Syunsuke Komma
0b38a48ac9
Update annotations.md
...
Add notes of limit-rate/limit-rate-after
2019-11-13 12:49:59 +09:00
Kubernetes Prow Robot
0d244e1c41
Merge pull request #4730 from stamm/master
...
add configuration for http2_max_concurrent_streams
2019-11-08 07:12:29 -08:00
Kubernetes Prow Robot
a0dc3a9a51
Merge pull request #4695 from janosi/secure-verify-ca-secret
...
Removing secure-verify-ca-secret support
2019-11-08 07:12:21 -08:00
Rustam Zagirov
d9cfad1894
add configuration for http2_max_concurrent_streams
2019-10-31 15:13:38 +03:00
Carlos Panato
40e0e5bef8
add proxy-max-temp-file-size doc
2019-10-23 09:55:46 +02:00
Peter Pan
ee24bf1bbc
Doc: Add remote_addr
into default values in configmap for TCP logging format
2019-10-21 10:18:17 +08:00
Laszlo Janosi
31227d61c2
Removing secure-verify-ca-secret support and writing an error log if that annotation is used in an Ingress definition
2019-10-18 10:58:57 +02:00
Kubernetes Prow Robot
fb025ab501
Merge pull request #4087 from MRoci/master
...
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
MRoci
72c4ffa8b5
add modsecurity-snippet key
2019-09-28 09:54:07 +02:00
Manuel Alejandro de Brito Fontes
6715108d8a
Release 0.26.0
2019-09-27 10:23:12 -03:00
Manuel Alejandro de Brito Fontes
2bd8121338
Change default for proxy-add-original-uri-header
2019-09-25 10:57:31 -03:00
A Gardner
786a3b6862
Add support for configmap of headers to be sent to external auth service
2019-09-24 10:53:23 -04:00
Kubernetes Prow Robot
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode
...
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
Manuel Alejandro de Brito Fontes
4b4176c830
Fix log format after #4557
2019-09-18 12:52:09 -03:00
Kubernetes Prow Robot
87ad033483
Merge pull request #4569 from mkabischev/jaeger-header-configuration
...
allow to configure jaeger header names
2019-09-17 20:29:29 -07:00
Mike Kabischev
d5563a7e47
allow to configure jaeger header names
2019-09-17 12:35:53 +03:00
Kubernetes Prow Robot
846ff00363
Merge pull request #4560 from Shopify/basic-auth-map
...
Support configuring basic auth credentials as a map of user/password hashes
2019-09-16 07:52:39 -07:00
A Gardner
376b862c23
Add annotation to support map of user/pass pairs in basic auth
2019-09-13 11:33:33 -04:00
Manuel Alejandro de Brito Fontes
9af574a234
Remove the_real_ip variable
2019-09-12 20:01:33 -03:00
Tobias Bradtke
d7dc7be276
Fix relative links ( #4522 )
2019-09-03 09:02:07 -04:00
Alexander Maret-Huskinson
9170591185
Added new affinity mode for maximum session stickyness. Fixes kubernetes/ingress-nginx#4475
2019-08-30 11:40:29 +02:00
Manuel Alejandro de Brito Fontes
8def5ef7ca
Add support for multiple alias and remove duplication of SSL certificates ( #4472 )
2019-08-26 10:58:44 -04:00
Manuel Alejandro de Brito Fontes
7d6ce5701f
Fix log format markdown ( #4489 )
2019-08-24 22:48:17 -04:00
Tim Hobbs
2c604e7d38
Add rate limit units and error status
...
Signed-off-by: Tim Hobbs <timothy.hobbs@ic-consult.com>
2019-08-22 16:03:41 +02:00
Gabor Lekeny
65b9e2c574
Merge branch 'master' of https://github.com/kubernetes/ingress-nginx into proxyssl
2019-08-16 06:21:53 +02:00
Kubernetes Prow Robot
0b375989f3
Merge pull request #4412 from Shopify/ssl-early-data
...
Add nginx ssl_early_data option support
2019-08-15 10:08:35 -07:00
Elvin Efendi
b21c721196
lua-shared-dicts improvements, fixes and documentation
2019-08-14 22:10:56 -04:00
Kubernetes Prow Robot
adef152db8
Merge pull request #4379 from diazjf/mirror
...
Allow Requests to be Mirrored to different backends
2019-08-13 17:52:24 -07:00
Pierrick Charron
f459515d0d
Add quote function in template
...
Co-authored-by: Charle Demers <charle.demers@gmail.com>
2019-08-09 15:47:29 -04:00
Manuel Alejandro de Brito Fontes
4a9b02bc03
Remove dynamic TLS records
2019-08-08 15:52:56 -04:00
Maxime Ginters
7219130da4
Add nginx ssl_early_data option support
2019-08-07 16:04:09 -04:00
Fernando Diaz
386486e969
Allow Requests to be Mirrored to different backends
...
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.
See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
2019-08-01 11:53:58 -05:00
Jude Zhu
5e64b6834c
Add [$proxy_alternative_upstream_name]
...
https://github.com/kubernetes/ingress-nginx/pull/4246
2019-07-19 07:36:13 +08:00
Gabor Lekeny
def13fc06c
Add proxy_ssl_* directives
...
Add support for backends which require client certificate (eg. NiFi)
authentication. The `proxy-ssl-secret` k8s annotation references a
secret which is used to authenticate to the backend server. All other
directives fine tune the backend communication.
The following annotations are supported:
* proxy-ssl-secret
* proxy-ssl-ciphers
* proxy-ssl-protocol
* proxy-ssl-verify
* proxy-ssl-verify-depth
2019-07-18 03:21:52 +02:00
Kubernetes Prow Robot
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
...
feat: auth-req caching
2019-07-17 12:06:12 -07:00
Moritz Johner
23504db770
feat: auth-req caching
...
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.
[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
E. Stuart Hicks
3b0c523e49
added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends
2019-07-08 14:32:00 -04:00
Tristan Matthews
ef4b560499
Update annotations.md
2019-06-20 20:19:11 -04:00
Kubernetes Prow Robot
e76418cd99
Merge pull request #4162 from stramel/patch-1
...
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
Michael Stramel
686f2310e4
Add "text/javascript" to compressible MIME types
...
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages , servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
Eugene Fedunin
254629cf16
Added support for annotation session-cookie-change-on-failure
...
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.
Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
MMeent
73c70e28b4
Clear up some inconsistent / unclear wording
...
IPv6 enabled/disabled working was confusing or contradicting itself. This updates the wording to what is expected, based on the default values in the table above, and the behaviour that I could find in code.
2019-05-21 15:27:58 +02:00
reynaldi.wijaya
d468cd5ec5
UPT: Modify configmap to include jaeger sampler host and jaeger sampler port
2019-05-21 17:54:29 +08:00
Kubernetes Prow Robot
19501b217d
Merge pull request #4089 from alanjcastonguay/docs/use-gzip-configmap-defaults
...
Docs: configmap: use-gzip
2019-05-18 04:09:14 -07:00
Kevin Simper
ddc2ce5c70
Update configmap about adding custom locations
2019-05-17 21:39:40 +02:00
Alan J Castonguay
f5b090518d
Docs: configmap: use-gzip
...
Move the "gzip-types" value default from the "use-gzip" to the "gzip-types"
heading, and link to it from use-gzip.
Document that the "use-gzip" default is "true", matching the style of other
configmap items.
2019-05-15 13:09:45 -04:00
okryvoshapka-connyun
4811168d2a
Fixed typos
2019-05-06 09:04:12 +02:00
okryvoshapka-connyun
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
Alex Kursell
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
Alex Kursell
4f819b6256
Fix load-balance configmap value
2019-04-01 15:55:36 -04:00