dd0fe4b458
Merge pull request #4422 from ElvinEfendi/lua-resolv-conf-search
...
teach lua about search and ndots settings in resolv.conf
2019-08-14 17:36:33 -07:00
0d690fba1a
Merge pull request #4356 from aledbf/only-dynamic-mode
...
Only support SSL dynamic mode
2019-08-14 17:08:35 -07:00
1be52afa8d
e2e test for service with incomplete external name
2019-08-14 18:03:30 -04:00
8a2a0e915a
Add e2e tests for proxyssl
2019-08-14 11:49:28 +02:00
adef152db8
Merge pull request #4379 from diazjf/mirror
...
Allow Requests to be Mirrored to different backends
2019-08-13 17:52:24 -07:00
d46b4148fa
Lua /etc/resolv.conf parser and some refactoring
2019-08-13 18:34:54 -04:00
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
8a9298ae27
Add helper to extract prometheus metrics in e2e tests
2019-08-13 12:53:40 -04:00
8c472190d1
Merge pull request #4086 from jeroen92/issue-4038
...
Resolve #4038 , move X-Forwarded-Port variable to the location context
2019-08-09 08:07:25 -07:00
4a9b02bc03
Remove dynamic TLS records
2019-08-08 15:52:56 -04:00
a2e667c082
lua shared dict from cm
...
lua shared dict teml test and update func sign
lua shared dict cm test
lua shared dict integration test
lua shared dict add cm parsing
lua shared dict change test header
2019-08-08 12:44:11 +03:00
8dd912114e
Move X-Forwarded-Port variable to the location context
...
Resolves issue #4038 where the X-Forwarded-Port header would be set to the value of the https listening port if all of the following settings were satisfied:
- The ingress controller was started with a non-default HTTPS port set with the `--https-port` argument
- An ingress is created having:
- the `nginx.ingress.kubernetes.io/auth-url` annotation set
- TLS enabled
This commit solves this issue by moving the setting of the `pass_server_port` variable from the server, one level down to the location context.
2019-08-06 17:00:58 +02:00
386486e969
Allow Requests to be Mirrored to different backends
...
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.
See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
2019-08-01 11:53:58 -05:00
72271e9313
FastCGI backend support ( #2982 )
...
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
...
feat: auth-req caching
2019-07-17 12:06:12 -07:00
23504db770
feat: auth-req caching
...
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.
[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
d5c7fa8cfb
Fix scripts to be able to run tests in docker
2019-07-17 11:06:53 -04:00
3b0c523e49
added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends
2019-07-08 14:32:00 -04:00
08906ef8f2
add comment to the test
2019-07-04 18:39:29 -04:00
e988217fdf
e2e test for ewma
2019-07-03 16:25:53 -04:00
964a484b2f
GetLbAlgorithm helper func for e2e
2019-07-03 08:15:41 -04:00
004d0c8214
Fix go imports
2019-06-30 18:58:18 -04:00
a2009484f7
Merge pull request #4249 from ElvinEfendi/trailing-dot
...
test to make sure dynamic cert works trailing dot in domains
2019-06-29 16:43:22 -07:00
975a63516d
Update kind to 0.4.0
2019-06-29 18:32:02 -04:00
f771e7247a
test to make sure dynamic cert works trailing dot in domains
2019-06-28 16:21:59 -04:00
591887089f
Add e2e test suite to detect memory leaks in lua
2019-06-27 22:05:52 -04:00
3268d79610
Update nginx image to 0.90
2019-06-26 18:46:56 -04:00
225f881ed0
Add e2e test for invalid secrets
2019-06-25 09:28:52 -04:00
c8cbf0db29
Merge pull request #4227 from aledbf/lint
...
Fix misspelled and e2e check
2019-06-24 21:30:34 -07:00
85a848faaf
Fix misspelled and e2e check
2019-06-24 23:47:22 -04:00
d769c8a4d8
Update nginx image
2019-06-24 23:36:23 -04:00
5dfc7e211f
Merge pull request #4221 from aledbf/upgrade-nginx-image
...
Switch to openresty image
2019-06-24 09:45:57 -07:00
dca5557c50
In case of errors running e2e tests, print the generated nginx.conf file
2019-06-23 22:51:39 -04:00
ca6b61f639
Update e2e tests for openresty
2019-06-23 22:51:39 -04:00
73be06960e
Update test image and binaries
2019-06-23 22:51:38 -04:00
5670e3d9de
Add e2e tests for grpc using https://grpcb.in
2019-06-18 23:44:10 -04:00
1ed6d89c7b
Add e2e test for service type=ExternalName
2019-06-17 23:12:24 -04:00
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 11:32:39 -04:00
686f2310e4
Add "text/javascript" to compressible MIME types
...
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages , servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
14a394fc9e
Update nginx ( #4150 )
...
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
251f48b120
Merge pull request #4135 from nicknovitski/deployment-api-appsv1
...
Use apps/v1 api group in e2e tests
2019-05-29 16:50:18 -07:00
e1958b8272
Run PodSecurityPolicy E2E test in parallel
...
Previously, this test modified a ClusterRole used by _every_ test. It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.
Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
2019-05-29 14:13:04 -07:00
d617e5abdc
Use apps/v1 api group in e2e tests
2019-05-29 12:12:45 -07:00
c2227a058d
Refactor e2e test
2019-05-27 06:31:01 -04:00
c4597522bf
Refactor whitelist from map to standard allow directives
2019-05-27 04:55:38 -04:00
77f5e4decb
Update nginx image to 0.86
2019-05-26 11:28:35 -04:00
dfa7f10fc9
Merge pull request #4055 from nicknovitski/kustomize
...
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
f63f0457be
Update e2e images ( #4110 )
2019-05-24 02:47:14 +02:00
51ad0bc54b
Rearrange deployment files into kustomizations
2019-05-19 12:35:54 -07:00
d32079e69c
Allow to use a custom k8s version in e2e tests
2019-05-15 20:58:58 -04:00
87b730d5fe
Add binaries required by kubernetes-sigs/testing_frameworks
2019-05-15 17:17:32 -04:00
3dd1699637
Add dependencies for code generator
2019-05-14 20:15:49 -04:00
be2792c5f9
Refactor scripts to run e2e tests
2019-05-14 20:15:43 -04:00
7be1dccea7
Add option to run scripts in debug mode
2019-05-13 22:31:06 -04:00
16540a1dba
Run tests with only one worker
2019-05-13 22:30:21 -04:00
ebc50b5c68
Add image for prow jobs
2019-05-13 22:29:44 -04:00
5c26a72256
Don't try to create e2e runner rbac resources twice
2019-05-07 18:07:18 -07:00
8ea40bbcb9
fix typo: deployement->deployment
2019-05-07 16:16:06 -07:00
b06e114177
Merge pull request #3506 from KoerberDigitalDevTeam/feature/extrenal-auth-security-opt-out
...
Improve the external authorization concept from opt-in to secure-by-default
2019-05-07 09:15:53 -07:00
b8fb09d7b3
Update go to 1.12.5, kubectl to 1.14.1 and kind to 0.2.1 ( #4064 )
2019-05-06 23:28:15 -04:00
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
bd694bf3de
add e2e coverage for multi auth
2019-04-18 10:32:15 -04:00
7283a01b9f
Update nginx image and Go to 1.12.4 ( #4010 )
2019-04-17 22:45:51 -04:00
34734edc6e
Merge pull request #4005 from Shopify/proxy-next-upstream-timeout
...
Support proxy_next_upstream_timeout
2019-04-15 09:10:09 -07:00
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
b13432dbe0
adjust default ssl cert e2e test
2019-04-13 15:00:44 -04:00
1ddf5d2752
regression test for dynamic cert related default-certificate issue
2019-04-09 22:11:21 -04:00
107bec676a
fix custom default backend test title
2019-04-09 20:24:45 -04:00
c9d069e64d
Update nginx image to 0.84 ( #3969 )
2019-04-06 12:30:35 -03:00
39ecab8d5a
Merge pull request #3954 from Shopify/lb-configmap
...
Fix load-balance configmap value
2019-04-02 05:10:34 -07:00
4f819b6256
Fix load-balance configmap value
2019-04-01 15:55:36 -04:00
b87cc5a1a6
Merge pull request #3786 from Shopify/rewrite-x-forwarded-prefix
...
Fix x-forwarded-prefix annotation
2019-03-31 16:18:32 -07:00
87e962682f
properly parse x-forwarded-host
2019-03-31 15:10:45 -04:00
496ff07bf1
replace some of the Nginx configuration to Lua code
2019-03-31 12:04:52 -04:00
fdd445cb2a
Fix e2e-tests
2019-03-29 16:25:25 -04:00
188295550c
Simplify x-forwarded-prefix annotation
2019-03-29 16:25:25 -04:00
14a9e9f3fa
Update dependencies client-go to release-11.0 and kubernetes-1.14.0
2019-03-28 20:43:18 -03:00
3ec1028d0b
Fix dynamic SSL certificate for aliases and redirect-from-to-www
2019-03-28 16:29:11 -03:00
e624fe171d
Merge pull request #3839 from perprogramming/bugfix/panic-on-multiple-non-matching-canary
...
Fix panic on multiple non-matching canary
2019-03-27 16:46:48 -07:00
f38f1d9d0e
Update nginx image
2019-03-26 17:28:44 -03:00
1bef3e75b2
Set `X-Request-ID` for the `default-backend`, too.
2019-03-22 11:33:11 +01:00
ec81605cae
Merge pull request #3908 from aledbf/update-nginx
...
Update nginx image
2019-03-21 11:45:41 -07:00
3339db2cb5
Migrate e2e cluster to kind
2019-03-20 18:36:29 -03:00
0bd5f5e9a0
Update nginx image
2019-03-19 10:18:19 -03:00
1d59e4f1fe
enable dynamic SSL mode by default
2019-03-17 14:58:06 -04:00
c995e13249
Improve text, error level, tests...
2019-03-12 15:57:36 +01:00
d3ac73be79
Remove session-cookie-hash annotation
2019-03-04 10:34:48 -05:00
8a40e82ffb
Fix panic on multiple non-matching canary
2019-03-04 12:30:59 +01:00
fbed06fd3c
Update nginx image
2019-03-01 09:18:45 -03:00
28d99c6d7d
Set default for satisfy annotation to nothing
2019-02-26 15:05:45 -05:00
f899506b2b
Update nginx image
2019-02-26 14:38:09 -03:00
51c6e950a3
Fix e2e test in osx
2019-02-26 12:46:38 -03:00
8b3702c829
Enable access log for default backend
...
disable log on default_server
2019-02-26 11:14:31 +03:00
bb7a3f3527
Merge pull request #3812 from ecosia/jg-customerrors-e2e-removeunused
...
Removes unused const from customhttperrors e2e test
2019-02-25 11:40:57 -08:00
164b8590a3
Removes unused const from customhttperrors e2e test
2019-02-25 17:27:05 +01:00
11177c95ec
Fix e2e tests
2019-02-25 12:37:20 -03:00
d8ec96ca7d
Merge pull request #3730 from ecosia/jg-customerrors-defaultbackend
...
Changes CustomHTTPErrors annotation to use custom default backend
2019-02-25 07:22:07 -08:00
8f5e7de623
Merge pull request #3800 from aledbf/refactor-e2e
...
Refactor e2e
2019-02-24 16:33:54 -08:00
5e249d3366
Refactor e2e tests to use the service ClusterIP
2019-02-24 20:04:07 -03:00
3865e30a00
Changes CustomHTTPErrors annotation to use custom default backend
...
Updates e2e test
Removes focus from e2e test
Fixes renamed function
Adds tests for new template funcs
Addresses gofmt
Updates e2e test, fixes custom-default-backend test by creating service
Updates docs
2019-02-24 22:48:56 +01:00
7b2495047f
Merge pull request #3781 from zoumo/proxy-buffer-number
...
feat: configurable proxy buffers number
2019-02-22 12:11:46 -08:00
dc63e5d185
fix: rename proxy-buffer-number to proxy-buffers-number
2019-02-22 10:21:17 +08:00
8b6e4d4697
Use UsePortInRedirects only if enabled
2019-02-21 17:48:45 -03:00
c92d29d462
feat: configurable proxy buffer number
2019-02-20 18:05:09 +08:00
15d5ef95ef
Merge pull request #3740 from Shopify/session-annotation-reload
...
Fix ingress updating for session-cookie-* annotation changes
2019-02-19 15:14:21 -08:00
c180a0998b
Fix session-cookie-* annotation reloading
2019-02-19 17:27:08 -05:00
ec04852526
Create custom annotation for satisfy "value"
2019-02-19 15:58:35 -05:00
201718ec0f
Merge pull request #3775 from kppullin/fix-l4-dns-resolve-failures
...
Fix DNS lookup failures in L4 services
2019-02-19 11:11:48 -08:00
3ac57097f6
Add 'waitForLuaSync' sleep in external name TCP test
2019-02-17 20:32:27 -08:00
f6aded2c51
Fix DNS failures in L4 services
2019-02-17 14:12:10 -08:00
b72dfa99d8
Merge pull request #3765 from ElvinEfendi/custom-http-error-bug-fix
...
simplify customhttperrors e2e test and add regression test and fix a bug
2019-02-14 06:51:33 -08:00
1959191cf3
simplify customhttperrors e2e test and add regression test
2019-02-14 08:11:18 -05:00
7e3304d4f9
Apply annotations to default location
2019-02-11 14:32:49 -05:00
9534f8bc43
Add debug tool to image
2019-02-08 11:25:04 -05:00
17e788b8e1
Merge pull request #3684 from aledbf/health
...
Replace Status port using a socket
2019-02-06 13:49:08 -08:00
34b0580225
Replace Status port using a socket
2019-02-06 18:00:10 -03:00
16dcace669
do not wait for endpoints that shouldn't exist
...
If there are no replicas defined, do not wait
around for the respective endpoints, since none
are expected.
2019-02-03 16:53:38 +01:00
018a1e4d94
respond with 503 when there are no endpoints
...
* related to:
* https://github.com/kubernetes/ingress-nginx/issues/3070
* https://github.com/kubernetes/ingress-nginx/issues/3335
* add a 503 test
* test a service that starts out empty
(a.k.a. ingress-nginx controller (re-)start)
* test scaling up (should route traffic accordingly)
* test scaling down to empty service
* use custom deployments for scaling test.
* provide a fix by updating the lua table (cache) of the configured backends
to unset the backend if there are no endpoints available.
2019-02-03 11:43:47 +01:00
de2a1ece6d
add header-value annotation
...
add new annotation (header-value)
parse it and propogate to lua script
alter balancer rule to include it into the canary routing logic
add e2e test to validate fallback for canary-by-header-value
add description of canary-by-header-value to documentation
2019-01-30 23:23:44 +02:00
ca74960905
Fix --disable-catch-all
2019-01-25 14:53:55 -05:00
1db9c91af4
Merge pull request #3363 from skeeey/master
...
Document for cookie expires annotation
2019-01-14 07:52:28 -08:00
7aa5834948
add cookie expires document and fix a flaw for session-cookie-expires
2019-01-11 15:35:39 +08:00
0db09f425d
Refactor e2e tls helper
2019-01-10 20:59:49 -03:00
a3bcbeb3d2
Add support for redirect https to https when from-to-www-redirect is defined
2019-01-10 20:59:49 -03:00
b433108ead
Merge pull request #3634 from Shopify/hyphen-in-canary-by-cookie
...
canary by cookie should support hypen in cookie name
2019-01-08 11:00:49 -08:00
ba7b542d78
canary by cookie should support hypen in cookie name
2019-01-08 13:15:02 -05:00
3fa8395f7f
Fix a bug in Ingress update handler
2019-01-08 09:28:42 -05:00
8f57f9578d
Merge pull request #3586 from Shopify/disable-catch-all
...
Add --disable-catch-all option to disable catch-all server
2019-01-07 07:16:26 -08:00
60b983503b
Consistent hashing to a subset of nodes. It works like consistent hash,
...
but instead of mapping to a single node, we map to a subset of nodes.
2019-01-03 01:32:52 -03:00
29118750be
Merge pull request #3342 from aledbf/allowPrivilegeEscalation
...
Allow privilege escalation
2019-01-02 17:49:39 -08:00
71cc6df74f
Merge pull request #3174 from Shopify/rewrite-regex
...
Generalize Rewrite Block Creation and Deprecate AddBaseUrl (not backwards compatible)
2019-01-02 12:30:18 -08:00
09e2466671
Add support to run e2e tests serially
2019-01-02 15:47:26 -03:00
a73dac2c0b
Fix proxy_host variable configuration
2019-01-02 15:31:27 -03:00
382049a0bf
Adds support for HTTP2 Push Preload annotation
...
update test for backendprotocols
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Adds support for HTTP2 Push Preload annotation
2018-12-24 17:13:25 -02:00
1109db2d09
Add e2e test
2018-12-21 19:30:34 -03:00
9be174738d
Add allowPrivilegeEscalation
2018-12-21 19:30:19 -03:00
1678d99a03
Add --disable-catch-all option to disable catch-all server
2018-12-21 13:22:26 -05:00
63b01370e4
Merge pull request #3548 from breunigs/integration-test-graceful-shutdown-clean
...
e2e test to ensure graceful shutdown does not lose requests
2018-12-21 06:33:27 -08:00
17d4b2c64c
fix dind-cluster executable path
2018-12-20 16:27:42 +04:00
ee3a8fe581
Merge pull request #3505 from Shopify/watch-pod-lua
...
Update lua configuration_data when number of controller pod change
2018-12-17 00:10:30 -08:00
f90881b367
Update lua configuration_data when number of controller pod change
2018-12-14 13:34:54 -05:00
67654a6fd5
Generalize Rewrite Block Creation
2018-12-13 13:02:05 -05:00
571bcfc433
e2e test to ensure graceful shutdown does not lose requests (see #3533 #3536 )
2018-12-11 11:37:19 +01:00
d5840a4071
make canary ingresses independent of the order they were applied
2018-12-10 13:17:05 -05:00
af460f7e15
Fix a bug with Canary becoming main server
2018-12-06 11:04:32 -05:00
5de991bb5b
{tcp,udp}-services cm appear twice
2018-12-05 09:15:51 -08:00
68f344233b
Fix lint issues
2018-12-05 13:28:28 -03:00
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
fdeeac3606
Wait for the right number of endpoints ( #3497 )
2018-11-30 20:17:18 -03:00
c3ff68e9ca
Adjust default timeout for e2e tests ( #3495 )
2018-11-30 18:55:53 -03:00
Kubernetes Prow Robot
Elvin Efendi
Gabor Lekeny
Manuel Alejandro de Brito Fontes
tals
Jeroen Schutrup
Fernando Diaz
Charle Demers
Moritz Johner
E. Stuart Hicks
Michael Stramel
Nick Novitski
okryvoshapka-connyun
Anthony Ho
Alex Kursell
Gregor Noczinski
Per Bernhardt
Per Bernhardt
Mikhail Marchenko
jasongwartz
Jim Zhang
Kevin Pullin
Tim Reddehase
Tim Reddehase
minherz
liuwei
Maxime Ginters
Diego Woitasen
Anish Ramasekar
Zenara Daley
Stefan Breunig
Conor Landry
Joshua Mervine