Commit graph

4294 commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
56fc9069ee Do not set Host header when backend protocol is grpc 2019-06-18 23:44:10 -04:00
Manuel Alejandro de Brito Fontes
7975adbb25 Update go dependencies for e2e tests 2019-06-18 23:44:10 -04:00
Manuel Alejandro de Brito Fontes
5bda73ec03 Add e2e tests for grpc using https://grpcb.in 2019-06-18 23:44:10 -04:00
Kubernetes Prow Robot
6dfbcdbe2c Merge pull request #4128 from cornershop/feature/service-collectLabel
feature(collectors): Added services to collectorLabels
2019-06-18 19:08:31 -07:00
Manuel Alejandro de Brito Fontes
1ce3f8c2c4 Service type=ExternalName can be defined with ports 2019-06-18 17:17:43 -04:00
Kubernetes Prow Robot
965052bef9 Merge pull request #4204 from aledbf/externalName
Add e2e test for service type=ExternalName
2019-06-18 09:26:25 -07:00
Manuel Alejandro de Brito Fontes
f4adc9116c Add e2e test for service type=ExternalName 2019-06-17 23:12:24 -04:00
Kubernetes Prow Robot
884571a18e Merge pull request #4127 from aledbf/migration
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 09:28:19 -07:00
Kubernetes Prow Robot
d6297cb23c Merge pull request #4187 from s-shirayama/add_unit_test_case_for_balancer_lua_module
Add unit test cases for balancer lua module
2019-06-13 09:02:20 -07:00
Kubernetes Prow Robot
c5891f7f93 Merge pull request #4185 from Colstuwjx/fix/missing-healthcheck-timeout
Fix: fillout missing health check timeout on health check.
2019-06-13 08:38:20 -07:00
Manuel Alejandro de Brito Fontes
2fe2bc7a09 Update go dependencies 2019-06-13 11:32:39 -04:00
Manuel Alejandro de Brito Fontes
fb0b39af9f Migrate to new networking.k8s.io/v1beta1 package 2019-06-13 11:32:39 -04:00
Kubernetes Prow Robot
fd386f7de3 Merge pull request #4191 from ShimiT/lua_cfg_data
increase lua_shared_dict config data
2019-06-13 07:58:19 -07:00
Colstuwjx
999ad2c7da Fix: fillout missing health check timeout on health check. 2019-06-13 21:15:50 +08:00
tals
38aabd7636 increase lua_shared_dict config data 2019-06-12 18:42:47 +03:00
Kubernetes Prow Robot
6bbaf78ea5 Merge pull request #4119 from tammert/conditional-modsecurity-module-load
Only load module ngx_http_modsecurity_module.so when option enable-mo…
2019-06-11 08:08:22 -07:00
Sebastiaan Tammer
a8a2cd4601 Only load modsecurity_module when ModSec is active 2019-06-11 16:39:52 +02:00
s-shirayama
9e7fd9c1e0 Add unit test case for canary by header 2019-06-11 22:34:33 +09:00
s-shirayama
7f86907b3c Add unit test case for canary by cookie 2019-06-11 22:34:30 +09:00
s-shirayama
2b98297c1b Add unit test case for canary by weight 2019-06-11 22:34:24 +09:00
s-shirayama
b1af533b2b Add unit test case for balancer.route_to_alternative_balancer() 2019-06-11 22:34:05 +09:00
Kubernetes Prow Robot
04c12a354f Merge pull request #4169 from Shopify/refactor-sticky-balancer
simplify sticky balancer and fix a bug
2019-06-07 07:28:03 -07:00
Elvin Efendi
5df2cf80d6 bugfix: check all previously failing upstreams, not just the last one 2019-06-07 10:00:31 -04:00
Elvin Efendi
8e2087f12c simplify sticky balancer 2019-06-06 16:32:33 -04:00
Kubernetes Prow Robot
ef4a991f94 Merge pull request #4162 from stramel/patch-1
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
Michael Stramel
002c1236d0 Add "text/javascript" to compressible MIME types
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages, servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
Kubernetes Prow Robot
6378494a2d Merge pull request #4166 from Shopify/use-correct-type
Session Affinity ChangeOnFailure should be boolean
2019-06-06 08:52:14 -07:00
Elvin Efendi
2e14c18775 Session Affinity ChangeOnFailure should be boolean 2019-06-06 11:22:05 -04:00
Kubernetes Prow Robot
cd4962847c Merge pull request #4164 from Shopify/fix-file-mods
fix source file mods
2019-06-06 08:12:14 -07:00
Elvin Efendi
18bb52371f fix source file mods 2019-06-06 10:47:08 -04:00
Kubernetes Prow Robot
ff9bf44136 Merge pull request #4048 from fedunineyu/change-upstream-on-error-with-sticky-session
Change upstream on error when sticky session balancer is used
2019-06-06 07:22:17 -07:00
Kubernetes Prow Robot
a59451e5d1 Merge pull request #4160 from aledbf/fix-expire-metric
SSL expiration metrics cannot be tied to dynamic updates
2019-06-06 06:24:13 -07:00
Manuel Alejandro de Brito Fontes
f93670c2b2 SSL expiration metrics cannot be tied to dynamic updates 2019-06-05 11:04:27 -04:00
Manuel Alejandro de Brito Fontes
1dd5493404 Partially revert usage of kustomize for installation (#4159) 2019-06-05 10:59:38 -04:00
Kubernetes Prow Robot
185aa01505 Merge pull request #4153 from Niksko/use-regex-annotation
Add clarification on how to enable path matching
2019-06-04 19:05:53 -07:00
Nikolas Skoufis
d9e629d4da Add clarification on how to enable path matching
The fact that you need to explicitly add the annotation is easy to miss.
This makes this more explicit, while leaving the finer details to the
linked annotations document.
2019-06-05 11:14:50 +10:00
Manuel Alejandro de Brito Fontes
1962f02dae Update nginx (#4150)
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
Ionut Craciunescu
941863c26a update modsecurity to latest, libmodsecurity to v3.0.3 and owasp-scrs to v3.1.0 (#4140) 2019-06-04 12:13:40 -04:00
Kubernetes Prow Robot
6ba422aa46 Merge pull request #4135 from nicknovitski/deployment-api-appsv1
Use apps/v1 api group in e2e tests
2019-05-29 16:50:18 -07:00
Kubernetes Prow Robot
67aea883f5 Merge pull request #4133 from nicknovitski/parallel-psp-e2e-test
Run PodSecurityPolicy E2E test in parallel
2019-05-29 16:18:20 -07:00
Kubernetes Prow Robot
cc92e915d3 Merge pull request #4132 from zhucebuliaolongchuan/patch-1
Update README.md for external-auth Test 4
2019-05-29 14:40:22 -07:00
Nick Novitski
b0139b0b63 Run PodSecurityPolicy E2E test in parallel
Previously, this test modified a ClusterRole used by _every_ test.  It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.

Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
2019-05-29 14:13:04 -07:00
Nick Novitski
f186437cc1 Use apps/v1 api group in e2e tests 2019-05-29 12:12:45 -07:00
Chuan Long
782b56a5e6 Update README.md for external-auth Test 4
Title for Test 4 should be `secure service with valid auth header`. The current one is the same as Test 3.
2019-05-29 13:23:20 -05:00
Sergio Morales
d545251835 feature(collectors): Added services to collectorLabels and requests Countervec to capture the name of the kubernetes service used to serve the client request. 2019-05-27 11:19:42 -04:00
Kubernetes Prow Robot
a41710f201 Merge pull request #4101 from aledbf/reftactor-whitelist
Refactor whitelist from map to standard allow directives
2019-05-27 05:33:51 -07:00
Manuel Alejandro de Brito Fontes
1a6ea8c813 Refactor e2e test 2019-05-27 06:31:01 -04:00
Eugene Fedunin
4bb44f42a8 Added support for annotation session-cookie-change-on-failure
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.

Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
Manuel Alejandro de Brito Fontes
7d91eafcca Refactor whitelist from map to standard allow directives 2019-05-27 04:55:38 -04:00
Kubernetes Prow Robot
c13b8f39b8 Merge pull request #3803 from ElvinEfendi/use-table-nkeys
use nkeys for counting lua table elements
2019-05-27 01:41:51 -07:00