Commit Graph

6409 Commits

Author SHA1 Message Date
Ricardo Katz 3def835a6a
Jail/chroot nginx process inside controller container (#8337)
* Initial work on chrooting nginx process

* More improvements in chroot

* Fix charts and some file locations

* Fix symlink on non chrooted container

* fix psp test

* Add e2e tests to chroot image

* Fix logger

* Add internal logger in controller

* Fix overlay for chrooted tests

* Fix tests

* fix boilerplates

* Fix unittest to point to the right pid

* Fix PR review
2022-04-08 21:48:04 -07:00
Gabor Lekeny 83ce21b4dd
Add keepalive support for auth requests (#8219)
* Add keepalive support for auth requests

* Fix typo

* Address PR comments

* Log warning when auth-url contains variable in its host:port
* Generate upstream name without replacing dots to underscores in server name
* Add comment in the nginx template when the keepalive upstream block is referenced

* Workaround for auth_request module ignores keepalive in upstream block

* The `auth_request` module does not support HTTP keepalives in upstream block:
  https://trac.nginx.org/nginx/ticket/1579
* As a workaround we use ngx.location.capture but unfortunately it does not
  support HTTP/2 so `use-http2` configuration parameter is needed.

* Handle PR comments

* Address PR comments

* Handle invalid values for int parameters

* Handle PR comments

* Fix e2e test
2022-04-08 20:22:04 -07:00
Mathieu Parent 5e322f79a1
Fix suggested annotation-value-word-blocklist (#8446)
Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
2022-04-08 20:14:04 -07:00
陳傑夫 c8ed1f1d7a
typo fixing (#8447) 2022-04-08 09:48:42 -07:00
Francisco Robles Martín f5b212df30
replace deprecated topology key in example with current one (#8444)
Signed-off-by: Francisco Robles Martín <f.robles.martin@pm.me>
2022-04-08 01:36:42 -07:00
dependabot[bot] 02ccd22616
Bump github.com/prometheus/common from 0.32.1 to 0.33.0 (#8426)
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.32.1 to 0.33.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.32.1...v0.33.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-07 09:34:00 -07:00
Ricardo Katz 43a5b7a52d
Add dependency review enforcement (#8443) 2022-04-07 09:31:58 -07:00
Josh Soref c6a8ad9a65
Darwin arm64 (#8399)
* Use sed instead of gnu find flags

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Support building linux/amd64 on darin/arm64

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Upgrade awesome_bot to dkhamsing/awesome_bot:1.20.0

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Favor find -prune for vendor

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Skip golang modcache folder

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Favor find -prune for changelog

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Ignore Changelogs of any case

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Fix service-l7 link

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Fix route53-mapper link

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update rootfs contents description

The auxiliary scripts were removed after:
ab8349008a/rootfs/ingress-controller

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update paths for modsecurity

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update paths for modsecurity_snippet

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update toc for 20190815-zone-aware-routing.md

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use Internet Archive for datapath.io blog entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use Internet Archive for cloudflare.com help center entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use https for nginx.org

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
2022-04-06 13:46:26 -07:00
Kundan Kumar abdece6e80
kubectl-plugin code overview info (#8405) 2022-04-03 14:04:10 -07:00
James Strong 59c6c058fe
fix change log changes list (#8421) 2022-04-02 17:16:09 -07:00
James Strong ad47d49216
force helm release to artifact hub (#8417)
* force helm release to artifact hub

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update releaser version

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 17:14:13 -03:00
James Strong ac3b86b2c3
release 1.1.3 details (#8411)
* release 1.1.3 details
fix the readme with right sha and version
remove helm label
fix issue 8329
fix the 1.20 service after the fix for ipv6
udpate readme and change for patches

* update helm doc

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 09:14:46 -07:00
James Strong 2ae0fb846b
Merge pull request #8415 from longwuyuan/base-images
base img update for e2e-test-runner & opentelemetry
2022-04-01 10:34:27 -04:00
LongWuYuan b9f50e691d base img update for e2e-test-runner & opentelemetry 2022-04-01 17:07:08 +05:30
David Jansen 230d8e6792
doc: fix deployment manifest example (#8407) 2022-03-31 18:18:38 -07:00
James Strong 7517b7ecf7
Merge pull request #8396 from dmathieu/mkdir-modules-mount
Fix OpenTelemetry build
2022-03-31 19:55:53 -04:00
James Strong 9d3a285f19
Merge pull request #8410 from strongjz/build-1.1.3
update tag to 1.1.3 to kick off controller-v1.1.3 build
2022-03-31 17:13:34 -04:00
James Strong e5b028a75d
update tag to 1.1.3 to kick off controller-v1.1.3 build
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-31 17:08:30 -04:00
Aditya Kamath f1cb2b73ca
update nginx base image to new alpine 3.14.4 build - try 2 (#8409)
* update nginx base image to new alpine 3.14.4 build

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update test image

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Update nginx base image

Signed-off-by: Aditya Kamath <theunrealgeek@gmail.com>

Co-authored-by: James Strong <strong.james.e@gmail.com>
2022-03-31 13:43:04 -07:00
Long Wu Yuan 87979099fd
set execute bit on entrypoint.sh (#8404) 2022-03-31 04:25:00 -07:00
Aditya Kamath 5402d35663
Add execute permissions to nginx image entrypoint.sh (#8403) 2022-03-31 03:37:01 -07:00
Damien Mathieu 79aa43540c fix build and upgrade otel to latest version 2022-03-29 12:07:43 +02:00
Damien Mathieu 244d1dbcb0 ensure module directory exists before moving the library there 2022-03-29 10:28:48 +02:00
James Strong 9960efe1e9
remove (#8394)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-28 07:49:23 -07:00
Tomoyuki KOYAMA 08fcd942c7
fix code highlight (#8392) 2022-03-28 02:29:23 -07:00
James Strong 5298448865
downgrade to 3.14.4 and fix tag (#8386)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-25 10:21:58 -07:00
dependabot[bot] b6c7061e07
Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#8360)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.0...v1.7.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-23 12:45:20 -07:00
Tim Borkhodoev f192ed0ed7
bump luarocks to 3.8.0 (#8379) 2022-03-22 18:53:58 -07:00
Nishant Jain 5c07c862e1
Removed s390x, linux/arm platform as docker build was crashing (#8121)
Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
2022-03-22 04:23:44 -07:00
Long Wu Yuan d27d7c20b4
Updated semver in install docs URLs (#8368) 2022-03-21 15:46:47 -07:00
James Strong e51c15160e
fix indent on env (#8352)
* fix indent on env

* revert tag to      - TAG=$_GIT_TAG
2022-03-18 10:04:41 -07:00
Ana Claudia Riekstin 3f19fd646f
bump Alpine image in Dockerfile (#8350) 2022-03-17 18:19:40 -07:00
James Strong 40bb6c3d2e
update cloud build (#8349) 2022-03-17 12:02:41 -07:00
James Strong 9602fc193d
Merge pull request #8346 from strongjz/update-builder
update cloud build image
2022-03-16 15:40:39 -04:00
James Strong 569b3c2a70
update cloud build image
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 15:32:45 -04:00
James Strong a1853be930
Merge pull request #8344 from strongjz/tag-1.1.3
update tag and force a new build
2022-03-16 15:15:08 -04:00
James Strong 5c47803d0f
fix the cloud build
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 15:13:24 -04:00
James Strong 0e2447ed0e
add the date per request
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 15:07:38 -04:00
James Strong 952a6dc22c
control tag with short sha
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 14:52:06 -04:00
James Strong 2fefd714bd
update tag and force a new build
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 12:57:48 -04:00
James Strong 8c16e754b0
Merge pull request #8343 from strongjz/alpine-3.15
Bump alpine base to 3.15
2022-03-16 12:27:14 -04:00
James Strong 1953efa9d8
Bumping alpine base to 3.15 2022-03-16 11:52:38 -04:00
Ana Claudia Riekstin ba7f295538
Fix 50% split between canary and mainline tests (#8315)
* fix 50% canary test

* fix past tense

* after code review

* revert go.sum and go.mod

* run gofmt
2022-03-16 06:25:49 -07:00
sskserk 01b92b8b3a
Nginx v1.19.10 (#8307) 2022-03-14 08:55:57 -07:00
thomasbruggink 9180ef1ee4
Add the shareProcessNamespace as a configurable setting. (#8287) 2022-03-14 08:51:57 -07:00
Rodrigo Riccitelli Vieira 1fb0aea2c5
Update monitoring.md (#8324)
Added missing repo on "helm upgrade" command
2022-03-14 08:47:58 -07:00
Naveen 974d038c2a
Pinned GitHub workflows by SHA (#8334)
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for some of the actions. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

Dependabot can upgrade pinned version of actions.
2022-03-14 08:29:58 -07:00
Daniel Lim e1eff78160
Names cannot contain _ (underscore)! So I changed it to -. (#8300)
* The name can't use _(underscore)! So fix it!

The name can't use _(underscore)! So fix it!

* Fix configMap name can't use _(underscore)

Fix configMap name can't use _(underscore)
2022-03-09 06:56:13 -08:00
hongkunyoo 5a9fe30a5d
Missing annotations (#8288)
Not quite sure but It seems that `nginx.ingress.kubernetes.io/canary-by-header` is missing.
2022-03-09 06:54:13 -08:00
James Strong a43346d975
leaving it the git tag (#8311)
fixing the git tag for the image version, it is what it is .
2022-03-07 09:38:53 -08:00