Commit Graph

60 Commits

Author SHA1 Message Date
mooncake b3d789edca Fix typos: reqrite -> rewrite
Signed-off-by: mooncake <xcoder@tenxcloud.com>
2018-11-09 00:54:51 +08:00
Fernando Diaz 5195600841 Allows ModSecurity to be configured per location
The following annotations will be added:

- enable-modsecurity
- enable-owasp-core-rules
- modsecurity-transaction-id

Fixes #3167
2018-11-06 22:24:31 -06:00
k8s-ci-robot 17cad51e47
Merge pull request #3341 from Shopify/canary_upstream
Add canary annotation and alternative backends for traffic shaping
2018-11-06 12:22:16 -08:00
Conor Landry 412cd70d3a implement canary annotation and alternative backends
Adds the ability to create alternative backends. Alternative backends enable
traffic shaping by sharing a single location but routing to different
backends depending on the TrafficShapingPolicy defined by AlternativeBackends.

When the list of upstreams and servers are retrieved, we then call
mergeAlternativeBackends which iterates through the paths of every ingress
and checks if the backend supporting the path is a AlternativeBackend. If
so, we then iterate through the map of servers and find the real backend
that the AlternativeBackend should fall under. Once found, the
AlternativeBackend is embedded in the list of VirtualBackends for the real
backend.

If no matching real backend for a AlternativeBackend is found, then the
AlternativeBackend is deleted as it cannot be backed by any server.
2018-11-06 13:13:14 -05:00
k8s-ci-robot 265f96bf14
Merge pull request #3344 from ecosia/jg-customerrors-per-ingress
Adds CustomHTTPErrors ingress annotation and test
2018-11-06 09:21:49 -08:00
jasongwartz 0ebf0354cb Adds CustomHTTPErrors ingress annotation and test
Adds per-server/location error-catch functionality to nginx template

Adds documentation

Reduces template duplication with helper function for CUSTOM_ERRORS data

Updates documentation

Adds e2e test for customerrors

Removes AllCustomHTTPErrors, replaces with template function with deduplication and adds e2e test of deduplication

Fixes copy-paste error in test, adds additional test cases

Reverts noop change in controller.go (unused now)
2018-11-06 16:47:52 +01:00
Adnan Baruni b511333130 add support for auth-snippet annotation
add test for new auth-snippet annotation

document auth-snippet annotation

add e2e test for auth-snippet annotation

add log warning and update documentation
2018-11-05 16:02:29 -06:00
liuwei c74e59fa4c Use second as cookie expires unit 2018-11-02 17:05:38 +08:00
liuwei ce6e564f82 merge from master 2018-11-02 13:13:24 +08:00
Manuel Alejandro de Brito Fontes 71ebe1cba5 Code linting 2018-10-30 20:46:48 -03:00
Manuel Alejandro de Brito Fontes c9668dd40b
Fix e2e tests 2018-10-30 13:35:31 -03:00
liuwei ad57c76b73 Support cookie expires 2018-10-29 15:21:10 +08:00
Desmond Ho bf03046a80 UPT: updated e2e test and default true for process-multipart-body annotation 2018-10-25 14:17:38 +08:00
Desmond Ho bab521e81a UPT: align waf options 2018-10-20 12:46:39 +08:00
Desmond Ho 04a89ce234 UPT: annotation enhancement for resty-lua-waf 2018-10-20 12:09:38 +08:00
Elvin Efendi 78f12c25c5 delete upstream healthcheck annotation 2018-10-09 09:14:13 -04:00
Manuel Alejandro de Brito Fontes 859b298d42 Remove annotations grpc-backend and secure-backend already deprecated 2018-10-08 12:26:06 -03:00
Zenara Daley f29bdc3e8d Add 'use regex' annotation to toggle nginx regex location modifier 2018-10-01 13:54:11 -04:00
Fernando Diaz 2a990d2d2c Add e2e tests for CORS and more
Adds the missing e2e tests for Cross-Origin Resource Sharing(CORS).
This will include all the CORS annotations. Also adds more unit tests.
2018-09-01 16:14:52 -05:00
Manuel de Brito Fontes 7af93e03c7
Add annotation backend-protocol 2018-08-07 08:59:38 -04:00
Antoine Cotten 39966f48cd
Add e2e test for redirect annotations
Minor refactoring of parser and unit tests
2018-07-29 22:53:03 +02:00
Karl Stoney 09832557ed
Add permanent-redirect-code annotation 2018-07-29 11:50:16 +02:00
Manuel de Brito Fontes 63b38e1c21
Remove VTS from the ingress controller 2018-06-14 11:11:29 -04:00
Manuel de Brito Fontes 7ded31d7a8
Create file permission constants 2018-06-12 11:06:14 -04:00
ruicao ca039a1395 Typo fix: muthual autentication -> mutual authentication 2018-05-31 14:18:08 +08:00
Manuel de Brito Fontes 2023e56115
Fix default-backend annotation 2018-05-26 19:09:24 -04:00
Lorenzo Fontana c3b896dfbc
InfluxDB annotations e2e tests
Signed-off-by: Lorenzo Fontana <lo@linux.com>
2018-05-19 19:07:16 +02:00
Lorenzo Fontana 93be8db612
Annotations for the InfluxDB Module
Signed-off-by: Lorenzo Fontana <lo@linux.com>
2018-05-19 09:22:46 +02:00
JordanP c995031ffd Add annotation to enable rewrite logs in a location 2018-04-27 17:50:14 +02:00
Manuel de Brito Fontes 9bf553559c Apply gometalinter suggestions 2018-04-25 18:53:49 -03:00
Elvin Efendi d6eb44376d run lua-resty-waf in different modes (#2317)
* run lua-resty-waf in different modes

* update docs
2018-04-09 09:19:13 -03:00
Elvin Efendi bad8295a42 extra waf rules per ingress (#2315)
* extra waf rules per ingress

* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules

* regenerate internal/file/bindata.go
2018-04-09 07:14:30 -03:00
Elvin Efendi 16faf309ca annotation to ignore given list of WAF rulesets (#2314) 2018-04-08 22:55:23 -03:00
Elvin Efendi a6fe800a47 lua-resty-waf controller (#2304) 2018-04-08 17:37:13 -03:00
maxlaverse 8575769781 Make proxy_next_upstream_tries configurable (#2232)
* Make proxy_next_upstream_tries configurable

* Code generation
2018-03-22 08:12:36 -03:00
Manuel Alejandro de Brito Fontes adf12fced1
Add support for gRPC (#2223)
* Update nginx to 1.13.10 and enable gRPC

* Add support for grpc
2018-03-22 00:38:47 -03:00
Oilbeater ebcdfade8e fix wrong json tag (#2193)
json tags are case sensitive when encode, change omitEmpty to omitempty
2018-03-12 03:36:35 -07:00
Elvin Efendi 36cce00fdd configuring load balancing per ingress (#2167)
* configure load balancing through a ingress annotation

* update docs
2018-03-09 13:09:41 -08:00
Antoine Cotten 5ba0f4ea18 Remove ProxyPassParams setting (#2185)
This reverts commit c0fecd5bd7
2018-03-07 16:40:22 -08:00
Manuel Alejandro de Brito Fontes 3c67976969
In case of TLS errors do not allow traffic (#2146) 2018-02-25 17:20:14 -03:00
Manuel Alejandro de Brito Fontes 0dee303ac2
Add annotation to disable logs in a location (#2144) 2018-02-25 11:38:54 -03:00
Anish Ramasekar d7ef6b3fc7 Add support for enabling ssl_ciphers per host (#2006)
* Add support for adding ssl_ciphers

* Add documentation
2018-01-31 08:53:07 -08:00
Qiu Jian 951a704cec Add connection-proxy-header annotation (#1999)
This is the override the default connection header
2018-01-29 22:29:03 -06:00
Anish Ramasekar b020686599 Add support to enable/disable proxy buffering (#1998)
* Enable proxy buffering using configmap and annotation

* add documentation
2018-01-29 08:43:55 -06:00
Anish Ramasekar 86889532aa fix var checked (#1997) 2018-01-28 20:23:25 -06:00
Fernando Diaz d1ae7ff29c Enable Customization of Auth Request Redirect (#1993)
Adds the 'nginx.ingress.kubernetes.io/auth-request-redirect'
annotation, which allows the customization of the
'X-Auth-Request-Redirect' Header. Fixes: #1979
2018-01-27 21:32:08 -03:00
Manuel de Brito Fontes 12c8ea721d When a secret is updated read ingress annotations (again) 2018-01-23 19:34:33 -03:00
Márk Sági-Kazár 313fdd2d1a Add CORS max age annotation (#1888)
Add cors-max-age annotation
2018-01-09 09:19:42 -02:00
Daniel (Shijun) Qian d744c2eba7 Fix annotation describe (#1819) 2017-12-13 11:29:41 -06:00
Max Laverse ce99a5e31e Add missing boilerplate 2017-12-06 22:13:39 +01:00