DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deploy GitHub Pages

Browse source
This commit is contained in:
k8s-ci-robot 2020-04-28 14:46:52 +00:00
parent 3c8b328ae5
commit a7d9114970
5 changed files with 59 additions and 58 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
search/search_index.json
View file

File diff suppressed because one or more lines are too long

98
sitemap.xml
View file

@ -1,199 +1,199 @@
<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url>
<loc>https://kubernetes.github.io/ingress-nginx/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/how-it-works/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/troubleshooting/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/kubectl-plugin/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/development/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/baremetal/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/rbac/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/upgrade/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/basic-usage/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/custom-template/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/log-format/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/cli-arguments/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/custom-errors/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/default-backend/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/exposing-tcp-udp-services/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/fcgi-services/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/ingress-path-matching/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/external-articles/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/miscellaneous/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/monitoring/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/multiple-ingress/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/tls/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/third-party-addons/modsecurity/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/third-party-addons/opentracing/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/PREREQUISITES/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/affinity/cookie/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/basic/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/client-certs/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/external-auth/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/oauth-external-auth/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/configuration-snippets/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-configuration/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-errors/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-headers/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/external-auth-headers/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/ssl-dh-param/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/sysctl/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/docker-registry/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/grpc/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/multi-tls/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/rewrite/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/static-ip/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/tls-termination/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url><url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/psp/</loc>
<lastmod>2020-04-27</lastmod>
<lastmod>2020-04-28</lastmod>
<changefreq>daily</changefreq>
</url>
</urlset>

BIN
sitemap.xml.gz
View file

Binary file not shown.

8
user-guide/nginx-configuration/configmap/index.html
View file

@ -3626,7 +3626,7 @@ Same for numbers, like "100".</p>
<tr>
<td align="left"><a href="#ssl-ciphers">ssl-ciphers</a></td>
<td align="left">string</td>
<td align="left">"ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256"</td>
<td align="left">"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"</td>
</tr>
<tr>
<td align="left"><a href="#ssl-ecdh-curve">ssl-ecdh-curve</a></td>
@ -3641,7 +3641,7 @@ Same for numbers, like "100".</p>
<tr>
<td align="left"><a href="#ssl-protocols">ssl-protocols</a></td>
<td align="left">string</td>
<td align="left">"TLSv1.2"</td>
<td align="left">"TLSv1.2 TLSv1.3"</td>
</tr>
<tr>
<td align="left"><a href="#ssl-session-cache">ssl-session-cache</a></td>
@ -4321,7 +4321,7 @@ The default of 0 means "max open files (system's limit) / <a href="#worker-proce
<h2 id="ssl-ciphers">ssl-ciphers<a class="headerlink" href="#ssl-ciphers" title="Permanent link"></a></h2>
<p>Sets the <a href="http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ciphers">ciphers</a> list to enable. The ciphers are specified in the format understood by the OpenSSL library.</p>
<p>The default cipher list is:
<code>ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256</code>.</p>
<code>ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384</code>.</p>
<p>The ordering of a ciphersuite is very important because it decides which algorithms are going to be selected in priority. The recommendation above prioritizes algorithms that provide perfect <a href="https://wiki.mozilla.org/Security/Server_Side_TLS#Forward_Secrecy">forward secrecy</a>.</p>
<p>Please check the <a href="https://mozilla.github.io/server-side-tls/ssl-config-generator/">Mozilla SSL Configuration Generator</a>.</p>
<h2 id="ssl-ecdh-curve">ssl-ecdh-curve<a class="headerlink" href="#ssl-ecdh-curve" title="Permanent link"></a></h2>
@ -4337,7 +4337,7 @@ The default of 0 means "max open files (system's limit) / <a href="#worker-proce
<li><a href="http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_dhparam">http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_dhparam</a></li>
</ul>
<h2 id="ssl-protocols">ssl-protocols<a class="headerlink" href="#ssl-protocols" title="Permanent link"></a></h2>
<p>Sets the <a href="http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_protocols">SSL protocols</a> to use. The default is: <code>TLSv1.2</code>.</p>
<p>Sets the <a href="http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_protocols">SSL protocols</a> to use. The default is: <code>TLSv1.2 TLSv1.3</code>.</p>
<p>Please check the result of the configuration using <code>https://ssllabs.com/ssltest/analyze.html</code> or <code>https://testssl.sh</code>.</p>
<h2 id="ssl-early-data">ssl-early-data<a class="headerlink" href="#ssl-early-data" title="Permanent link"></a></h2>
<p>Enables or disables TLS 1.3 <a href="https://tools.ietf.org/html/rfc8446#section-2.3">early data</a></p>

9
user-guide/tls/index.html
View file

@ -1371,21 +1371,22 @@ by monitoring ingress resources and their referenced secrets.</p>
The first version to fully support Kube-Lego is Nginx Ingress controller 0.8.</p>
<h2 id="default-tls-version-and-ciphers">Default TLS Version and Ciphers<a class="headerlink" href="#default-tls-version-and-ciphers" title="Permanent link"></a></h2>
<p>To provide the most secure baseline configuration possible,</p>
<p>nginx-ingress defaults to using TLS 1.2 only and a <a href="../nginx-configuration/configmap/#ssl-ciphers">secure set of TLS ciphers</a>.</p>
<p>nginx-ingress defaults to using TLS 1.2 and 1.3 only, with a <a href="../nginx-configuration/configmap/#ssl-ciphers">secure set of TLS ciphers</a>.</p>
<h3 id="legacy-tls">Legacy TLS<a class="headerlink" href="#legacy-tls" title="Permanent link"></a></h3>
<p>The default configuration, though secure, does not support some older browsers and operating systems.</p>
<p>For instance, TLS 1.1+ is only enabled by default from Android 5.0 on. At the time of writing,
May 2018, <a href="https://developer.android.com/about/dashboards/#Platform">approximately 15% of Android devices</a>
are not compatible with nginx-ingress's default configuration.</p>
<p>To change this default behavior, use a <a href="../nginx-configuration/configmap/">ConfigMap</a>.</p>
<p>A sample ConfigMap fragment to allow these older clients to connect could look something like the following:</p>
<p>A sample ConfigMap fragment to allow these older clients to connect could look something like the following
(generated using the Mozilla SSL Configuration Generator)<a href="https://ssl-config.mozilla.org/#server=nginx&amp;config=old">mozilla-ssl-config-old</a>:</p>
<div class="highlight"><pre><span></span><code>kind: ConfigMap
apiVersion: v1
metadata:
name: nginx-config
data:
ssl-ciphers: &quot;ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA&quot;
ssl-protocols: &quot;TLSv1 TLSv1.1 TLSv1.2&quot;
ssl-ciphers: &quot;ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA&quot;
ssl-protocols: &quot;TLSv1 TLSv1.1 TLSv1.2 TLSv1.3&quot;
</code></pre></div>