Commit Graph

572 Commits

Author SHA1 Message Date
Elvin Efendi b21c721196 lua-shared-dicts improvements, fixes and documentation 2019-08-14 22:10:56 -04:00
Kubernetes Prow Robot 0d690fba1a
Merge pull request #4356 from aledbf/only-dynamic-mode
Only support SSL dynamic mode
2019-08-14 17:08:35 -07:00
Kubernetes Prow Robot adef152db8
Merge pull request #4379 from diazjf/mirror
Allow Requests to be Mirrored to different backends
2019-08-13 17:52:24 -07:00
Manuel Alejandro de Brito Fontes 80bd481abb
Only support SSL dynamic mode 2019-08-13 17:33:34 -04:00
Pierrick Charron f459515d0d Add quote function in template
Co-authored-by: Charle Demers <charle.demers@gmail.com>
2019-08-09 15:47:29 -04:00
Kubernetes Prow Robot 8c472190d1
Merge pull request #4086 from jeroen92/issue-4038
Resolve #4038, move X-Forwarded-Port variable to the location context
2019-08-09 08:07:25 -07:00
Manuel Alejandro de Brito Fontes 4a9b02bc03
Remove dynamic TLS records 2019-08-08 15:52:56 -04:00
Jeroen Schutrup 39144bb987
Add documentation on how to build the Docker image for end-to-end testing 2019-08-06 17:00:56 +02:00
Manuel Alejandro de Brito Fontes 041a8457aa
Fix docs build due to an invalid link (#4389) 2019-08-01 19:57:09 -04:00
Fernando Diaz 386486e969 Allow Requests to be Mirrored to different backends
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.

See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
2019-08-01 11:53:58 -05:00
Kubernetes Prow Robot 292aca7c7a
Merge pull request #4329 from steakunderscore/update-oauth2_proxy-docs
Update references to oauth2_proxy
2019-08-01 06:58:15 -07:00
otnielvh 3b34d56c92 Add support for psp 2019-08-01 09:45:58 +03:00
Kubernetes Prow Robot c8a3710fb8
Merge pull request #4344 from Nuglif/fastcgi-backend-support
Add FastCGI backend support (#2982)
2019-07-31 11:20:14 -07:00
Charle Demers 72271e9313
FastCGI backend support (#2982)
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
Kubernetes Prow Robot e1f062dd53
Merge pull request #4348 from aledbf/kep
KEP process
2019-07-24 18:39:51 -07:00
Manuel Alejandro de Brito Fontes cb33c4ed26
Start using KEPs for new features or breaking changes 2019-07-24 21:08:07 -04:00
Oguzhan Inan cbc5d3a917
duplicate argument "--disable-catch-all" 2019-07-22 14:48:23 +03:00
Jude Zhu 5e64b6834c
Add [$proxy_alternative_upstream_name]
https://github.com/kubernetes/ingress-nginx/pull/4246
2019-07-19 07:36:13 +08:00
Henry Jenkins b8cedabbff Update references to oauth2_proxy
The custodian of the project has been shifted from [bitly] to [pusher].
So this diff updates these references.

[bitly]: https://github.com/bitly/oauth2_proxy
[pusher]: https://github.com/pusher/oauth2_proxy
2019-07-18 07:59:22 +01:00
Kubernetes Prow Robot 589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
feat: auth-req caching
2019-07-17 12:06:12 -07:00
Moritz Johner 23504db770 feat: auth-req caching
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.

[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
Kautilya Tripathi d9c0ede20a
Update how-it-works.md
Changed text to link
2019-07-12 14:12:15 +05:30
E. Stuart Hicks 3b0c523e49 added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends 2019-07-08 14:32:00 -04:00
Elvin Efendi cd25a0c17a adjust docs 2019-07-01 10:24:09 -04:00
Roemer Hendrikx ef3ebbeab5
Add notes on timeouts while using long GRPC streams
GRPC streams longer than 60s hit multiple timeouts that NGINX has defined. Not all of them are easy to find, so I added some notes to the GRPC example to warn users of setting the correct timeouts if the wish their stream to not be aborted after 60 seconds.
2019-06-25 10:29:39 +02:00
Tristan Matthews ef4b560499
Update annotations.md 2019-06-20 20:19:11 -04:00
Manuel Alejandro de Brito Fontes 84102eec2b
Migrate to new networking.k8s.io/v1beta1 package 2019-06-13 11:32:39 -04:00
Kubernetes Prow Robot e76418cd99
Merge pull request #4162 from stramel/patch-1
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
Michael Stramel 686f2310e4 Add "text/javascript" to compressible MIME types
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages, servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
Kubernetes Prow Robot 286ff13af2
Merge pull request #4048 from fedunineyu/change-upstream-on-error-with-sticky-session
Change upstream on error when sticky session balancer is used
2019-06-06 07:22:17 -07:00
Manuel Alejandro de Brito Fontes 78d6ce6e6e
Partially revert usage of kustomize for installation (#4159) 2019-06-05 10:59:38 -04:00
Nikolas Skoufis 4a913fac2a
Add clarification on how to enable path matching
The fact that you need to explicitly add the annotation is easy to miss.
This makes this more explicit, while leaving the finer details to the
linked annotations document.
2019-06-05 11:14:50 +10:00
Chuan Long 30d3505e7e
Update README.md for external-auth Test 4
Title for Test 4 should be `secure service with valid auth header`. The current one is the same as Test 3.
2019-05-29 13:23:20 -05:00
Eugene Fedunin 254629cf16 Added support for annotation `session-cookie-change-on-failure`
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.

Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
Kubernetes Prow Robot dfa7f10fc9
Merge pull request #4055 from nicknovitski/kustomize
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
MMeent 73c70e28b4
Clear up some inconsistent / unclear wording
IPv6 enabled/disabled working was confusing or contradicting itself. This updates the wording to what is expected, based on the default values in the table above, and the behaviour that I could find in code.
2019-05-21 15:27:58 +02:00
reynaldi.wijaya 616b1e239a UPT: Opentracing configmap documentation 2019-05-21 18:14:33 +08:00
reynaldi.wijaya d468cd5ec5 UPT: Modify configmap to include jaeger sampler host and jaeger sampler port 2019-05-21 17:54:29 +08:00
Nick Novitski 51ad0bc54b Rearrange deployment files into kustomizations 2019-05-19 12:35:54 -07:00
Kubernetes Prow Robot 19501b217d
Merge pull request #4089 from alanjcastonguay/docs/use-gzip-configmap-defaults
Docs: configmap: use-gzip
2019-05-18 04:09:14 -07:00
Kubernetes Prow Robot c12059bff5
Merge pull request #4098 from kevinsimper/patch-1
Update configmap about adding custom locations
2019-05-18 03:39:12 -07:00
Kevin Pullin 3ef6689bbd
Docs - Update capture group `placeholder`
The current ingress example uses the `$2` capture group placeholder, however the description refers to the `$1` placeholder (this was previously correct, but was not updated when the ingress example changed from $1 to $2).
2019-05-17 16:01:17 -07:00
Kevin Simper ddc2ce5c70
Update configmap about adding custom locations 2019-05-17 21:39:40 +02:00
Alan J Castonguay f5b090518d Docs: configmap: use-gzip
Move the "gzip-types" value default from the "use-gzip" to the "gzip-types"
heading, and link to it from use-gzip.

Document that the "use-gzip" default is "true", matching the style of other
configmap items.
2019-05-15 13:09:45 -04:00
Alan J Castonguay 5eda92b1c9
Explain references in custom-headers documentation
Augment description of custom-headers behavior. Explain the purpose of the two configmaps, making explicit that one cites the other by `namespace/name`. Link the two example yaml files, so they're more easily navigated to from a browser looking at https://kubernetes.github.io/ingress-nginx/examples/customization/custom-headers/

Campfire: grammar, standard installation is in the `ingress-nginx` namespace.
2019-05-13 17:50:59 -04:00
okryvoshapka-connyun 4811168d2a Fixed typos 2019-05-06 09:04:12 +02:00
okryvoshapka-connyun 8cc9afe8ee Added Global External Authentication settings to configmap parameters incl. addons 2019-05-03 12:08:16 +02:00
Kubernetes Prow Robot b4f2880ee6
Merge pull request #3802 from tjamet/admission-controller
Add a validating webhook for ingress sanity check
2019-05-02 07:52:25 -07:00
Kubernetes Prow Robot 7ff6643372
Merge pull request #4037 from marcostvz/fix-doc-rewrite
[doc] fixing regex in example of rewrite
2019-05-02 07:02:23 -07:00
Marcos Estevez 69c1efc0e3
[doc] fixing regex in example of rewrite
avoids /somethingfoo to be matched by regex

Signed-off-by: Marcos Estevez <marcos.stvz@gmail.com>
2019-04-25 12:43:32 +02:00