9af574a234
Remove the_real_ip variable
2019-09-12 20:01:33 -03:00
ce3e3d51c3
WIP Remove nginx unix sockets ( #4531 )
...
* Remove nginx unix sockets
* Use an emptyDir volume for /tmp in PSP e2e tests
2019-09-08 18:14:54 -03:00
c2935ca35c
Refactor health checks and wait until NGINX process ends
2019-09-01 15:31:27 -04:00
d8bd8c5619
Add nginx proxy_max_temp_file_size configuration option
2019-08-15 13:47:42 -04:00
0b375989f3
Merge pull request #4412 from Shopify/ssl-early-data
...
Add nginx ssl_early_data option support
2019-08-15 10:08:35 -07:00
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
4a9b02bc03
Remove dynamic TLS records
2019-08-08 15:52:56 -04:00
a2e667c082
lua shared dict from cm
...
lua shared dict teml test and update func sign
lua shared dict cm test
lua shared dict integration test
lua shared dict add cm parsing
lua shared dict change test header
2019-08-08 12:44:11 +03:00
7219130da4
Add nginx ssl_early_data option support
2019-08-07 16:04:09 -04:00
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
...
feat: auth-req caching
2019-07-17 12:06:12 -07:00
23504db770
feat: auth-req caching
...
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.
[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
3b0c523e49
added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends
2019-07-08 14:32:00 -04:00
7c297e001a
Merge pull request #4246 from ElvinEfendi/proxy-alternative-upstream-name
...
introduce proxy_alternative_upstream_name Nginx var
2019-07-04 19:20:35 -07:00
8b208cac93
introduce proxy_alternative_upstream_name Nginx var to differentiate canary requests
2019-07-04 19:43:20 -04:00
8807db9748
Check and complete intermediate SSL certificates
2019-07-04 19:13:21 -04:00
e76418cd99
Merge pull request #4162 from stramel/patch-1
...
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
686f2310e4
Add "text/javascript" to compressible MIME types
...
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages , servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
c4ced9d694
fix source file mods
2019-06-06 10:47:08 -04:00
31ffad8fa1
UPT: Add variable to define custom sampler host and port, add commituser
2019-05-21 12:34:38 +08:00
4811168d2a
Fixed typos
2019-05-06 09:04:12 +02:00
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
8b3702c829
Enable access log for default backend
...
disable log on default_server
2019-02-26 11:14:31 +03:00
6305e1d152
fix: run gofmt
2019-02-22 15:04:19 +08:00
dc63e5d185
fix: rename proxy-buffer-number to proxy-buffers-number
2019-02-22 10:21:17 +08:00
c92d29d462
feat: configurable proxy buffer number
2019-02-20 18:05:09 +08:00
a29c27ed4c
Datadog Opentracing support - part 2
...
This commit is part 2 of 2, adding configuration of the
Datadog Opentracing module to the controller.
Fixes half of #3752
2019-02-15 15:20:10 -05:00
adc128711b
delete confusing CustomErrors attribute to make things more explicit
2019-02-13 22:41:02 -05:00
17e788b8e1
Merge pull request #3684 from aledbf/health
...
Replace Status port using a socket
2019-02-06 13:49:08 -08:00
34b0580225
Replace Status port using a socket
2019-02-06 18:00:10 -03:00
5dee6af957
add params for access log
2019-01-26 21:42:11 +03:00
b10b60f9ae
Revert max-worker-connections default value ( #3660 )
2019-01-13 10:53:18 -03:00
a3bcbeb3d2
Add support for redirect https to https when from-to-www-redirect is defined
2019-01-10 20:59:49 -03:00
edd87fbae3
add limit connection status code
...
add default conn status code
add missing colon
add limit connection status code
2019-01-09 19:31:10 +02:00
bf7b5ebd81
Add an option to automatically set worker_connections based on worker_rlimit_nofile
2018-12-27 18:36:19 +01:00
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
06d33c16b5
Allow to disable NGINX metrics
2018-12-05 10:14:35 -03:00
e93763da6a
delete unused LoadBalanceAlgorithm
2018-11-28 14:49:37 +04:00
710ea8c76f
Merge pull request #3333 from Shopify/dont-trust-by-default
...
breaking change: by default do not trust any client
2018-11-27 05:12:48 -08:00
168f30d1ec
Revert removal of support for TCP and UDP services
2018-11-16 13:48:47 -03:00
5f3b48e16d
breaking change: do not trust x-forwarded-* headers by default
2018-11-13 10:35:59 +04:00
d2b1d37ee3
Modify the wrong function name
2018-11-08 15:17:40 -05:00
71ebe1cba5
Code linting
2018-10-30 20:46:48 -03:00
c27c57dc8b
Add configuration for geoip2 module
...
Based on closed PRs #2551 , #2755
2018-10-29 21:25:23 +01:00
12955a4a1b
Allow Ability to Configure Upstream Keepalive
...
Allows Upstream Keepalive values like keepalive_timeout and
keepalive_requests to be configured via ConfigMap.
Fixes #3099
2018-10-11 20:46:42 -05:00
3038da8719
Merge pull request #3215 from hchenxa/hchenxa
...
align opentracing user-guide with nginx configmap configuration
2018-10-10 06:56:15 -07:00
f8052385f9
aline opentracing user-guide with nginx configmap configuration
2018-10-10 11:25:53 +08:00
74c2f93de6
Only support dynamic configuration
2018-10-09 22:05:45 -03:00
44bdc7eb59
Remove support for TCP and UDP services
2018-10-07 10:53:37 -03:00
7212d0081b
Provide possibility to block CIDRs, User-Agents and Referers globally
2018-09-25 14:16:20 +03:00
Manuel Alejandro de Brito Fontes
Maxime Ginters
Kubernetes Prow Robot
tals
Moritz Johner
E. Stuart Hicks
Elvin Efendi
Michael Stramel
reynaldi.wijaya
okryvoshapka-connyun
Alex Kursell
Mikhail Marchenko
Jim Zhang
Alan J Castonguay
Rustam Zagirov
Shai Katz
ramnes
xichengliudui
Maximilian Bode
Fernando Diaz
Hui Chen
Pavel Sinkevych