Commit graph

401 commits

Author SHA1 Message Date
Moritz Johner
23504db770 feat: auth-req caching
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.

[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
Manuel Alejandro de Brito Fontes
d5c7fa8cfb
Fix scripts to be able to run tests in docker 2019-07-17 11:06:53 -04:00
E. Stuart Hicks
3b0c523e49 added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends 2019-07-08 14:32:00 -04:00
Elvin Efendi
08906ef8f2 add comment to the test 2019-07-04 18:39:29 -04:00
Elvin Efendi
e988217fdf e2e test for ewma 2019-07-03 16:25:53 -04:00
Elvin Efendi
964a484b2f GetLbAlgorithm helper func for e2e 2019-07-03 08:15:41 -04:00
Manuel Alejandro de Brito Fontes
004d0c8214
Fix go imports 2019-06-30 18:58:18 -04:00
Kubernetes Prow Robot
a2009484f7
Merge pull request #4249 from ElvinEfendi/trailing-dot
test to make sure dynamic cert works trailing dot in domains
2019-06-29 16:43:22 -07:00
Manuel Alejandro de Brito Fontes
975a63516d
Update kind to 0.4.0 2019-06-29 18:32:02 -04:00
Elvin Efendi
f771e7247a test to make sure dynamic cert works trailing dot in domains 2019-06-28 16:21:59 -04:00
Manuel Alejandro de Brito Fontes
591887089f
Add e2e test suite to detect memory leaks in lua 2019-06-27 22:05:52 -04:00
Manuel Alejandro de Brito Fontes
3268d79610
Update nginx image to 0.90 2019-06-26 18:46:56 -04:00
Manuel Alejandro de Brito Fontes
225f881ed0
Add e2e test for invalid secrets 2019-06-25 09:28:52 -04:00
Kubernetes Prow Robot
c8cbf0db29
Merge pull request #4227 from aledbf/lint
Fix misspelled and e2e check
2019-06-24 21:30:34 -07:00
Manuel Alejandro de Brito Fontes
85a848faaf
Fix misspelled and e2e check 2019-06-24 23:47:22 -04:00
Manuel Alejandro de Brito Fontes
d769c8a4d8
Update nginx image 2019-06-24 23:36:23 -04:00
Kubernetes Prow Robot
5dfc7e211f
Merge pull request #4221 from aledbf/upgrade-nginx-image
Switch to openresty image
2019-06-24 09:45:57 -07:00
Manuel Alejandro de Brito Fontes
dca5557c50
In case of errors running e2e tests, print the generated nginx.conf file 2019-06-23 22:51:39 -04:00
Manuel Alejandro de Brito Fontes
ca6b61f639
Update e2e tests for openresty 2019-06-23 22:51:39 -04:00
Manuel Alejandro de Brito Fontes
73be06960e
Update test image and binaries 2019-06-23 22:51:38 -04:00
Manuel Alejandro de Brito Fontes
5670e3d9de
Add e2e tests for grpc using https://grpcb.in 2019-06-18 23:44:10 -04:00
Manuel Alejandro de Brito Fontes
1ed6d89c7b
Add e2e test for service type=ExternalName 2019-06-17 23:12:24 -04:00
Manuel Alejandro de Brito Fontes
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package 2019-06-13 11:32:39 -04:00
Michael Stramel
686f2310e4 Add "text/javascript" to compressible MIME types
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages, servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
Manuel Alejandro de Brito Fontes
14a394fc9e
Update nginx (#4150)
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
Kubernetes Prow Robot
251f48b120
Merge pull request #4135 from nicknovitski/deployment-api-appsv1
Use apps/v1 api group in e2e tests
2019-05-29 16:50:18 -07:00
Nick Novitski
e1958b8272 Run PodSecurityPolicy E2E test in parallel
Previously, this test modified a ClusterRole used by _every_ test.  It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.

Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
2019-05-29 14:13:04 -07:00
Nick Novitski
d617e5abdc Use apps/v1 api group in e2e tests 2019-05-29 12:12:45 -07:00
Manuel Alejandro de Brito Fontes
c2227a058d
Refactor e2e test 2019-05-27 06:31:01 -04:00
Manuel Alejandro de Brito Fontes
c4597522bf
Refactor whitelist from map to standard allow directives 2019-05-27 04:55:38 -04:00
Manuel Alejandro de Brito Fontes
77f5e4decb
Update nginx image to 0.86 2019-05-26 11:28:35 -04:00
Kubernetes Prow Robot
dfa7f10fc9
Merge pull request #4055 from nicknovitski/kustomize
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
Manuel Alejandro de Brito Fontes
f63f0457be
Update e2e images (#4110) 2019-05-24 02:47:14 +02:00
Nick Novitski
51ad0bc54b Rearrange deployment files into kustomizations 2019-05-19 12:35:54 -07:00
Manuel Alejandro de Brito Fontes
d32079e69c
Allow to use a custom k8s version in e2e tests 2019-05-15 20:58:58 -04:00
Manuel Alejandro de Brito Fontes
87b730d5fe
Add binaries required by kubernetes-sigs/testing_frameworks 2019-05-15 17:17:32 -04:00
Manuel Alejandro de Brito Fontes
3dd1699637
Add dependencies for code generator 2019-05-14 20:15:49 -04:00
Manuel Alejandro de Brito Fontes
be2792c5f9
Refactor scripts to run e2e tests 2019-05-14 20:15:43 -04:00
Manuel Alejandro de Brito Fontes
7be1dccea7
Add option to run scripts in debug mode 2019-05-13 22:31:06 -04:00
Manuel Alejandro de Brito Fontes
16540a1dba
Run tests with only one worker 2019-05-13 22:30:21 -04:00
Manuel Alejandro de Brito Fontes
ebc50b5c68
Add image for prow jobs 2019-05-13 22:29:44 -04:00
Nick Novitski
5c26a72256 Don't try to create e2e runner rbac resources twice 2019-05-07 18:07:18 -07:00
Nick Novitski
8ea40bbcb9 fix typo: deployement->deployment 2019-05-07 16:16:06 -07:00
Kubernetes Prow Robot
b06e114177
Merge pull request #3506 from KoerberDigitalDevTeam/feature/extrenal-auth-security-opt-out
Improve the external authorization concept from opt-in to secure-by-default
2019-05-07 09:15:53 -07:00
Manuel Alejandro de Brito Fontes
b8fb09d7b3
Update go to 1.12.5, kubectl to 1.14.1 and kind to 0.2.1 (#4064) 2019-05-06 23:28:15 -04:00
okryvoshapka-connyun
8cc9afe8ee Added Global External Authentication settings to configmap parameters incl. addons 2019-05-03 12:08:16 +02:00
Anthony Ho
bd694bf3de add e2e coverage for multi auth 2019-04-18 10:32:15 -04:00
Manuel Alejandro de Brito Fontes
7283a01b9f
Update nginx image and Go to 1.12.4 (#4010) 2019-04-17 22:45:51 -04:00
Kubernetes Prow Robot
34734edc6e
Merge pull request #4005 from Shopify/proxy-next-upstream-timeout
Support proxy_next_upstream_timeout
2019-04-15 09:10:09 -07:00
Alex Kursell
ffeb1fe348 Support proxy_next_upstream_timeout 2019-04-15 11:08:57 -04:00
Elvin Efendi
b13432dbe0 adjust default ssl cert e2e test 2019-04-13 15:00:44 -04:00
Elvin Efendi
1ddf5d2752 regression test for dynamic cert related default-certificate issue 2019-04-09 22:11:21 -04:00
Elvin Efendi
107bec676a fix custom default backend test title 2019-04-09 20:24:45 -04:00
Manuel Alejandro de Brito Fontes
c9d069e64d
Update nginx image to 0.84 (#3969) 2019-04-06 12:30:35 -03:00
Kubernetes Prow Robot
39ecab8d5a
Merge pull request #3954 from Shopify/lb-configmap
Fix load-balance configmap value
2019-04-02 05:10:34 -07:00
Alex Kursell
4f819b6256 Fix load-balance configmap value 2019-04-01 15:55:36 -04:00
Kubernetes Prow Robot
b87cc5a1a6
Merge pull request #3786 from Shopify/rewrite-x-forwarded-prefix
Fix x-forwarded-prefix annotation
2019-03-31 16:18:32 -07:00
Elvin Efendi
87e962682f properly parse x-forwarded-host 2019-03-31 15:10:45 -04:00
Elvin Efendi
496ff07bf1 replace some of the Nginx configuration to Lua code 2019-03-31 12:04:52 -04:00
Alex Kursell
fdd445cb2a Fix e2e-tests 2019-03-29 16:25:25 -04:00
Alex Kursell
188295550c Simplify x-forwarded-prefix annotation 2019-03-29 16:25:25 -04:00
Manuel Alejandro de Brito Fontes
14a9e9f3fa
Update dependencies client-go to release-11.0 and kubernetes-1.14.0 2019-03-28 20:43:18 -03:00
Manuel Alejandro de Brito Fontes
3ec1028d0b
Fix dynamic SSL certificate for aliases and redirect-from-to-www 2019-03-28 16:29:11 -03:00
Kubernetes Prow Robot
e624fe171d
Merge pull request #3839 from perprogramming/bugfix/panic-on-multiple-non-matching-canary
Fix panic on multiple non-matching canary
2019-03-27 16:46:48 -07:00
Manuel Alejandro de Brito Fontes
f38f1d9d0e
Update nginx image 2019-03-26 17:28:44 -03:00
Gregor Noczinski
1bef3e75b2 Set X-Request-ID for the default-backend, too. 2019-03-22 11:33:11 +01:00
Kubernetes Prow Robot
ec81605cae
Merge pull request #3908 from aledbf/update-nginx
Update nginx image
2019-03-21 11:45:41 -07:00
Manuel Alejandro de Brito Fontes
3339db2cb5
Migrate e2e cluster to kind 2019-03-20 18:36:29 -03:00
Manuel Alejandro de Brito Fontes
0bd5f5e9a0
Update nginx image 2019-03-19 10:18:19 -03:00
Elvin Efendi
1d59e4f1fe enable dynamic SSL mode by default 2019-03-17 14:58:06 -04:00
Per Bernhardt
c995e13249 Improve text, error level, tests... 2019-03-12 15:57:36 +01:00
Alex Kursell
d3ac73be79 Remove session-cookie-hash annotation 2019-03-04 10:34:48 -05:00
Per Bernhardt
8a40e82ffb Fix panic on multiple non-matching canary 2019-03-04 12:30:59 +01:00
Manuel Alejandro de Brito Fontes
fbed06fd3c
Update nginx image 2019-03-01 09:18:45 -03:00
Alex Kursell
28d99c6d7d Set default for satisfy annotation to nothing 2019-02-26 15:05:45 -05:00
Manuel Alejandro de Brito Fontes
f899506b2b Update nginx image 2019-02-26 14:38:09 -03:00
Manuel Alejandro de Brito Fontes
51c6e950a3
Fix e2e test in osx 2019-02-26 12:46:38 -03:00
Mikhail Marchenko
8b3702c829 Enable access log for default backend
disable log on default_server
2019-02-26 11:14:31 +03:00
Kubernetes Prow Robot
bb7a3f3527
Merge pull request #3812 from ecosia/jg-customerrors-e2e-removeunused
Removes unused const from customhttperrors e2e test
2019-02-25 11:40:57 -08:00
jasongwartz
164b8590a3 Removes unused const from customhttperrors e2e test 2019-02-25 17:27:05 +01:00
Manuel Alejandro de Brito Fontes
11177c95ec Fix e2e tests 2019-02-25 12:37:20 -03:00
Kubernetes Prow Robot
d8ec96ca7d
Merge pull request #3730 from ecosia/jg-customerrors-defaultbackend
Changes CustomHTTPErrors annotation to use custom default backend
2019-02-25 07:22:07 -08:00
Kubernetes Prow Robot
8f5e7de623
Merge pull request #3800 from aledbf/refactor-e2e
Refactor e2e
2019-02-24 16:33:54 -08:00
Manuel Alejandro de Brito Fontes
5e249d3366
Refactor e2e tests to use the service ClusterIP 2019-02-24 20:04:07 -03:00
jasongwartz
3865e30a00 Changes CustomHTTPErrors annotation to use custom default backend
Updates e2e test

Removes focus from e2e test

Fixes renamed function

Adds tests for new template funcs

Addresses gofmt

Updates e2e test, fixes custom-default-backend test by creating service

Updates docs
2019-02-24 22:48:56 +01:00
Kubernetes Prow Robot
7b2495047f
Merge pull request #3781 from zoumo/proxy-buffer-number
feat: configurable proxy buffers number
2019-02-22 12:11:46 -08:00
Jim Zhang
dc63e5d185 fix: rename proxy-buffer-number to proxy-buffers-number 2019-02-22 10:21:17 +08:00
Manuel Alejandro de Brito Fontes
8b6e4d4697
Use UsePortInRedirects only if enabled 2019-02-21 17:48:45 -03:00
Jim Zhang
c92d29d462 feat: configurable proxy buffer number 2019-02-20 18:05:09 +08:00
Kubernetes Prow Robot
15d5ef95ef
Merge pull request #3740 from Shopify/session-annotation-reload
Fix ingress updating for session-cookie-* annotation changes
2019-02-19 15:14:21 -08:00
Alex Kursell
c180a0998b Fix session-cookie-* annotation reloading 2019-02-19 17:27:08 -05:00
Anthony Ho
ec04852526 Create custom annotation for satisfy "value" 2019-02-19 15:58:35 -05:00
Kubernetes Prow Robot
201718ec0f
Merge pull request #3775 from kppullin/fix-l4-dns-resolve-failures
Fix DNS lookup failures in L4 services
2019-02-19 11:11:48 -08:00
Kevin Pullin
3ac57097f6 Add 'waitForLuaSync' sleep in external name TCP test 2019-02-17 20:32:27 -08:00
Kevin Pullin
f6aded2c51 Fix DNS failures in L4 services 2019-02-17 14:12:10 -08:00
Kubernetes Prow Robot
b72dfa99d8
Merge pull request #3765 from ElvinEfendi/custom-http-error-bug-fix
simplify customhttperrors e2e test and add regression test and fix a bug
2019-02-14 06:51:33 -08:00
Elvin Efendi
1959191cf3 simplify customhttperrors e2e test and add regression test 2019-02-14 08:11:18 -05:00
Alex Kursell
7e3304d4f9 Apply annotations to default location 2019-02-11 14:32:49 -05:00
Alex Kursell
9534f8bc43 Add debug tool to image 2019-02-08 11:25:04 -05:00
Kubernetes Prow Robot
17e788b8e1
Merge pull request #3684 from aledbf/health
Replace Status port using a socket
2019-02-06 13:49:08 -08:00