Annotations: Add `proxy-busy-buffers-size`. (#12433) 2024-12-05 18:10:00 +00:00
Elizabeth Martin Campos 0a927b65af
Allow CORS `Access-Control-Allow-Origin: null` (#12402) 2024-11-24 17:32:55 +00:00
Johannes Rudolph a5cd15d74a Controller: Fail annotation parsing fast and report errors. (#11740) 2024-11-21 00:54:39 +01:00
chriss-de 698960e9b7
Config/Annotations: Add `relative-redirects`. (#12161) 2024-11-13 21:02:48 +00:00
Marco Ebert 7f0350b4b3
Auth TLS: Add `_` to redirect RegEx. (#12325) 2024-11-07 20:32:44 +00:00
James Strong ca81d5bcdd
Auth TLS: Improve redirect RegEx. (#12249) 2024-11-07 00:19:29 +00:00
Aleksa Cukovic ac23d4069b
Config: Fix panic on invalid `lua-shared-dict`. (#12281) 2024-11-02 21:21:26 +00:00
Ricardo Katz 7356c4f40f
Lua: Extract external auth into file. (#12250)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-10-29 13:22:54 +00:00
Stepan Paksashvili dc3acbd786
[fix] fix nginx temp configs cleanup (#11569)
Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
2024-10-22 16:38:53 +01:00
alexey-gavrilov-flant 9e6c40664f
Metrics: Fix namespace in `nginx_ingress_controller_ssl_expire_time_seconds`. (#10274) 2024-09-17 20:12:43 +01:00
Ricardo Katz 6510535ae0
NGINX: Remove inline Lua from template. (#11806) 2024-09-08 18:48:12 -03:00
Nathan Baulch 4f23049374
Fix minor typos (#11935) 2024-09-06 15:59:43 +01:00
Adam Sunderland 2cec24143d
Allow any protocol for cors origins (#11153)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-31 16:26:45 +01:00
James Strong d4c49112a4
Annotations: Allow commas in URLs. (#11882)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-08-26 23:39:30 +02:00
Marco Ebert e9f6c8e8f2
Security: Follow-up on recent changes. (#11874) 2024-08-26 21:09:16 +01:00
Jon Carl 034c3ccad4
Metrics: Add `--metrics-per-undefined-host` argument. (#11818)
Signed-off-by: Jon Carl <grounded042@joncarl.com>
2024-08-26 20:09:11 +01:00
Ricardo Katz 21cd966d1c
Remove global-rate-limit feature (#11851) 2024-08-25 21:03:29 +01:00
lou-lan 24450ea509
Add custom code handling for temporal redirect (#10651)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-23 21:10:20 +01:00
Sebastian Rabenhorst ffee96c58c
Add native histogram support for histogram metrics (#9971)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-23 17:32:48 +01:00
Ricardo Katz 1ea376a0ee
Replace deprecated queue method (#11853) 2024-08-23 15:55:52 +01:00
Ricardo Katz 7b4e4e2fa1
Enable security features by default (#11819) 2024-08-23 04:45:51 +01:00
Ricardo Katz 3bec99ecfc
Remove 3rd party lua plugin support (#11821) 2024-08-21 14:54:29 +01:00
Ricardo Katz cf8e374290
Auto-generate annotation docs (#11820) 2024-08-18 16:13:18 -07:00
chengjoey eee2760907
Metrics: Remove `ingress_upstream_latency_seconds`. (#11795)
Signed-off-by: joey <zchengjoey@gmail.com>
2024-08-16 01:53:12 -07:00
chengjoey e5c29d1ce4
Controller: Fix panic in alternative backend merging. (#11789) 2024-08-13 01:37:37 -07:00
Jintao Zhang c102e0b930
Perform some cleaning operations on line breaks. (#11720)
Co-authored-by: André Storfjord Kristiansen <33384479+dev-bio@users.noreply.github.com>
2024-08-02 06:37:45 -07:00
Jintao Zhang 1a13bf5c0d
Missing anchors in regular expression. (#11717)
Co-authored-by: André Storfjord Kristiansen <33384479+dev-bio@users.noreply.github.com>
2024-08-01 15:56:56 -07:00