4f23049374
Fix minor typos ( #11935 )
2024-09-06 15:59:43 +01:00
21cd966d1c
Remove global-rate-limit feature ( #11851 )
2024-08-25 21:03:29 +01:00
3bec99ecfc
Remove 3rd party lua plugin support ( #11821 )
2024-08-21 14:54:29 +01:00
f85c3866d8
add new summary metric: ingress_header_seconds ( #8726 )
2022-06-22 12:59:43 -07:00
3def835a6a
Jail/chroot nginx process inside controller container ( #8337 )
...
* Initial work on chrooting nginx process
* More improvements in chroot
* Fix charts and some file locations
* Fix symlink on non chrooted container
* fix psp test
* Add e2e tests to chroot image
* Fix logger
* Add internal logger in controller
* Fix overlay for chrooted tests
* Fix tests
* fix boilerplates
* Fix unittest to point to the right pid
* Fix PR review
2022-04-08 21:48:04 -07:00
e625c2507a
Fix chashsubset backend with canary ( #7235 )
...
* Fix chashsubset backend with canary
* use floor for buckets calculation to remove hot spot
* Remove testing code
2021-12-29 16:14:50 -08:00
5cff197bc5
add canary-weight-total annotation ( #6338 )
2021-12-07 08:40:00 -08:00
6163231ef6
fix to really execute plugins in order ( #8018 )
2021-12-07 08:01:02 -08:00
ddbb0be0a0
add canary backend name for requests metrics ( #7696 )
2021-09-26 10:54:22 -07:00
f2e743f561
feat: add session-cookie-secure annotation ( #7399 )
2021-09-01 15:23:40 -07:00
f222c752be
Enable session affinity for canaries ( #7371 )
2021-07-29 14:23:19 -07:00
e0dece48f7
Add Global Rate Limiting support
2021-01-04 17:47:07 -05:00
2cff9fa41d
generalize cidr parsing and improve lua tests
2021-01-04 15:01:55 -05:00
b022ea8c40
Merge pull request #6639 from spacewander/use_last_for_ewma
...
Don't pick tried endpoint & count the latest in ewma balancer
2020-12-23 18:50:27 -08:00
06b200fa4b
Update for review
2020-12-24 09:07:12 +08:00
7732aec3c4
Merge pull request #6600 from nic-6443/backend-sync-503-fix
...
Bugfix: some requests fail with 503 when nginx reload
2020-12-23 09:02:26 -08:00
8085304cb9
Separate the ExternalName backend from other backends in the process of synchronizing the backend, because the synchronization of the ExternalName backend requires dns resolution, so we should ensure that it does not affect the synchronization of the Non-ExternalName backend. After separation, in the init worker stage, we should immediately synchronize the Non-ExternalName backend, otherwise there will be some requests that fail with 503 because the balancer cannot be obtained in the rewrite stage.
2020-12-22 17:24:41 +08:00
e118ebc08a
Don't pick tried endpoint & count the latest in ewma balancer
...
fixes https://github.com/kubernetes/ingress-nginx/issues/6632
2020-12-18 19:21:51 +08:00
a8728f3d2c
Spelling
2020-12-15 16:10:48 -05:00
cc94a51cba
make sure canary attributes are reset on ewma backend sync
2020-12-11 09:38:58 -05:00
1e9650a0f9
fix flaky lua tests
2020-12-10 22:41:41 -05:00
16f970d8bb
Use was_not_called without check args match
2020-09-19 00:15:42 +08:00
724646bd73
Delete OCSP Response cache when certificate renewed
2020-09-18 14:30:18 +08:00
e9059eef01
fixed some typos
...
Signed-off-by: Frank Gadban <frankgad@outlook.de>
2020-07-21 22:02:23 +02:00
7ab0916c92
Resolve conflicts
2020-06-20 17:13:31 +09:00
53a6b0fd3b
Configurable metrics max batch size
2020-06-20 15:58:14 +09:00
bafbd4cccf
Enable lj-releng tool to lint lua code.
2020-06-09 18:01:35 +08:00
c035a144f8
Support the combination of nginx variables and text value for annotation upstream-hash-by.
2020-06-01 06:37:41 +08:00
1dab12fb81
Lua OCSP stapling
2020-04-16 21:29:16 -04:00
eb112ea06c
refactoring: use more specific var name
2020-03-21 21:23:24 -04:00
b2beeeab25
Add case for when user agent is nil
...
Add test for nil user agent
2020-02-16 21:07:45 -06:00
7c7a1b9c8b
Update samesite tests
2020-02-08 12:58:52 -07:00
1b523390bb
Add SameSite=None support and conditionally omit SameSite=None for backwards compatibility
2020-01-29 14:30:00 -07:00
a8c2c9c6bc
Remove todo from lua test ( #4894 )
2020-01-08 19:46:52 -03:00
5ce93d98c2
Fix lua test
2020-01-05 16:00:54 -03:00
6c92c80073
Fix sticky session for ingress without host
2020-01-02 16:52:49 -03:00
31227d61c2
Removing secure-verify-ca-secret support and writing an error log if that annotation is used in an Ingress definition
2019-10-18 10:58:57 +02:00
7fc442c7f1
update test cases
2019-10-14 08:14:35 -07:00
73e659f5fc
improve certificate configuration detection per request
2019-09-24 21:17:22 -04:00
8c64b12a96
refactor force ssl redirect logic
2019-09-24 14:57:52 -04:00
e392c8a8af
cleanup unused certificates
2019-09-24 14:16:03 -04:00
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode
...
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
bbcf3dc625
regression test for the issue fixed in #4543
2019-09-10 10:00:21 -04:00
880b3dc5f1
Fixed test findings.
2019-08-30 19:08:03 +02:00
881e352d68
Converted sticky session balancers into separate classes.
2019-08-30 18:07:24 +02:00
9170591185
Added new affinity mode for maximum session stickyness. Fixes kubernetes/ingress-nginx#4475
2019-08-30 11:40:29 +02:00
76c2063be8
Code Review changes. Remove duplicate tests.
2019-08-26 14:00:59 -05:00
1f8ab60e40
Adds Wilcard check for hostname. Adds wildcard hostname tests.
2019-08-26 14:00:44 -05:00
57db904c92
fix lua certificate handling tests
2019-08-26 13:05:05 -04:00
8def5ef7ca
Add support for multiple alias and remove duplication of SSL certificates ( #4472 )
2019-08-26 10:58:44 -04:00
Nathan Baulch
Ricardo Katz
Dmitry Bashkatov
Wei Wu
Yecheng Fu
Ana Claudia Riekstin
Léopold Jacquot
Vincent LE GOFF
wasker
Elvin Efendi
Kubernetes Prow Robot
spacewander
qianyong
Josh Soref
wenzong
Frank Gadban
Bo0km4n
agile6v
briankopp
Manuel Alejandro de Brito Fontes
Laszlo Janosi
Thomas Jackson
Alexander Maret-Huskinson
Zovin Khanmohammed