DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
562 commits 4 branches 217 tags 166 MiB
Commit graph

373 commits

Author SHA1 Message Date
Prashanth B
5306ca4eb9 Merge pull request #1384 from atombender/issue_1883 
Unset Authorization header when proxying
 2016-07-20 10:54:57 -07:00
Prashanth B
eabad1c990 Merge pull request #1338 from aledbf/ssl-default-backend 
[nginx-ingress-controller]: Add HTTPS default backend
 2016-07-20 10:35:15 -07:00
Prashanth B
fe59e29f5e Merge pull request #1336 from aledbf/skip-ingress-rules 
[nginx-ingress-controller]: Add annotation to skip ingress rule
 2016-07-20 10:33:17 -07:00
Manuel de Brito Fontes
a38f2b21a1 Mitigate HTTPoxy Vulnerability 2016-07-20 09:55:46 -04:00
Manuel de Brito Fontes
d3d6c879d5 Refactor nginx certificate creation. 2016-07-18 17:08:00 -04:00
Alexander Staubo
5effb7b4e3 Unset Authorization header when proxying. 2016-07-17 22:02:02 -04:00
Prashanth B
ce7085d277 Merge pull request #1289 from simonswine/docs-kube-lego 
ingress: nginx suggest kube-lego for automated cert management
 2016-07-15 17:51:03 -07:00
Prashanth B
1aaa63e0be Merge pull request #1350 from aledbf/nginx-backlog 
[nginx-ingress-controller]: Improve performance (listen backlog=net.core.somaxconn)
 2016-07-12 08:18:53 -07:00
Manuel de Brito Fontes
b4f1b7c0f5 Show warning in case of low number of connections 2016-07-12 00:40:45 -04:00
Manuel de Brito Fontes
a34124be9d Update gce NodeCondition parameter 2016-07-11 23:43:36 -04:00
Manuel de Brito Fontes
8b25cc67a5 Improve nginx performance to match listen backlog with net.core.somaxconn 2016-07-11 23:04:21 -04:00
Prashanth B
cce520a950 Merge pull request #1324 from bprashanth/docs 
GCE Ingress docs update
 2016-07-08 20:07:27 -07:00
Manuel de Brito Fontes
8f4efb4e3d Add HTTPS default backend 2016-07-08 17:20:14 -04:00
Manuel de Brito Fontes
89bbb8d4ee Add annotation to skip ingress rule 2016-07-08 17:01:40 -04:00
Prashanth Balasubramanian
94ea4ab247 GCE Ingress docs update 2016-07-08 11:15:27 -07:00
Prashanth B
ba964cdcda Merge pull request #1299 from Nalum/patch-2 
Formatting fix
 2016-07-06 13:47:26 -07:00
Manuel de Brito Fontes
9b762b7d54 Release 0.8.1 2016-07-06 12:22:07 -04:00
Prashanth B
a7570a8b37 Merge pull request #1315 from fcvarela/master 
Addresses #1314 [nginx-ingress-controller ssl nginx reload abort]
 2016-07-06 09:10:53 -07:00
Filipe Varela
9285335ce3 Fixes #1314 
Removed comment to be consistent w/ rest of code

Fixes typo and string concat
 2016-07-06 12:35:08 +01:00
Manuel de Brito Fontes
a2d9c6e48b Fix duplicated real_ip_header 2016-07-05 12:37:54 -04:00
Prashanth B
15f199c84a Merge pull request #1259 from aledbf/release-0.8 
[nginx-ingress-controller] Release 0.8
 2016-07-01 20:12:21 -07:00
Manuel de Brito Fontes
6d03a101be Add mime aplication/x-javascript to the gzip list and show the defaults in configuration.md 2016-07-01 21:15:54 -04:00
Prashanth B
0d5917e6a4 Merge pull request #1296 from Nalum/patch-1 
Fix formatting
 2016-07-01 17:23:50 -07:00
Manuel de Brito Fontes
0bcfcef8f8 Release 0.8 2016-07-01 19:18:45 -04:00
Manuel de Brito Fontes
09d7b756db Add support for dynamic TLS records and spdy 2016-07-01 14:07:48 -04:00
Luke Mallon
cd2e2b0717 Formatting fix 2016-06-30 15:12:34 +01:00
Luke Mallon
c398b66aa9 Fix formatting 
Fix the formatting of this README
 2016-06-30 09:53:28 +01:00
Prashanth Balasubramanian
8bbf869030 Add an annotation to ignore non-gce ingresses 2016-06-29 15:49:02 -07:00
Prashanth Balasubramanian
cb05e7b18e Don't adopt complex http probes for health checks 2016-06-29 15:02:27 -07:00
Prashanth Balasubramanian
58d5638888 Firewall updates only on port change 2016-06-29 15:02:27 -07:00
Prashanth Balasubramanian
5db8389fb3 Rate limit requeues on error 2016-06-29 15:02:27 -07:00
Prashanth Balasubramanian
acf87ef9d5 Pass in nil instead of the interface 2016-06-29 15:02:22 -07:00
Christian Simon
7303019de1 Suggest kube-lego for automated cert management 2016-06-29 09:30:03 +02:00
Manuel de Brito Fontes
26fd12a81c Avoid sync without a reachable master 2016-06-23 10:38:08 -04:00
Prashanth B
bf9ea5eec4 Revert "[nginx-ingress-controller]: Avoid sync without a reachable master" 2016-06-22 22:56:46 -07:00
Prashanth B
7e8760b9db Merge pull request #1233 from aledbf/avoid-sync 
[nginx-ingress-controller]: Avoid sync without a reachable master
 2016-06-22 22:44:12 -07:00
Prashanth B
db825411fb Merge pull request #1253 from aledbf/use-delayed-queue 
[nginx-ingress-controller]: Use delayed queue
 2016-06-22 22:40:16 -07:00
Prashanth B
b9740c96d9 Merge pull request #1130 from aledbf/improve-docs 
[nginx-ingress-controller] Improve docs and examples
 2016-06-22 22:37:43 -07:00
Manuel de Brito Fontes
a153187ce7 Use delayed queue 2016-06-22 17:48:13 -04:00
Piotr Szczesniak
72fe8dc293 Merge pull request #1249 from bprashanth/ing 
Reduce number of backends in basic ingress example
 2016-06-22 21:28:39 +02:00
Prashanth B
b728a0cbd5 Merge pull request #1239 from aledbf/conditional-log 
[nginx-ingress-controller]: Add support for conditional log of urls
 2016-06-22 10:47:41 -07:00
Manuel de Brito Fontes
56a2bc68ab Change annotation name secure-upstreams to secure-backends 2016-06-22 12:34:45 -04:00
Prashanth Balasubramanian
834ddb6813 Quota modification 2016-06-22 08:58:04 -07:00
Manuel de Brito Fontes
4335d831a9 Improve docs 2016-06-22 08:10:05 -04:00
Prashanth Balasubramanian
9bb2aa7d8f Fix log statement 2016-06-21 15:07:11 -07:00
Prashanth Balasubramanian
6fa9fd2828 Bump up image version for glbc 2016-06-21 15:00:04 -07:00
Prashanth Balasubramanian
423433bc5f Update image on ingress example 2016-06-20 15:18:34 -07:00
Manuel de Brito Fontes
3cbe01767f Add support for conditional log of urls 2016-06-18 18:04:07 -04:00
Manuel de Brito Fontes
ed41a706b9 Avoid sync without a reachable master 2016-06-17 19:13:52 -04:00
Manuel de Brito Fontes
e68aa3806a Fix stats by country in nginx status page 2016-06-17 18:26:08 -04:00
Cory Klein
57c0eab11d Fix typo "does no" -> "does not" 2016-06-15 12:00:48 -06:00
Prashanth B
5d49051168 Merge pull request #1144 from aledbf/ip-whitelisting 
[nginx-ingress-controller] Add cidr whitelist support
 2016-06-13 18:34:20 -07:00
Manuel de Brito Fontes
17e42ed902 Add example 2016-06-13 14:22:03 -04:00
Manuel de Brito Fontes
e792e940b2 Add ip/cidr white list support 2016-06-09 17:59:46 -04:00
Manuel de Brito Fontes
b1a17c565a Fix nginx rewrite rule order 2016-06-09 17:08:29 -04:00
Prashanth B
b395b714be Merge pull request #1133 from bprashanth/ubernetes_healthchecks 
Ubernetes multizone and custom healthchecks
 2016-06-09 13:17:38 -07:00
Prashanth Balasubramanian
61558f4d19 Get rid of default-zone everywhere. 2016-06-08 11:24:06 -07:00
Christian Simon
3ae80fd3cc ingress: adds configurable SSL redirect nginx controller 
* add global value to config map
* add per ingress value as annotation to ingress resources
 2016-06-05 15:30:09 +01:00
Christian Simon
08a05db93c Refactor nginx config into own package 2016-06-05 15:29:59 +01:00
Prashanth Balasubramanian
3bed62f51e Forget oldSSL cert after first cleanup 2016-06-03 10:44:55 -07:00
Prashanth Balasubramanian
9abd4e0ea6 append / to healthcheck url 2016-06-03 10:39:29 -07:00
Prashanth Balasubramanian
22c6e5ddd7 Unittests 2016-06-03 10:39:29 -07:00
Prashanth Balasubramanian
f84ca54831 Readiness probe health check 2016-06-03 10:39:29 -07:00
Prashanth Balasubramanian
32ac61e7e3 Teach l7 controller about zones 2016-06-03 10:39:29 -07:00
Christian Simon
00b2180a8f ingress: nginx controller watches referenced tls secrets 
* reload certificates on change
 2016-06-03 16:53:21 +01:00
Manuel de Brito Fontes
74b66beda9 Add support for services running ssl 2016-06-02 17:39:13 -04:00
Manuel de Brito Fontes
ae52257c3a Watch for updates in configuration configmaps 2016-06-02 17:39:13 -04:00
Manuel de Brito Fontes
71ca55440b Fix lint errors 2016-06-02 17:39:12 -04:00
Manuel de Brito Fontes
0b031b9894 Update examples 2016-06-02 17:39:12 -04:00
Manuel de Brito Fontes
a4a1491789 Add description for options in custom configuration 2016-06-02 17:39:12 -04:00
Manuel de Brito Fontes
568844913a Bump up nginx controller to 0.7 2016-06-02 17:39:12 -04:00
Manuel de Brito Fontes
6b841edff0 Address comments. Move auth and healthcheck inside nginx package 2016-05-31 14:34:04 -04:00
Manuel de Brito Fontes
221b823ca7 Use authentication and add example 2016-05-31 14:26:13 -04:00
Manuel de Brito Fontes
0d5ba276de Allow authentication in Ingress rules 2016-05-31 14:25:39 -04:00
Manuel de Brito Fontes
e603976721 Remove blank lines from template rendering 2016-05-31 13:43:36 -04:00
Manuel de Brito Fontes
ccaf15cdd4 Add support for rate limiting in ingress rule locations 2016-05-31 13:34:09 -04:00
Manuel de Brito Fontes
f8ea58882b Add option to append a base tag in the head 2016-05-31 12:30:35 -04:00
Manuel de Brito Fontes
95e85b57e3 Add support for rewrite 2016-05-31 12:25:50 -04:00
Manuel de Brito Fontes
6968e23f8d Add support for geoip in stats 2016-05-30 18:31:04 -04:00
Manuel de Brito Fontes
675ce396ac Allow custom health checks 2016-05-27 21:31:21 -03:00
Prashanth B
a38fcda255 Merge pull request #926 from aledbf/configure-errors 
[nginx-ingress-controller] Custom errors should be optional
 2016-05-27 18:10:16 -07:00
Prashanth Balasubramanian
5d83fa45c2 Pipe through custom GCE config file path 2016-05-27 14:55:08 -07:00
Prashanth Balasubramanian
c2696bdd36 New UID allocation logic 2016-05-27 14:54:38 -07:00
Prashanth Balasubramanian
24fb4b70aa Cluster UID store/retrieval 2016-05-27 14:54:38 -07:00
Manuel de Brito Fontes
28f982845d Change errors to a list of codes 2016-05-26 11:52:17 -03:00
Manuel de Brito Fontes
5faa855e66 Custom errors should be optional 2016-05-26 11:52:17 -03:00
Prashanth B
e93d8d8152 Merge pull request #1019 from aledbf/update-echoheaders 
Update echoheaders
 2016-05-25 21:03:34 -07:00
Manuel de Brito Fontes
2d7acf33c4 Enable configuration to disable http2 2016-05-25 23:50:15 -03:00
Prashanth B
23d16a4451 Merge pull request #1054 from aledbf/cert-checksum 
[nginx-ingress-controller] Add ssl certificate checksum to template
 2016-05-25 20:46:03 -07:00
Manuel de Brito Fontes
c4228a150f Add ssl certificate checksum to template 2016-05-25 23:05:23 -03:00
Manuel de Brito Fontes
d0401b3901 Remove loadBalancer ip on shutdown 2016-05-24 14:27:37 -03:00
Spencer Smith
8a652e94f5 missed the new proxy-protocol example 2016-05-20 15:41:12 -04:00
Spencer Smith
430e9328a1 bump makefile and rc specifications to v0.62 for a new build 2016-05-20 15:22:30 -04:00
Manuel de Brito Fontes
076de3e8a7 Update references to 1.3 2016-05-19 16:13:10 -03:00
Prashanth Balasubramanian
0d4f49e50e Change int <->int32 for godeps 2016-05-09 12:06:09 -07:00
Prashanth B
dba1b6005a Merge pull request #893 from aledbf/custom-errors-example 
NGINX Ingress controller - Add example of custom error pages in nginx ingress controller
 2016-05-08 14:35:34 -07:00
Christian Simon
ca53e1efb4 Add docs/examples for proxy_protocol 2016-05-06 09:27:30 +01:00
Prashanth B
2db2324c6c Merge pull request #898 from aledbf/sort-locations 
NGINX Ingress controller Sort locations
 2016-05-04 08:38:01 -07:00
Manuel de Brito Fontes
3e3de84836 Location / must be the last one 2016-05-04 09:05:34 -03:00
Manuel de Brito Fontes
2e5e341ef0 Add example of custom error pages in nginx ingress controller 2016-05-03 23:58:54 -03:00
Prashanth Balasubramanian
dabfa9f131 Bump up nginx controller to 0.61 2016-05-03 10:27:35 -07:00
Prashanth Balasubramanian
7e8c051e2c Fix nginx ingress unittests. 2016-05-02 15:57:58 -07:00
Prashanth B
e049275a82 Merge pull request #849 from simonswine/bug-overwrite-true-with-configmamp 
Fix nginx ingress controller bug around config map merging
 2016-05-02 15:10:17 -07:00
Prashanth B
496ace4d3a Merge pull request #766 from aledbf/nginx-tls 
Add support for named port, better docs for TLS nginx Ingress
 2016-05-02 09:01:55 -07:00
Manuel de Brito Fontes
96a66aa6fa Only update service annotations if it contains named ports 2016-05-02 12:00:34 -03:00
Manuel de Brito Fontes
4d25306b52 Allow custom default server when host is empty in ingress rule 2016-05-01 19:08:37 -03:00
Andrew Johnstone
1a239ef2ae fixes #874 
non-ascii character used.
 2016-05-01 18:19:18 +01:00
Manuel de Brito Fontes
b086a686dd Allow custom nginx templates 2016-04-30 12:34:33 -03:00
Manuel de Brito Fontes
996c769080 Simplify port mapping of endpoints 2016-04-29 15:56:00 -03:00
Manuel de Brito Fontes
8bf7007c40 Add support for sticky sessions 2016-04-28 11:37:13 -03:00
Manuel de Brito Fontes
a86a682429 Fix HSTS 2016-04-28 00:30:49 -03:00
Manuel de Brito Fontes
102c2eeaa4 Avoid iteration in pods during update of service annotations 2016-04-27 23:28:21 -03:00
Manuel de Brito Fontes
996e19cdb8 Use Ingress creation and update events instead services to reduce pod queries 2016-04-27 23:28:20 -03:00
Manuel de Brito Fontes
107bf1837b Bump version 2016-04-27 23:28:20 -03:00
Manuel de Brito Fontes
5663c725be Make optional redirect to SSL 2016-04-27 23:28:20 -03:00
Manuel de Brito Fontes
102c056b67 Add header X-Forwarded-Port 2016-04-27 23:28:19 -03:00
Manuel de Brito Fontes
16b4af504b Fix issues with named ports 2016-04-27 23:28:19 -03:00
Manuel de Brito Fontes
f05eec6781 Fix https port 2016-04-27 23:28:19 -03:00
Manuel de Brito Fontes
87297ade32 Check for valid PEM content 2016-04-27 23:28:18 -03:00
Manuel de Brito Fontes
724a829eae Detect path collisions in Ingress rules 2016-04-27 23:28:18 -03:00
Manuel de Brito Fontes
64791c35f0 Add complete TLS example in nginx Ingress controller 2016-04-27 23:28:18 -03:00
Christian Simon
94e6702385 Fix nginx ingress controller bug around config map merging 
* a config map bool value of false cannot overwritte a true value from
   defaults
 * implement merging in ReadConfig
 * remove helper function merge
 * adds tests to ensure config is read properly
 2016-04-26 17:19:06 +01:00
Prashanth Balasubramanian
17b106133b Update nginx controller for Godeps 2016-04-21 11:46:23 -07:00
Prashanth Balasubramanian
d3a51031c3 Bump version 2016-04-21 11:46:23 -07:00
Prashanth Balasubramanian
fc6d9a47fd Update certificates on secret update 2016-04-21 11:46:23 -07:00
Prashanth Balasubramanian
fe026b73f0 Add a use-real-cloud flag to allow the controller to run on the master 2016-04-21 11:46:23 -07:00
Prashanth Balasubramanian
8084341920 Simpler firewall rules 2016-04-21 11:46:23 -07:00
Prashanth Balasubramanian
40a9eb0ba2 Add a multi-tls example. 2016-04-13 10:08:48 -07:00
Prashanth Balasubramanian
71845f3b89 Parse cmdline flags so we get --v 2016-04-11 18:28:27 -07:00
Prashanth Balasubramanian
5c8a25c833 Add running-in-cluster=false option. 2016-04-10 18:17:27 -07:00
Prashanth Balasubramanian
b7e8109a6d Add an all-in-one rc.yaml 2016-04-10 16:03:06 -07:00
Manuel de Brito Fontes
49c3af2c17 Add git information during build 2016-04-10 18:49:51 -03:00
Manuel de Brito Fontes
cf263c1390 Wait until the pod it's running before getting information about it 2016-04-10 18:38:48 -03:00
Manuel de Brito Fontes
0c2e199833 Allow traffic to default server _ 2016-04-10 18:38:48 -03:00
Prashanth B
b658ba8cac Merge pull request #706 from joonathan/patch-1 
Updated with correction for Ingress TLS spec
 2016-04-06 10:09:26 -07:00
Prashanth Balasubramanian
2afc21c021 Bump up glbc version. 2016-04-04 14:42:18 -07:00
Prashanth Balasubramanian
73afef4bec Retry GCE client creation. 2016-04-04 14:09:31 -07:00
Prashanth Balasubramanian
8d59739bb1 List from cloud and resync InMemoryPool. 2016-04-04 14:03:38 -07:00
Prashanth Balasubramanian
ba26bcabf5 Single sync error. 2016-04-04 14:03:38 -07:00
Prashanth Balasubramanian
5b2de6e40b Simplify urlmap update logic. 2016-04-04 14:03:38 -07:00
Joonathan Mägi
b6ccc1f4d9 Updated with correction for Ingress TLS spec 
Fix for `error validating data: expected type array, for field spec.tls, got map; if you choose to ignore these errors, turn validation off with --validate=false`
 2016-04-04 19:04:32 +03:00
Prashanth Balasubramanian
3464d1c5e3 Readme for tls example. 2016-04-03 22:24:36 -07:00
Prashanth B
f22e6d2690 Merge pull request #681 from aledbf/add-lb-status 
Update Ingress status information in nginx controller
 2016-04-01 12:00:42 -07:00
Manuel de Brito Fontes
0a71f4911b Add test to verify SSL certificate creation 2016-04-01 15:15:29 -03:00
Manuel de Brito Fontes
2ca6c8256b Update terminationGracePeriodSeconds in examples 2016-03-31 17:14:54 -03:00
Manuel de Brito Fontes
60e2e5f9ad Avoid sync Ingress updates 2016-03-31 17:14:54 -03:00
Prashanth Balasubramanian
83643b199c Clarify default backend creation. 2016-03-31 12:31:23 -07:00
Manuel de Brito Fontes
2632fe566b Update Ingress status information in nginx controller 2016-03-31 00:06:36 -03:00
Manuel de Brito Fontes
7abc7a77f6 Add configuration for retries in non-idempotent requests 2016-03-30 16:32:56 -03:00
Manuel de Brito Fontes
c9f8a06399 Add ump load balancing and naxsi as WAF. Update nginx to 1.9.13 2016-03-29 23:22:44 -03:00
Prashanth B
a06f0a707e Merge pull request #642 from aledbf/restrict-nginx-status 
Improve nginx-ingress-controller documentation.
 2016-03-29 15:17:35 -07:00
Manuel de Brito Fontes
045619b2ee Remove examples from the main README.md 2016-03-29 19:15:03 -03:00
Prashanth B
af4e6fafa5 Merge pull request #563 from bprashanth/ingress_static_ip 
Allow a user specified global static ip via annotation.
 2016-03-28 08:37:08 -07:00
Prashanth B
8a03c2385f Merge pull request #647 from bprashanth/ing_docs 
Clarify firewall rule doc.
 2016-03-27 18:39:22 -07:00
Manuel de Brito Fontes
b7dee6f95c Rename controller to nginx 2016-03-27 22:30:58 -03:00
Prashanth Balasubramanian
58882f25cb Clarify firewall rule doc. 2016-03-27 18:25:53 -07:00
Manuel de Brito Fontes
41c34bd9e8 Improve documentation. Add flag to enable vts status module 2016-03-27 22:13:20 -03:00
Prashanth Balasubramanian
812d0314c1 Fix some typos in nginx README.md 2016-03-25 18:45:36 -07:00
Manuel de Brito Fontes
13c21386e2 Improve event handling using a workqueue 2016-03-25 15:34:44 -03:00
Manuel de Brito Fontes
f5892e06fe Implement HealthzChecker interface. Add flag to allow profiling 2016-03-24 03:06:21 -03:00
Manuel de Brito Fontes
d9934ec4db Configure nginx using a ConfigMap 2016-03-24 03:06:20 -03:00
Manuel de Brito Fontes
28f9cb0b2b Remove dns from nginx. Use upstreams for default backend service 2016-03-24 03:06:20 -03:00
Manuel Alejandro de Brito Fontes
9b142b56f8 Update godeps 2016-03-24 03:06:20 -03:00
Manuel de Brito Fontes
ffe6baa14c Add ssl certificate verification 2016-03-24 03:06:19 -03:00
Manuel de Brito Fontes
5ed462db09 Cleaner Ingress processing code 2016-03-24 03:06:19 -03:00
Manuel de Brito Fontes
6cb0e41737 Remove custom ssl code and add TLS support in Ingress rules 2016-03-24 03:06:18 -03:00
Manuel de Brito Fontes
5feb452ce4 Add helper to verify if the configuration file changed 2016-03-23 19:03:57 -03:00
Manuel de Brito Fontes
cad814cbb3 Use nginx upstreams and reload only if configuration changes 2016-03-23 19:03:57 -03:00
Prashanth Balasubramanian
d0a15b1267 Add TLS section to GLBC docs, and BETA_LIMITATIONS 2016-03-18 14:25:43 -07:00
Prashanth Balasubramanian
3ee943d434 Allow a user specified global static ip via annotation. 2016-03-14 11:06:43 -07:00
Manuel de Brito Fontes
98f03b789a Check if the dns add-on is working properly and skip invalid TCP services 2016-03-06 23:20:23 -03:00
Manuel de Brito Fontes
a87efce5c2 Allow nginx Ingress controller run as DaemonSet 2016-02-27 12:17:54 -03:00
Prashanth Balasubramanian
3da4e74e5a git mv Ingress ingress 2016-02-26 16:55:24 -08:00