Manuel Alejandro de Brito Fontes
0dce5be743
Migrate ingress definitions from extensions to networking.k8s.io
2019-12-12 21:25:00 -03:00
Elvin Efendi
49ba53b7b6
regression test for duplicate hsts
2019-12-12 13:45:43 -05:00
Kamil Domański
16b5ad3c09
add e2e test for HTTP->HTTPS redirection
2019-12-09 15:56:21 +01:00
Manuel Alejandro de Brito Fontes
fd9e2b2214
Update nginx and e2e images ( #4805 )
2019-12-02 14:36:49 -03:00
Manuel Alejandro de Brito Fontes
46953ccb4d
Update nginx image and Go to 1.13.4 ( #4785 )
2019-11-29 15:20:18 -03:00
Manuel Alejandro de Brito Fontes
61d902db14
Remove Lua resty waf feature
2019-11-26 10:37:43 -03:00
Thomas Jackson
500b043f27
Don't use DNS resolution to "validate FQDN"
...
As the controller stands today this "validation" is done once per config load, which means if the DNS query fails for any reason the endpoint will remain dead until both (1) a change happens to the ingress and (2) the DNS resolution works. If the user configured the name we should just pass it through, this way the lua dns can attempt to re-query it at its leisure.
2019-10-13 13:16:47 -07:00
Kubernetes Prow Robot
fb025ab501
Merge pull request #4087 from MRoci/master
...
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
Andrea Spacca
e84c8cd705
ISSUE-4244 e2e test
2019-09-29 23:28:44 +02:00
MRoci
1ee081ccc8
test modsecurity-snippet
2019-09-28 09:54:10 +02:00
Manuel Alejandro de Brito Fontes
2bd8121338
Change default for proxy-add-original-uri-header
2019-09-25 10:57:31 -03:00
Elvin Efendi
fe2ea692a6
adjust tests to the new no-reload on cert update world
2019-09-25 06:59:47 -04:00
Elvin Efendi
799f0ae76d
more meaningful assertion for tls hsts test
2019-09-24 15:39:20 -04:00
A Gardner
786a3b6862
Add support for configmap of headers to be sent to external auth service
2019-09-24 10:53:23 -04:00
Kubernetes Prow Robot
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode
...
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
Kubernetes Prow Robot
846ff00363
Merge pull request #4560 from Shopify/basic-auth-map
...
Support configuring basic auth credentials as a map of user/password hashes
2019-09-16 07:52:39 -07:00
A Gardner
376b862c23
Add annotation to support map of user/pass pairs in basic auth
2019-09-13 11:33:33 -04:00
Manuel Alejandro de Brito Fontes
9af574a234
Remove the_real_ip variable
2019-09-12 20:01:33 -03:00
Manuel Alejandro de Brito Fontes
ce3e3d51c3
WIP Remove nginx unix sockets ( #4531 )
...
* Remove nginx unix sockets
* Use an emptyDir volume for /tmp in PSP e2e tests
2019-09-08 18:14:54 -03:00
Manuel Alejandro de Brito Fontes
1433cde9e6
Improve the time to run e2e tests
2019-09-05 11:46:53 -04:00
Manuel Alejandro de Brito Fontes
1304cb194f
Update nginx image to 0.92
2019-09-04 10:34:54 -04:00
Kubernetes Prow Robot
74031cc8b8
Merge pull request #4528 from aledbf/clean-docker
...
Cleanup of docker images
2019-09-03 18:04:58 -07:00
Manuel Alejandro de Brito Fontes
dc20551288
Cleanup of docker images
2019-09-03 19:10:40 -04:00
Manuel Alejandro de Brito Fontes
48c89cbe3c
Switch to official kind images ( #4527 )
2019-09-03 16:46:43 -04:00
Manuel Alejandro de Brito Fontes
c2935ca35c
Refactor health checks and wait until NGINX process ends
2019-09-01 15:31:27 -04:00
Manuel Alejandro de Brito Fontes
c85450c1e7
Remove hard-coded names from e2e test and use local docker dependencies ( #4502 )
2019-09-01 14:16:52 -04:00
Alexander Maret-Huskinson
9170591185
Added new affinity mode for maximum session stickyness. Fixes kubernetes/ingress-nginx#4475
2019-08-30 11:40:29 +02:00
Manuel Alejandro de Brito Fontes
fcd3054f13
Lint code using staticcheck ( #4471 )
2019-08-23 12:08:40 -04:00
Kubernetes Prow Robot
75d65bbd15
Merge pull request #4327 from leki75/proxyssl
...
Add proxy_ssl_* directives
2019-08-18 09:14:04 -07:00
Guangming Wang
3c05cc4225
cleanup: fix typos in framework.go
...
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-08-17 23:16:15 +08:00
Guangming Wang
8cf384b212
cleanup logging message typos in rewrite.go
...
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-08-16 23:36:24 +08:00
Gabor Lekeny
65b9e2c574
Merge branch 'master' of https://github.com/kubernetes/ingress-nginx into proxyssl
2019-08-16 06:21:53 +02:00
Manuel Alejandro de Brito Fontes
23ed3ba4c4
Fix file permissions to support volumes
2019-08-15 20:48:37 -04:00
Manuel Alejandro de Brito Fontes
816f4b0824
Fix service type external name using the name
2019-08-15 12:09:42 -04:00
Elvin Efendi
b21c721196
lua-shared-dicts improvements, fixes and documentation
2019-08-14 22:10:56 -04:00
Kubernetes Prow Robot
dd0fe4b458
Merge pull request #4422 from ElvinEfendi/lua-resolv-conf-search
...
teach lua about search and ndots settings in resolv.conf
2019-08-14 17:36:33 -07:00
Kubernetes Prow Robot
0d690fba1a
Merge pull request #4356 from aledbf/only-dynamic-mode
...
Only support SSL dynamic mode
2019-08-14 17:08:35 -07:00
Elvin Efendi
1be52afa8d
e2e test for service with incomplete external name
2019-08-14 18:03:30 -04:00
Gabor Lekeny
8a2a0e915a
Add e2e tests for proxyssl
2019-08-14 11:49:28 +02:00
Kubernetes Prow Robot
adef152db8
Merge pull request #4379 from diazjf/mirror
...
Allow Requests to be Mirrored to different backends
2019-08-13 17:52:24 -07:00
Elvin Efendi
d46b4148fa
Lua /etc/resolv.conf parser and some refactoring
2019-08-13 18:34:54 -04:00
Manuel Alejandro de Brito Fontes
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
Manuel Alejandro de Brito Fontes
8a9298ae27
Add helper to extract prometheus metrics in e2e tests
2019-08-13 12:53:40 -04:00
Kubernetes Prow Robot
8c472190d1
Merge pull request #4086 from jeroen92/issue-4038
...
Resolve #4038 , move X-Forwarded-Port variable to the location context
2019-08-09 08:07:25 -07:00
Manuel Alejandro de Brito Fontes
4a9b02bc03
Remove dynamic TLS records
2019-08-08 15:52:56 -04:00
tals
a2e667c082
lua shared dict from cm
...
lua shared dict teml test and update func sign
lua shared dict cm test
lua shared dict integration test
lua shared dict add cm parsing
lua shared dict change test header
2019-08-08 12:44:11 +03:00
Jeroen Schutrup
8dd912114e
Move X-Forwarded-Port variable to the location context
...
Resolves issue #4038 where the X-Forwarded-Port header would be set to the value of the https listening port if all of the following settings were satisfied:
- The ingress controller was started with a non-default HTTPS port set with the `--https-port` argument
- An ingress is created having:
- the `nginx.ingress.kubernetes.io/auth-url` annotation set
- TLS enabled
This commit solves this issue by moving the setting of the `pass_server_port` variable from the server, one level down to the location context.
2019-08-06 17:00:58 +02:00
Fernando Diaz
386486e969
Allow Requests to be Mirrored to different backends
...
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.
See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
2019-08-01 11:53:58 -05:00
Charle Demers
72271e9313
FastCGI backend support ( #2982 )
...
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
Kubernetes Prow Robot
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
...
feat: auth-req caching
2019-07-17 12:06:12 -07:00