DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2597 commits 4 branches 217 tags 166 MiB
Commit graph

2597 commits

This branch
This branch
All branches
Author SHA1 Message Date
Elvin Efendi
8b8ba2e42e run lua-resty-waf in different modes (#2317) 
* run lua-resty-waf in different modes

* update docs
 2018-04-09 09:19:13 -03:00
Elvin Efendi
e6c6952629 extra waf rules per ingress (#2315) 
* extra waf rules per ingress

* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules

* regenerate internal/file/bindata.go
 2018-04-09 07:14:30 -03:00
Elvin Efendi
389cc50e6b annotation to ignore given list of WAF rulesets (#2314) 2018-04-08 22:55:23 -03:00
Elvin Efendi
d7c5873232 lua-resty-waf controller (#2304) 2018-04-08 17:37:13 -03:00
Manuel Alejandro de Brito Fontes
307f478662 Configure upload limits for setup of lua load balancer (#2309) 2018-04-08 15:47:49 -03:00
Manuel Alejandro de Brito Fontes
c9d4ebb9d2 Add verification of lua load balancer to health check (#2308) 2018-04-08 15:24:37 -03:00
Manuel Alejandro de Brito Fontes
937659f031 Disable lua waf where luajit is not available (#2306) 2018-04-07 15:27:10 -03:00
Manuel Alejandro de Brito Fontes
1c3c0cd4ae Fix issues building nginx image in different platforms (#2305) 2018-04-07 10:02:16 -03:00
Elvin Efendi
ca33465041 include the rest of lua-resty-waf dependencies (#2303) 2018-04-07 07:49:21 -03:00
Elvin Efendi
155dcf4cab include lua-resty-waf and its dependencies in the base Nginx image (#2301) 
* install lua-resty-waf

* bump version

* include Kubernetes header
 2018-04-06 18:08:25 -03:00
Manuel Alejandro de Brito Fontes
3754f09ac8 Fix race condition when Ingress does not contains a secret (#2300) 2018-04-06 17:44:41 -03:00
Manuel de Brito Fontes
188240d1b7 Escape variables in add-base-url annotation 2018-04-05 20:45:49 -03:00
Manuel Alejandro de Brito Fontes
d20c63d09a Improve indentation of generated nginx.conf (#2296) 2018-04-05 18:19:30 -03:00
Manuel Alejandro de Brito Fontes
19c6b3bdc4 Disable dynamic configuration in s390x and ppc64le (#2298) 2018-04-05 17:37:21 -03:00
Manuel Alejandro de Brito Fontes
cfb1e45729 Fix HSTS without preload (#2294) 2018-04-04 23:17:51 -03:00
Manuel Alejandro de Brito Fontes
f13cfe6152 Update nginx to 1.13.11 (#2290) 2018-04-04 12:18:17 -03:00
Manuel Alejandro de Brito Fontes
8a4f93dca2 Fix custom-error-pages image publication script (#2289) 2018-04-03 15:09:34 -03:00
Sergey Lanzman
35a1abfbb0 Update controller.go (#2285) 2018-04-02 20:16:06 -03:00
Alvaro Aleman
a93ffd2618 Add NoAuthLocations and default it to "/.well-known/acme-challenge" (#2243) 
* Add NoAuthLocations and default it to "/.well-known/acme-challenge"

* Add e2e tests for no-auth-location

* Improve wording of no-auth-location tests
 2018-04-01 21:02:34 -03:00
Alvaro Aleman
a3a6f48ccd Fix flaky e2e tests by always waiting after redeploying the ingress controller (#2283) 2018-04-01 20:37:27 -03:00
Elvin Efendi
49a77f157e e2e tests for dynamic configuration and Lua features and a bug fix (#2254) 
* e2e tests for dynamic configuration and Lua features

* do not rely on force reload to dynamically configure when reload is needed

* fix misspelling

* skip dynamic configuration in the first template rendering

* dont error on first sync
 2018-04-01 17:09:27 -03:00
Manuel Alejandro de Brito Fontes
b3f29c62e7 Fix nlb instructions (#2282) 2018-03-30 14:24:11 -03:00
Elvin Efendi
7cee1d3f3a Fix bug when auth req is enabled(external authentication) (#2280) 
* set proxy_upstream_name correctly when auth_req module is used

* log a more meaningful message when backend is not found
 2018-03-30 14:19:33 -03:00
AdamDang
6cd482d9dc Update README.md (#2276) 
Small typo fix .
 2018-03-30 08:00:43 -03:00
Manuel Alejandro de Brito Fontes
937abe6d30 Update go to 1.10.1 (#2273) 2018-03-29 14:04:59 -03:00
AdamDang
1cf69b0337 Typo fixes in modsecurity.md (#2274) 
* Update modsecurity.md

Some typo fixes

* Update modsecurity.md
 2018-03-29 13:48:16 -03:00
Manuel Alejandro de Brito Fontes
a025dac811 Disable opentracing for nginx internal urls (#2272) 2018-03-29 13:47:13 -03:00
Oilbeater
c7671884c9 clean up tmpl (#2263) 
The nginx.conf generated now is too messy remove some section only useful when dynamic configure enabled and headers only useful for https.
 2018-03-29 09:36:00 -03:00
Antoine Cotten
df3f5b4f13 Use SharedIndexInformers in place of Informers (#2271) 2018-03-29 09:35:01 -03:00
Manuel Alejandro de Brito Fontes
5bc4e2b062 Revert deleted assignment in #2146 (#2270) 2018-03-28 20:33:03 -03:00
Sylvain Rabot
d459cf0333 Managing a whitelist for _/nginx_status (#2187) 
Signed-off-by: Sylvain Rabot <s.rabot@lectra.com>
 2018-03-28 09:27:34 -03:00
AdamDang
5c5c97866c Update README.md (#2267) 
It should be "your Ingress targets" in line 7.
 2018-03-27 12:50:26 -03:00
AdamDang
a14e81fb82 Update annotations.md (#2255) 
a typo fix
 2018-03-25 12:55:30 -03:00
Manuel Alejandro de Brito Fontes
20f3d913d3 Add deployment docs for AWS NLB (#1785) 2018-03-24 15:27:24 -03:00
Manuel Alejandro de Brito Fontes
4b2354fa6d Update go dependencies (#2234) 2018-03-23 13:35:19 -03:00
Zenara Daley
9470b03561 Add EWMA as configurable load balancing algorithm (#2229) 2018-03-23 12:06:21 -03:00
Manuel Alejandro de Brito Fontes
5017b96deb Fix grpc json tag name (#2246) 2018-03-23 09:12:26 -03:00
Oilbeater
9da0ade914 fix: empty ingress path (#2244) 
If the origin ingress rule has no field `path`, the default value will be an empty string which will cause issues when rendering template as other place will use `/` as the default value.
Set the default value of path to `/` when retrieve ingress rules from api-server. Thie will fix https://github.com/kubernetes/ingress-nginx/issues/1980
 2018-03-23 08:08:42 -03:00
k8s-ci-robot
b99dd3c1ee Merge pull request #2242 from agau4779/http2 
add http/2
 2018-03-22 10:26:04 -07:00
Ashley Gau
eb473fad86 add http/2 2018-03-22 10:25:35 -07:00
maxlaverse
33623834b8 Revert "Get file max from fs/file-max. (#2050)" (#2241) 
This reverts commit a240a23129.
 2018-03-22 13:03:04 -03:00
Oilbeater
a1c295f4ca fix: cannot set $service_name if use rewrite (#2220) 
$path here is the regular expression formatted nginx location not the origin path in ingress rules. Fix https://github.com/kubernetes/ingress-nginx/issues/2131
 2018-03-22 09:43:45 -03:00
yulng
3a8aeda4d7 to kubernetes (#2240) 
to kubernetes
 2018-03-22 09:20:09 -03:00
halfcrazy
9c1ec681fc Add missing configuration in #2235 (#2236) 2018-03-22 08:53:29 -03:00
fqsghostcloud
814b7cd6dc fix-link (#2239) 2018-03-22 08:32:33 -03:00
fqsghostcloud
535e9405f7 Correct typo (#2238) 
* correct spelling

* correct typo
 2018-03-22 08:14:06 -03:00
maxlaverse
27d18a63f4 Make proxy_next_upstream_tries configurable (#2232) 
* Make proxy_next_upstream_tries configurable

* Code generation
 2018-03-22 08:12:36 -03:00
halfcrazy
c3ab37197d add proxy header ssl-client-issuer-dn, fix #2178 (#2235) 2018-03-22 01:38:47 -03:00
Manuel Alejandro de Brito Fontes
087a1592ae Add support for gRPC (#2223) 
* Update nginx to 1.13.10 and enable gRPC

* Add support for grpc
 2018-03-22 00:38:47 -03:00
Elvin Efendi
4fe4a61ecb clean backends data before sending to Lua endpoint (#2233) 2018-03-21 23:47:39 -03:00