Commit graph

4685 commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
4a9b02bc03
Remove dynamic TLS records 2019-08-08 15:52:56 -04:00
Kubernetes Prow Robot
f4678764f5
Merge pull request #4416 from aledbf/diff
Remove invalid log "Failed to executing diff command: exit status 1"
2019-08-08 11:31:20 -07:00
Kubernetes Prow Robot
34593c0f50
Merge pull request #4405 from ShimiT/lua-shared-cfg
Lua shared cfg
2019-08-08 10:39:20 -07:00
Manuel Alejandro de Brito Fontes
171da635ef
Remove invalid log "Failed to executing diff command: exit status 1" 2019-08-08 12:53:23 -04:00
Kubernetes Prow Robot
7ecb6dc447
Merge pull request #4415 from Shopify/build-dev-improvements
more dev-env script improvements
2019-08-08 07:21:21 -07:00
Elvin Efendi
25c423382a more dev-env script improvements 2019-08-08 09:52:25 -04:00
tals
a2e667c082 lua shared dict from cm
lua shared dict teml test and update func sign

lua shared dict cm test

lua shared dict integration test

lua shared dict add cm parsing

lua shared dict change test header
2019-08-08 12:44:11 +03:00
Kubernetes Prow Robot
0f98de5d33
Merge pull request #4410 from ElvinEfendi/fix-dev-script
fix dev-env script
2019-08-07 17:13:18 -07:00
Elvin Efendi
c898ad6974 fix dev-env script 2019-08-07 17:22:57 -04:00
Maxime Ginters
7219130da4 Add nginx ssl_early_data option support 2019-08-07 16:04:09 -04:00
Jeroen Schutrup
8dd912114e
Move X-Forwarded-Port variable to the location context
Resolves issue #4038 where the X-Forwarded-Port header would be set to the value of the https listening port if all of the following settings were satisfied:
- The ingress controller was started with a non-default HTTPS port set with the `--https-port` argument
- An ingress is created having:
  - the `nginx.ingress.kubernetes.io/auth-url` annotation set
  - TLS enabled

This commit solves this issue by moving the setting of the `pass_server_port` variable from the server, one level down to the location context.
2019-08-06 17:00:58 +02:00
Jeroen Schutrup
39144bb987
Add documentation on how to build the Docker image for end-to-end testing 2019-08-06 17:00:56 +02:00
Manuel Alejandro de Brito Fontes
041a8457aa
Fix docs build due to an invalid link (#4389) 2019-08-01 19:57:09 -04:00
Kubernetes Prow Robot
f93bcfbc24
Merge pull request #4386 from aledbf/go-updat
Update go dependencies
2019-08-01 13:06:14 -07:00
Fernando Diaz
386486e969 Allow Requests to be Mirrored to different backends
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.

See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
2019-08-01 11:53:58 -05:00
Kubernetes Prow Robot
292aca7c7a
Merge pull request #4329 from steakunderscore/update-oauth2_proxy-docs
Update references to oauth2_proxy
2019-08-01 06:58:15 -07:00
Kubernetes Prow Robot
929945e916
Merge pull request #4383 from otnielvh/otnielvh-nginx-with-psp
Add support for psp
2019-08-01 06:16:15 -07:00
otnielvh
3b34d56c92 Add support for psp 2019-08-01 09:45:58 +03:00
Manuel Alejandro de Brito Fontes
fcb1b6217b
Update go dependencies 2019-07-31 20:55:11 -04:00
Kubernetes Prow Robot
c8a3710fb8
Merge pull request #4344 from Nuglif/fastcgi-backend-support
Add FastCGI backend support (#2982)
2019-07-31 11:20:14 -07:00
Charle Demers
72271e9313
FastCGI backend support (#2982)
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
Kubernetes Prow Robot
25a293ffcf
Merge pull request #4371 from DataDog/cgilmour/update-datadog-tracer
Update datadog tracing plugin to v1.0.1
2019-07-28 18:57:53 -07:00
Caleb Gilmour
a6869faed4 Update datadog tracing plugin to v1.0.1 2019-07-29 01:02:09 +00:00
Kubernetes Prow Robot
1cead3f2ab
Merge pull request #4369 from Nuglif/fix-broken-test-filename
Fix broken test's filenames
2019-07-26 16:41:58 -07:00
Pierrick Charron
29788452b6 Fix broken test's filename 2019-07-26 18:15:25 -04:00
Kubernetes Prow Robot
daf4a150ae
Merge pull request #4365 from ElvinEfendi/fix-balancer-bug
memoize balancer for a request
2019-07-26 08:11:59 -07:00
Elvin Efendi
8f5fa78e1a regression test 2019-07-26 10:18:31 -04:00
Elvin Efendi
6f7b66fc7d memoize balancer for a request 2019-07-26 09:35:58 -04:00
Manuel Alejandro de Brito Fontes
374045dc79
Add debug for DNS 2019-07-25 09:19:06 -04:00
Manuel Alejandro de Brito Fontes
1abc11af90
Remove static SSL configuration mode 2019-07-25 09:19:06 -04:00
Kubernetes Prow Robot
e1f062dd53
Merge pull request #4348 from aledbf/kep
KEP process
2019-07-24 18:39:51 -07:00
Manuel Alejandro de Brito Fontes
aea01f9e17
Remove flake in tests (dns) 2019-07-24 21:08:08 -04:00
Manuel Alejandro de Brito Fontes
36959a4878
Add go dependencies for mdtoc 2019-07-24 21:08:08 -04:00
Manuel Alejandro de Brito Fontes
cb33c4ed26
Start using KEPs for new features or breaking changes 2019-07-24 21:08:07 -04:00
Kubernetes Prow Robot
91a68ffc71
Merge pull request #4341 from oguzhaninan/patch-1
duplicate argument "--disable-catch-all"
2019-07-22 06:54:52 -07:00
Oguzhan Inan
cbc5d3a917
duplicate argument "--disable-catch-all" 2019-07-22 14:48:23 +03:00
Kubernetes Prow Robot
29fa747664
Merge pull request #4333 from judexzhu/patch-1
Add  [$proxy_alternative_upstream_name]
2019-07-22 03:52:52 -07:00
Kubernetes Prow Robot
05d3aa81ef
Merge pull request #4334 from aledbf/refactor-http-client
Refactor http client for unix sockets
2019-07-19 09:25:12 -07:00
Manuel Alejandro de Brito Fontes
2f124e4b76
Refactor http client for unix sockets 2019-07-19 11:07:51 -04:00
Jude Zhu
5e64b6834c
Add [$proxy_alternative_upstream_name]
https://github.com/kubernetes/ingress-nginx/pull/4246
2019-07-19 07:36:13 +08:00
Henry Jenkins
b8cedabbff Update references to oauth2_proxy
The custodian of the project has been shifted from [bitly] to [pusher].
So this diff updates these references.

[bitly]: https://github.com/bitly/oauth2_proxy
[pusher]: https://github.com/pusher/oauth2_proxy
2019-07-18 07:59:22 +01:00
Gabor Lekeny
def13fc06c Add proxy_ssl_* directives
Add support for backends which require client certificate (eg. NiFi)
authentication. The `proxy-ssl-secret` k8s annotation references a
secret which is used to authenticate to the backend server. All other
directives fine tune the backend communication.

The following annotations are supported:
* proxy-ssl-secret
* proxy-ssl-ciphers
* proxy-ssl-protocol
* proxy-ssl-verify
* proxy-ssl-verify-depth
2019-07-18 03:21:52 +02:00
Kubernetes Prow Robot
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
feat: auth-req caching
2019-07-17 12:06:12 -07:00
Moritz Johner
23504db770 feat: auth-req caching
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.

[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
Kubernetes Prow Robot
84af99b512
Merge pull request #4299 from aledbf/cleanup
Fix scripts to be able to run tests in docker
2019-07-17 08:32:35 -07:00
Manuel Alejandro de Brito Fontes
d5c7fa8cfb
Fix scripts to be able to run tests in docker 2019-07-17 11:06:53 -04:00
Manuel Alejandro de Brito Fontes
a54ab3341e
Update go dependencies (#4322) 2019-07-17 09:21:14 -04:00
Kubernetes Prow Robot
28cc3bb5e2
Merge pull request #4316 from knrt10/patch-1
Update how-it-works.md
2019-07-12 06:19:06 -07:00
Kautilya Tripathi
d9c0ede20a
Update how-it-works.md
Changed text to link
2019-07-12 14:12:15 +05:30
Kubernetes Prow Robot
33d89579c6
Merge pull request #4313 from ElvinEfendi/lua-test-improvements
avoid warning during lua unit test
2019-07-11 15:59:08 -07:00