41cf628bdf
Add a configurable URL redirect parameter for error URLs
2020-10-08 12:53:46 +01:00
d4152c74fc
Sync user guide with config defaults changes
...
PRs #6226 and #6143 changed the configuration defaults but didn't update
all the configuration defaults docs in the user guide.
This PR updates the user guide to be in sync with the defaults.
Signed-off-by: Stevo Slavić <sslavic@gmail.com>
2020-10-05 10:15:06 +02:00
6fd891f3df
Merge pull request #6217 from touchifyapp/@feature/cors-expose-headers
...
Add annotation to configure CORS Access-Control-Expose-Headers
2020-09-26 16:52:48 -07:00
a990ac3910
Change defaults
2020-09-24 21:33:56 -03:00
b7b85175f6
Add annotation to configure CORS Access-Control-Expose-Headers
2020-09-23 17:41:52 +02:00
d4a817325c
Update annotations.md
...
Improvements to the documentation of Client Certificate Authentication. (auth-tls-* annotations).
- Mention that these rules are applied per host and not per Ingress/path
- Include more possible and default values
- Describe the headers that are sent to the upstream services
2020-09-23 09:51:08 +02:00
e050ff1b9f
disable session tickets by default
2020-09-18 00:08:00 -04:00
87aa96b468
Change server-tokens default value to false
2020-09-17 09:52:07 -03:00
93cd78aa45
Docs: remove redundant --election-id arg from Multiple Ingresses
2020-09-15 13:55:24 -04:00
b1c64fa822
Merge pull request #6101 from GianOrtiz/burst
...
Add annotation to set value for burst multiplier on rate limit
2020-09-10 05:09:45 -07:00
d1e0da7a36
Fixed proxy protocol link
2020-09-04 17:41:11 +08:00
3820aa416b
Add annotation to set value for burst multiplier on rate limit
2020-08-30 19:43:08 -03:00
903e511b9d
fix: log warning if empty ingress class is monitored. Improve docs related to --ingress-class
2020-08-21 09:25:43 +02:00
743439e75b
Added missing backend protocol.
...
As per https://kubernetes.github.io/ingress-nginx/user-guide/fcgi-services/
2020-08-14 11:16:53 +02:00
c500bd4b3f
Merge pull request #4139 from choffmeister/fix/collect-metrics-if-metrics-per-host-false
...
Always collect metrics when --metrics-per-host=false
2020-08-08 12:02:19 -07:00
2baca9e32a
Merge branch 'add-opentracing-operation-name-settings' of https://github.com/JorritSalverda/ingress-nginx into add-opentracing-operation-name-settings
2020-07-23 11:42:44 -07:00
d52141c2b9
Add enable-real-ip
2020-07-15 15:25:29 -04:00
c0629e92c2
Add proxy-ssl-server-name to enable passing SNI
2020-07-03 14:14:32 +08:00
3402d07ff0
doc: update docs and fixed typos ( #5821 )
2020-07-01 10:02:52 -04:00
a3f2be6b90
Fixup docs for the ingress-class flag.
...
According to this issue, there is no way to handle all ingress classes.
https://github.com/kubernetes/ingress-nginx/issues/3101
2020-06-26 13:12:48 -04:00
f232a264ab
Add default-type as a configurable for default_type
2020-06-21 11:10:51 +08:00
8242fc712c
Fix typo
2020-06-09 14:14:58 +02:00
99aad291a5
Merge pull request #5656 from agile6v/dev
...
feat: add http-access-log-path and stream-access-log-path options in configMap
2020-06-08 06:27:46 -07:00
1e6cd68e79
Add URL to official grafana dashboards
...
Convert from italic text to clickable link.
2020-06-08 00:19:52 +02:00
fc1c043437
Add http-access-log-path and stream-access-log-path options in configMap
2020-06-05 01:27:26 +08:00
ee84603d06
Add minor doc fixes to user guide and chart readme
2020-06-03 17:54:41 +12:00
d061375afa
Merge pull request #5571 from agile6v/dev
...
feat: support the combination of Nginx variables for annotation upstream-hash-by.
2020-06-01 15:10:14 -07:00
c035a144f8
Support the combination of nginx variables and text value for annotation upstream-hash-by.
2020-06-01 06:37:41 +08:00
ee02d897d5
Merge pull request #5534 from agile6v/master
...
Add annotation ssl-prefer-server-ciphers.
2020-05-29 08:35:16 -07:00
c52d55a2ed
Use ingress-nginx-* naming in docs to match the default deployment
2020-05-17 21:27:56 +03:00
41d82005ec
Add annotation ssl-prefer-server-ciphers.
2020-05-11 16:31:08 +08:00
4a36c804e6
Add 0-RTT warning
2020-05-08 12:40:11 +02:00
ef75a2d6fc
Merge remote-tracking branch 'upstream/master' into fix/collect-metrics-if-metrics-per-host-false
2020-05-01 14:57:00 +02:00
7fbf4977e3
Merge pull request #5319 from MrAmbiG/patch-1
...
Example names violate DNS naming stadards
2020-04-28 10:52:07 -07:00
0d2c6db75e
Merge pull request #5358 from praseodym/update-tls-configuration
...
Update TLS configuration
2020-04-28 07:46:08 -07:00
f9ae784541
Remove lua-resty-waf docs
2020-04-22 17:42:18 -04:00
90d07d7b69
Fix from-to-www link
2020-04-17 19:41:25 -04:00
d18fa90cfd
Add e2e test for OCSP and new configmap setting
2020-04-17 12:53:47 -04:00
0257068b9b
Fix plugin README.md link
2020-04-14 11:48:23 -04:00
b60e25f1db
ingress-nginx lua plugins documentation
2020-04-14 09:47:58 -04:00
049b25e566
Update TLS configuration
...
Enable TLSv1.3 by default and update list of ciphers. The new
configuration matches the 'Intermediate' configuration recommended by
the Mozilla SSL Configuration Generator:
https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=modern&openssl=1.1.1d&guideline=5.4
2020-04-13 17:46:33 +02:00
c0db19b0ec
Enable configuration of plugins using configmap
2020-04-13 11:38:42 -04:00
9c6873a55d
Remove deprecated flags and update docs
2020-04-12 10:07:33 -04:00
12dddcca17
docs: fix use-gzip wrong markdown style
2020-04-11 14:28:04 +08:00
f3050740ef
Example names violate DNS naming stadards
...
Original names which gave errors: myServiceA, myServiceB
Alatere suggestions:
myServiceA --> myservicea, my_service_a, my-service-a
myServiceB --> myserviceb, my_service_b, my-service-b
2020-04-02 23:17:20 +05:30
19770f5b41
Merge remote-tracking branch 'base/master' into fix/collect-metrics-if-metrics-per-host-false
2020-03-13 07:17:49 +01:00
e001b5a5b7
I found a typo :)
...
Change *onyl* to * only*
2020-02-27 23:05:37 -03:00
141ea59b7f
Allows overriding the server name used to verify the certificate of the proxied HTTPS server
2020-02-25 13:32:14 +01:00
35264d6e8f
Merge pull request #5114 from whalecold/match
...
Feat: add header-pattern annotation.
2020-02-24 17:07:36 -08:00
6cd223558f
Merge pull request #4981 from janosi/proxy-ssl-scope
...
Applying proxy-ssl-* directives on locations only
2020-02-24 15:53:36 -08:00
0b33650bb8
Feat: canary supports using specific match strategy to match header value.
2020-02-21 10:02:20 +08:00
f97599c189
Use correct spelling of "Original"
...
Fix the spelling of "original" in the annotations documentation
2020-02-20 16:45:26 +11:00
a90452774a
ingress-path-matching: doc typo
...
A small typo in the README describing the path matching.
2020-02-18 10:19:53 -08:00
d48d5a61ae
Add gzip-min-length as a configurable
2020-02-14 13:29:51 +07:00
0365a7c172
Remove minikube and only use kind ( #5059 )
2020-02-12 20:19:57 -03:00
2c5819e1b3
Add flag to allow custom ingress status update intervals ( #5050 )
2020-02-10 16:52:50 -03:00
5e54f66ab2
Merge pull request #5040 from BrianKopp/samesite-followup
...
Update documentation and remove hack fixed by upstream cookie library
2020-02-10 10:25:53 -08:00
34b6d083b8
Cleanup docs ( #5043 )
2020-02-09 20:50:27 -03:00
34b194c770
Update documentation and remove hack fixed by upstream cookie library
2020-02-08 11:54:52 -07:00
b3146354d4
Refactor mirror feature
2020-02-05 10:39:55 -03:00
beef9fae2d
Merge pull request #4949 from BrianKopp/same-site
...
Add SameSite support - omit None for old browsers
2020-01-31 03:50:21 -08:00
3f4da0fa0f
added hint why regular expressions might not be accepted
...
Kubernetes validates all regular expressions using RE2 which does not support the full syntax of PCRE which uses NGINX.
see: #4989
2020-01-30 19:22:41 +01:00
1b523390bb
Add SameSite=None support and conditionally omit SameSite=None for backwards compatibility
2020-01-29 14:30:00 -07:00
bc79fe1532
Add: documentation for proxy-ssl-location-only
2020-01-29 10:00:55 +01:00
74944b99e9
Enable download of GeoLite2 databases ( #4896 )
2020-01-08 19:46:43 -03:00
d7be5db7de
Support sample rate and global sampling configuration for Datadog in ConfigMap
2020-01-07 16:59:59 -08:00
8bf155d0d7
Fixed documentation for FCGI annotation.
2019-12-19 03:48:55 +03:00
0dce5be743
Migrate ingress definitions from extensions to networking.k8s.io
2019-12-12 21:25:00 -03:00
010ec6f159
Remove extra annotation when Enabling ModSecurity
...
Since version 0.25, if you try to use both annotations of:
nginx.ingress.kubernetes.io/modsecurity-snippet: |
Include /etc/nginx/owasp-modsecurity-crs/nginx-modsecurity.conf
Include /etc/nginx/modsecurity/modsecurity.conf
and
nginx.ingress.kubernetes.io/enable-modsecurity: "true"
it breaks nginx config and you will not catch it unless you have nginx admission controller enabled.
You do not need the annotation of `Include /etc/nginx/modsecurity/modsecurity.conf` from version 0.25
2019-11-28 15:16:09 +00:00
b286c2a336
Merge pull request #4732 from willthames/enable-opentracing-annotation
...
Allow enabling/disabling opentracing for ingresses
2019-11-26 17:31:21 -08:00
0ae463a5f3
Provide annotation to control opentracing
...
By default you might want opentracing off, but on for a particular
ingress.
Similarly, you might want opentracing globally on, but disabled for
a specific endpoint. To achieve this, `opentracing_propagate_context`
cannot be set when combined with `opentracing off`
A new annotation, `enable-opentracing` allows more fine grained control
of opentracing for specific ingresses.
2019-11-27 11:07:26 +10:00
6b0a6ec8b3
Fix extra word
2019-11-20 19:01:56 -06:00
73aaf0ff28
Update annotations.md
...
Add links to proxy-buffering section
2019-11-13 12:54:42 +09:00
0b38a48ac9
Update annotations.md
...
Add notes of limit-rate/limit-rate-after
2019-11-13 12:49:59 +09:00
d1eea794e9
Fix broken links in documentation ( #4746 )
2019-11-08 16:22:52 -03:00
2771095b8c
Merge pull request #4727 from nothinux/master
...
update docs, remove output in prometheus deploy command
2019-11-08 09:02:14 -08:00
0d244e1c41
Merge pull request #4730 from stamm/master
...
add configuration for http2_max_concurrent_streams
2019-11-08 07:12:29 -08:00
a0dc3a9a51
Merge pull request #4695 from janosi/secure-verify-ca-secret
...
Removing secure-verify-ca-secret support
2019-11-08 07:12:21 -08:00
d9cfad1894
add configuration for http2_max_concurrent_streams
2019-10-31 15:13:38 +03:00
d8c2d38a39
remove output in prometheus deploy command
2019-10-31 10:29:14 +07:00
40e0e5bef8
add proxy-max-temp-file-size doc
2019-10-23 09:55:46 +02:00
bd4b62029d
Merge pull request #4694 from panpan0000/add-remote-addr-into-l4-logs
...
Enhancement : add remote_addr in TCP access log
2019-10-20 19:39:37 -07:00
ee24bf1bbc
Doc: Add `remote_addr` into default values in configmap for TCP logging format
2019-10-21 10:18:17 +08:00
31227d61c2
Removing secure-verify-ca-secret support and writing an error log if that annotation is used in an Ingress definition
2019-10-18 10:58:57 +02:00
ad17d71387
Adding some documentation about the use of metrics-per-host and enable-metrics cmd line flags
2019-10-17 17:22:49 -06:00
fb025ab501
Merge pull request #4087 from MRoci/master
...
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
d5d2b4037c
Fix ports collision when hostNetwork=true ( #4617 )
2019-09-28 17:30:57 -03:00
72c4ffa8b5
add modsecurity-snippet key
2019-09-28 09:54:07 +02:00
6715108d8a
Release 0.26.0
2019-09-27 10:23:12 -03:00
50b6715f06
Merge pull request #4604 from aledbf/2353
...
Change default for proxy-add-original-uri-header
2019-09-25 07:28:00 -07:00
2bd8121338
Change default for proxy-add-original-uri-header
2019-09-25 10:57:31 -03:00
ceddec4ea0
Merge pull request #4588 from multi-io/patch-1
...
tls user guide --default-ssl-certificate clarification
2019-09-25 06:14:00 -07:00
ea5add6f5c
Rollback change of ModSecurity setting SecAuditLog
2019-09-24 14:53:44 -03:00
786a3b6862
Add support for configmap of headers to be sent to external auth service
2019-09-24 10:53:23 -04:00
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode
...
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
1a5e2d57a6
tls user guide --default-ssl-certificate clarification
...
Evidently the `--default-ssl-certificate` option is used not only for the catch-all server, but also for all ingress `tls:` sections that don't have a `secretName` option. This doesn't seem to be documented anywhere, hence this change.
2019-09-23 12:35:10 +02:00
c1ed6db468
Fix spelling and remove local reference of 404 docker image ( #4581 )
2019-09-22 16:08:47 -03:00
4b4176c830
Fix log format after #4557
2019-09-18 12:52:09 -03:00
87ad033483
Merge pull request #4569 from mkabischev/jaeger-header-configuration
...
allow to configure jaeger header names
2019-09-17 20:29:29 -07:00
d5563a7e47
allow to configure jaeger header names
2019-09-17 12:35:53 +03:00
Ian Buss
Stevo Slavić
Kubernetes Prow Robot
Manuel Alejandro de Brito Fontes
Maxime LUCE
Daniel Albuschat
Elvin Efendi
Caleb Lloyd
ozhuang
Gian Ortz
Tore Lønøy
Goran
Bernard Van De Walle
David Schwartz
Zhongcheng Lao
agile6v
Mason Staugler
mengqi.wmq
Julian Rüth
Michał Sochoń
chamilad
Edgars Beigarts
Mark Janssen
Christian Hoffmeister
Weihang Lo
Gajendra D Ambi
Luis Valdés
schaefec
Lisheng Zheng
James Taylor
Jack Lindamood
Daniel Arifin
BrianKopp
Herr-Sepp
Laszlo Janosi
Sungmin Lee
Denis Boulas
Sablu Miah
Will Thames
Matt Busche
Syunsuke Komma
Rustam Zagirov
nothinux
Carlos Panato
Peter Pan
Matthew Wickman
MRoci
A Gardner
Olaf Klischat
Mike Kabischev