6cd223558f
Merge pull request #4981 from janosi/proxy-ssl-scope
...
Applying proxy-ssl-* directives on locations only
2020-02-24 15:53:36 -08:00
c5db20ace4
Update default VariablesHashBucketSize value to 256 ( #5150 )
2020-02-21 16:01:33 -03:00
d48d5a61ae
Add gzip-min-length as a configurable
2020-02-14 13:29:51 +07:00
ced67e53a1
New logic: proxy-ssl parameters can be applied on locations only
...
Add: new parameter in the ConfigMap to control whether the proxy-ssl parameters of an Ingress should be applied on server and location levels, or only on location level
Add: logic in the config handling to work according to the new ConfigMap parameter
Add: unit test case
2020-01-29 10:00:55 +01:00
d7be5db7de
Support sample rate and global sampling configuration for Datadog in ConfigMap
2020-01-07 16:59:59 -08:00
cfccc2acc0
Update default SSL ciphers
2019-12-05 19:34:53 -03:00
61d902db14
Remove Lua resty waf feature
2019-11-26 10:37:43 -03:00
d9cfad1894
add configuration for http2_max_concurrent_streams
2019-10-31 15:13:38 +03:00
6aa48def3a
add remote_addr in layer 4 access log
...
original:
[18/Oct/2019:00:47:53 +0000] TCP 200 4333 81 0.002
new:
[10.6.124.202] [18/Oct/2019:01:05:15 +0000] TCP 200 4333 81 0.002
2019-10-18 09:21:01 +08:00
fb025ab501
Merge pull request #4087 from MRoci/master
...
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
72c4ffa8b5
add modsecurity-snippet key
2019-09-28 09:54:07 +02:00
6715108d8a
Release 0.26.0
2019-09-27 10:23:12 -03:00
2bd8121338
Change default for proxy-add-original-uri-header
2019-09-25 10:57:31 -03:00
786a3b6862
Add support for configmap of headers to be sent to external auth service
2019-09-24 10:53:23 -04:00
4b4176c830
Fix log format after #4557
2019-09-18 12:52:09 -03:00
87ad033483
Merge pull request #4569 from mkabischev/jaeger-header-configuration
...
allow to configure jaeger header names
2019-09-17 20:29:29 -07:00
d5563a7e47
allow to configure jaeger header names
2019-09-17 12:35:53 +03:00
9af574a234
Remove the_real_ip variable
2019-09-12 20:01:33 -03:00
ce3e3d51c3
WIP Remove nginx unix sockets ( #4531 )
...
* Remove nginx unix sockets
* Use an emptyDir volume for /tmp in PSP e2e tests
2019-09-08 18:14:54 -03:00
c2935ca35c
Refactor health checks and wait until NGINX process ends
2019-09-01 15:31:27 -04:00
d8bd8c5619
Add nginx proxy_max_temp_file_size configuration option
2019-08-15 13:47:42 -04:00
0b375989f3
Merge pull request #4412 from Shopify/ssl-early-data
...
Add nginx ssl_early_data option support
2019-08-15 10:08:35 -07:00
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
4a9b02bc03
Remove dynamic TLS records
2019-08-08 15:52:56 -04:00
a2e667c082
lua shared dict from cm
...
lua shared dict teml test and update func sign
lua shared dict cm test
lua shared dict integration test
lua shared dict add cm parsing
lua shared dict change test header
2019-08-08 12:44:11 +03:00
7219130da4
Add nginx ssl_early_data option support
2019-08-07 16:04:09 -04:00
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
...
feat: auth-req caching
2019-07-17 12:06:12 -07:00
23504db770
feat: auth-req caching
...
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.
[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
3b0c523e49
added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends
2019-07-08 14:32:00 -04:00
7c297e001a
Merge pull request #4246 from ElvinEfendi/proxy-alternative-upstream-name
...
introduce proxy_alternative_upstream_name Nginx var
2019-07-04 19:20:35 -07:00
8b208cac93
introduce proxy_alternative_upstream_name Nginx var to differentiate canary requests
2019-07-04 19:43:20 -04:00
8807db9748
Check and complete intermediate SSL certificates
2019-07-04 19:13:21 -04:00
e76418cd99
Merge pull request #4162 from stramel/patch-1
...
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
686f2310e4
Add "text/javascript" to compressible MIME types
...
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages , servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
c4ced9d694
fix source file mods
2019-06-06 10:47:08 -04:00
31ffad8fa1
UPT: Add variable to define custom sampler host and port, add commituser
2019-05-21 12:34:38 +08:00
4811168d2a
Fixed typos
2019-05-06 09:04:12 +02:00
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
8b3702c829
Enable access log for default backend
...
disable log on default_server
2019-02-26 11:14:31 +03:00
6305e1d152
fix: run gofmt
2019-02-22 15:04:19 +08:00
dc63e5d185
fix: rename proxy-buffer-number to proxy-buffers-number
2019-02-22 10:21:17 +08:00
c92d29d462
feat: configurable proxy buffer number
2019-02-20 18:05:09 +08:00
a29c27ed4c
Datadog Opentracing support - part 2
...
This commit is part 2 of 2, adding configuration of the
Datadog Opentracing module to the controller.
Fixes half of #3752
2019-02-15 15:20:10 -05:00
adc128711b
delete confusing CustomErrors attribute to make things more explicit
2019-02-13 22:41:02 -05:00
17e788b8e1
Merge pull request #3684 from aledbf/health
...
Replace Status port using a socket
2019-02-06 13:49:08 -08:00
34b0580225
Replace Status port using a socket
2019-02-06 18:00:10 -03:00
5dee6af957
add params for access log
2019-01-26 21:42:11 +03:00
b10b60f9ae
Revert max-worker-connections default value ( #3660 )
2019-01-13 10:53:18 -03:00
a3bcbeb3d2
Add support for redirect https to https when from-to-www-redirect is defined
2019-01-10 20:59:49 -03:00
Kubernetes Prow Robot
Manuel Alejandro de Brito Fontes
Daniel Arifin
Laszlo Janosi
Sungmin Lee
Rustam Zagirov
Peter Pan
MRoci
A Gardner
Mike Kabischev
Maxime Ginters
tals
Moritz Johner
E. Stuart Hicks
Elvin Efendi
Michael Stramel
reynaldi.wijaya
okryvoshapka-connyun
Alex Kursell
Mikhail Marchenko
Jim Zhang
Alan J Castonguay