Commit graph

4685 commits

Author SHA1 Message Date
Kubernetes Prow Robot
ec674aa22d
Merge pull request #4185 from Colstuwjx/fix/missing-healthcheck-timeout
Fix: fillout missing health check timeout on health check.
2019-06-13 08:38:20 -07:00
Manuel Alejandro de Brito Fontes
5f8deb2312
Update go dependencies 2019-06-13 11:32:39 -04:00
Manuel Alejandro de Brito Fontes
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package 2019-06-13 11:32:39 -04:00
Kubernetes Prow Robot
aa131b08a2
Merge pull request #4191 from ShimiT/lua_cfg_data
increase lua_shared_dict config data
2019-06-13 07:58:19 -07:00
Colstuwjx
b28577a4bf Fix: fillout missing health check timeout on health check. 2019-06-13 21:15:50 +08:00
tals
a9a73c6ed6 increase lua_shared_dict config data 2019-06-12 18:42:47 +03:00
Kubernetes Prow Robot
8cee8d5d9b
Merge pull request #4119 from tammert/conditional-modsecurity-module-load
Only load module ngx_http_modsecurity_module.so when option enable-mo…
2019-06-11 08:08:22 -07:00
Sebastiaan Tammer
c11583dc5f Only load modsecurity_module when ModSec is active 2019-06-11 16:39:52 +02:00
s-shirayama
6f0d6b38b8 Add unit test case for canary by header 2019-06-11 22:34:33 +09:00
s-shirayama
0ff679baa7 Add unit test case for canary by cookie 2019-06-11 22:34:30 +09:00
s-shirayama
e9f4c0bb0e Add unit test case for canary by weight 2019-06-11 22:34:24 +09:00
s-shirayama
7a15f52cf1 Add unit test case for balancer.route_to_alternative_balancer() 2019-06-11 22:34:05 +09:00
Kubernetes Prow Robot
28793092e7
Merge pull request #4169 from Shopify/refactor-sticky-balancer
simplify sticky balancer and fix a bug
2019-06-07 07:28:03 -07:00
Elvin Efendi
e2c6202324 bugfix: check all previously failing upstreams, not just the last one 2019-06-07 10:00:31 -04:00
Elvin Efendi
b9b1ffb1d5 simplify sticky balancer 2019-06-06 16:32:33 -04:00
Kubernetes Prow Robot
e76418cd99
Merge pull request #4162 from stramel/patch-1
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
Michael Stramel
686f2310e4 Add "text/javascript" to compressible MIME types
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages, servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
Kubernetes Prow Robot
d460147abd
Merge pull request #4166 from Shopify/use-correct-type
Session Affinity ChangeOnFailure should be boolean
2019-06-06 08:52:14 -07:00
Elvin Efendi
83f2acbe38 Session Affinity ChangeOnFailure should be boolean 2019-06-06 11:22:05 -04:00
Kubernetes Prow Robot
c6c6f51006
Merge pull request #4164 from Shopify/fix-file-mods
fix source file mods
2019-06-06 08:12:14 -07:00
Elvin Efendi
c4ced9d694 fix source file mods 2019-06-06 10:47:08 -04:00
Kubernetes Prow Robot
286ff13af2
Merge pull request #4048 from fedunineyu/change-upstream-on-error-with-sticky-session
Change upstream on error when sticky session balancer is used
2019-06-06 07:22:17 -07:00
Kubernetes Prow Robot
79e214c5b2
Merge pull request #4160 from aledbf/fix-expire-metric
SSL expiration metrics cannot be tied to dynamic updates
2019-06-06 06:24:13 -07:00
Manuel Alejandro de Brito Fontes
29489097c9
SSL expiration metrics cannot be tied to dynamic updates 2019-06-05 11:04:27 -04:00
Manuel Alejandro de Brito Fontes
78d6ce6e6e
Partially revert usage of kustomize for installation (#4159) 2019-06-05 10:59:38 -04:00
Kubernetes Prow Robot
73d7806b48
Merge pull request #4153 from Niksko/use-regex-annotation
Add clarification on how to enable path matching
2019-06-04 19:05:53 -07:00
Nikolas Skoufis
4a913fac2a
Add clarification on how to enable path matching
The fact that you need to explicitly add the annotation is easy to miss.
This makes this more explicit, while leaving the finer details to the
linked annotations document.
2019-06-05 11:14:50 +10:00
Manuel Alejandro de Brito Fontes
14a394fc9e
Update nginx (#4150)
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
Ionut Craciunescu
d08b8844a1 update modsecurity to latest, libmodsecurity to v3.0.3 and owasp-scrs to v3.1.0 (#4140) 2019-06-04 12:13:40 -04:00
Kubernetes Prow Robot
251f48b120
Merge pull request #4135 from nicknovitski/deployment-api-appsv1
Use apps/v1 api group in e2e tests
2019-05-29 16:50:18 -07:00
Kubernetes Prow Robot
85842edebb
Merge pull request #4133 from nicknovitski/parallel-psp-e2e-test
Run PodSecurityPolicy E2E test in parallel
2019-05-29 16:18:20 -07:00
Kubernetes Prow Robot
8a2d506d41
Merge pull request #4132 from zhucebuliaolongchuan/patch-1
Update README.md for external-auth Test 4
2019-05-29 14:40:22 -07:00
Nick Novitski
e1958b8272 Run PodSecurityPolicy E2E test in parallel
Previously, this test modified a ClusterRole used by _every_ test.  It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.

Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
2019-05-29 14:13:04 -07:00
Nick Novitski
d617e5abdc Use apps/v1 api group in e2e tests 2019-05-29 12:12:45 -07:00
Chuan Long
30d3505e7e
Update README.md for external-auth Test 4
Title for Test 4 should be `secure service with valid auth header`. The current one is the same as Test 3.
2019-05-29 13:23:20 -05:00
Sergio Morales
c38c66e00a feature(collectors): Added services to collectorLabels and requests Countervec to capture the name of the kubernetes service used to serve the client request. 2019-05-27 11:19:42 -04:00
Kubernetes Prow Robot
bf11e2ef63
Merge pull request #4101 from aledbf/reftactor-whitelist
Refactor whitelist from map to standard allow directives
2019-05-27 05:33:51 -07:00
Manuel Alejandro de Brito Fontes
c2227a058d
Refactor e2e test 2019-05-27 06:31:01 -04:00
Eugene Fedunin
254629cf16 Added support for annotation session-cookie-change-on-failure
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.

Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
Manuel Alejandro de Brito Fontes
c4597522bf
Refactor whitelist from map to standard allow directives 2019-05-27 04:55:38 -04:00
Kubernetes Prow Robot
24cb0e5d0b
Merge pull request #3803 from ElvinEfendi/use-table-nkeys
use nkeys for counting lua table elements
2019-05-27 01:41:51 -07:00
Elvin Efendi
0e9e40a60b use nkeys for counting lua table elements 2019-05-26 18:15:15 -04:00
Kubernetes Prow Robot
29ced14f4a
Merge pull request #4123 from aledbf/update-nginx
Update nginx image to 0.86
2019-05-26 10:07:49 -07:00
Kubernetes Prow Robot
eebed18a89
Merge pull request #4122 from ElvinEfendi/update-nginx-and-dependencies
Update Nginx to 1.17.0 and upgrade some other modules
2019-05-26 09:03:48 -07:00
Manuel Alejandro de Brito Fontes
77f5e4decb
Update nginx image to 0.86 2019-05-26 11:28:35 -04:00
Elvin Efendi
37a603a1af updated nginx and some other modules 2019-05-26 09:09:57 -04:00
Kubernetes Prow Robot
c7df848662
Merge pull request #4109 from aledbf/use-real-server
Use real apiserver
2019-05-26 04:47:50 -07:00
Kubernetes Prow Robot
008822b37f
Merge pull request #4120 from ElvinEfendi/lua-balancer-logging
log info when endpoints change for a balancer
2019-05-26 01:17:50 -07:00
Elvin Efendi
dc7fa885a2 log info when endpoints change for a balancer 2019-05-25 23:50:18 -04:00
Kubernetes Prow Robot
dfa7f10fc9
Merge pull request #4055 from nicknovitski/kustomize
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00