c9d5b21a65
fix: discover mounted geoip db files ( #7228 )
...
* fix: discover mounted geoip db files
* add test
* fix runtime reload of config.MaxmindEditionFiles
* add e2e test
* log missing geoip2 db
2021-08-10 11:24:39 -07:00
45995525e7
Retry to download maxmind DB if it fails ( #7242 )
...
* Retry to download maxmind DB if it fails.
Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>
* Add retries count arg, move retry logic into DownloadGeoLite2DB function
Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>
* Reorder parameters in DownloadGeoLite2DB
Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>
* Remove hardcoded value
Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>
2021-08-10 11:24:39 -07:00
f5c80783bf
[Cherry Pick] - Add configuration to disable external name service feature ( #7314 ) ( #7321 )
...
* Add configuration to disable external name service feature (#7314 )
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Fix CI files
2021-07-05 21:50:18 -07:00
ef714ae52f
Allow multiple publish status addresses
2021-02-26 16:57:54 -05:00
54b13bd216
Add flag to allow setting a shutdown grace period
2021-01-27 14:09:04 +01:00
b55f4371e3
Add GeoIP Local mirror support
2020-12-28 17:37:26 +10:00
108637bb1c
Migrate to structured logging (klog)
2020-09-27 18:59:57 -03:00
9612180f6e
reject annotations with default prefix in the case of an override
2020-09-10 09:16:44 -04:00
903e511b9d
fix: log warning if empty ingress class is monitored. Improve docs related to --ingress-class
2020-08-21 09:25:43 +02:00
cb86c5698c
Migrate to klog v2
2020-08-08 21:01:03 -04:00
a3f2be6b90
Fixup docs for the ingress-class flag.
...
According to this issue, there is no way to handle all ingress classes.
https://github.com/kubernetes/ingress-nginx/issues/3101
2020-06-26 13:12:48 -04:00
53a6b0fd3b
Configurable metrics max batch size
2020-06-20 15:58:14 +09:00
9c6873a55d
Remove deprecated flags and update docs
2020-04-12 10:07:33 -04:00
04ef782c57
Migrate ingress.class annotation to new IngressClassName field
2020-03-31 12:20:01 -03:00
78576a9bbc
Add Maxmind Editions support
2020-03-19 19:36:10 +07:00
2c5819e1b3
Add flag to allow custom ingress status update intervals ( #5050 )
2020-02-10 16:52:50 -03:00
74944b99e9
Enable download of GeoLite2 databases ( #4896 )
2020-01-08 19:46:43 -03:00
19d596b72b
Allow custom CA certificate when flag --api-server is specified ( #4807 )
2019-12-05 19:12:54 -03:00
d5d2b4037c
Fix ports collision when hostNetwork=true ( #4617 )
2019-09-28 17:30:57 -03:00
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
3d7a09347d
Apply fixes suggested by staticcheck
2019-07-08 16:18:52 -04:00
8807db9748
Check and complete intermediate SSL certificates
2019-07-04 19:13:21 -04:00
b28577a4bf
Fix: fillout missing health check timeout on health check.
2019-06-13 21:15:50 +08:00
1cd17cd12c
Implement a validation webhook
...
In case some ingress have a syntax error in the snippet configuration,
the freshly generated configuration will not be reloaded to prevent tearing down existing rules.
Although, once inserted, this configuration is preventing from any other valid configuration to be inserted as it remains in the ingresses of the cluster.
To solve this problem, implement an optional validation webhook that simulates the addition of the ingress to be added together with the rest of ingresses.
In case the generated configuration is not validated by nginx, deny the insertion of the ingress.
In case certificates are mounted using kubernetes secrets, when those
changes, keys are automatically updated in the container volume, and the
controller reloads it using the filewatcher.
Related changes:
- Update vendors
- Extract useful functions to check configuration with an additional ingress
- Update documentation for validating webhook
- Add validating webhook examples
- Add a metric for each syntax check success and errors
- Add more certificate generation examples
2019-04-18 19:07:04 +02:00
1d59e4f1fe
enable dynamic SSL mode by default
2019-03-17 14:58:06 -04:00
d8fe2d992b
Remove useless nodeip call and deprecate --force-namespace-isolation
2019-03-11 18:19:13 -04:00
34b0580225
Replace Status port using a socket
2019-02-06 18:00:10 -03:00
3483eb375e
Remove flag sort-backends
2019-01-11 14:43:02 -03:00
8f57f9578d
Merge pull request #3586 from Shopify/disable-catch-all
...
Add --disable-catch-all option to disable catch-all server
2019-01-07 07:16:26 -08:00
1678d99a03
Add --disable-catch-all option to disable catch-all server
2018-12-21 13:22:26 -05:00
f33a2090dd
Add a flag to make per-host metrics optional
...
When serving many hosts from one nginx, the metrics may become too
numerous for Prometheus. Add a flag to disable the host label, so
that metrics are totalled across all hosts.
2018-12-21 17:31:54 +00:00
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
06d33c16b5
Allow to disable NGINX metrics
2018-12-05 10:14:35 -03:00
168f30d1ec
Revert removal of support for TCP and UDP services
2018-11-16 13:48:47 -03:00
9f2a0b6363
Add healthcheck timeout as CLA
2018-10-24 16:02:28 -04:00
b276800d2c
remote the command args of enable-dynamic-configuration
2018-10-16 10:52:19 +08:00
74c2f93de6
Only support dynamic configuration
2018-10-09 22:05:45 -03:00
0971f8443f
Flags publish-service and publish-status-address are mutually exclusive
2018-10-08 15:00:38 -03:00
44bdc7eb59
Remove support for TCP and UDP services
2018-10-07 10:53:37 -03:00
b3a22f7fc0
do not require --default-backend-service
2018-09-25 21:14:28 -04:00
e73510d818
fix some typos
...
Signed-off-by: Lei Gong <lgong@alauda.io>
2018-09-08 21:49:04 +08:00
7faf089082
Add dynamic certificate feature to controller
2018-08-16 20:19:33 -04:00
63aef5d652
Fixed typo in flags.go
...
ssl-passthrough-proxy-port
2018-08-13 18:14:33 +09:00
8a67ace5c3
enable dynamic backend configuration by default
2018-07-26 15:16:06 -04:00
130866b51c
Proofreading
2018-06-25 00:04:43 +02:00
80f77b7a22
Disable resync period
2018-06-13 11:28:17 -04:00
a74c34dbf1
Proofread cmd package and update flags description
2018-06-11 13:15:45 +02:00
631edb30d9
Update documentation for sort-backends flag
2018-06-02 17:36:08 -04:00
d2d7d677a0
Correct some info in flags.go
...
Correct some info in flags.go
2018-04-15 23:49:00 +08:00
1be1f658b4
disable lua for arch s390x and ppc64le
...
LuaJIT is not available for s390x and ppc64le, disable the lua part in nginx.tmpl on these platform.
2018-04-12 08:30:56 +08:00
Tom Hayward
Sergey Shakuto
Ricardo Katz
AnaClaudia
Björn Carlsson
Maxim Pogozhiy
Manuel Alejandro de Brito Fontes
Matthew Silverman
Tore Lønøy
Mason Staugler
Bo0km4n
Colstuwjx
Thibault Jamet
Elvin Efendi
Alex Kursell
Kubernetes Prow Robot
Maxime Ginters
Bryan Boreham
Zenara Daley
Hui Chen
Lei Gong
Henry Tran
Han Sol Park
Antoine Cotten
AdamDang
oilbeater