Commit graph

125 commits

Author SHA1 Message Date
Nick Sardo
16a213c076 Merge pull request #994 from freehan/revendor-godep
Revendor godep
2017-07-26 17:32:18 -07:00
Chance Zibolski
8cd18bc205 examples/nginx/rbac: Give access to own namespace
Even with `--force-namespace-isolation`, nginx-ingress-controller still queries for it's own namespace, so give it access to querying namespaces within it's namespace in the nginx-ingress-role.
2017-07-20 16:10:39 -07:00
Manuel de Brito Fontes
53dd434792 Update examples 2017-07-20 10:43:09 -07:00
Manuel de Brito Fontes
0d4bf15cb0 Add nginx basic auth example 2017-07-16 16:22:08 -04:00
Manuel de Brito Fontes
f4fe72a247 Release nginx 0.9.0-beta.11 2017-07-15 13:56:38 -04:00
Clayton O'Neill
d19b0b2606 Fix missing hyphen in yaml for nginx RBAC example 2017-07-14 10:53:56 -04:00
Manuel de Brito Fontes
9dec76acda Fix nginx ingress controller release 0.9-beta.9 2017-06-30 10:20:10 -04:00
Manuel de Brito Fontes
796aa945f0 Release nginx ingress controller 0.9-beta.9 2017-06-29 20:00:08 -04:00
Manuel de Brito Fontes
2bc507c2d4 Add example of TLS termination using a classic ELB 2017-06-28 17:36:39 -04:00
TheCodeAssassin
e1ee583b3a Update README.md
Small typo fix
2017-06-16 16:42:02 +02:00
Manuel de Brito Fontes
4d4ece1d89 Release nginx ingress controller 0.9-beta.8 2017-06-13 22:22:21 -04:00
Manuel de Brito Fontes
8a8e955b64 Update dummy controller interface 2017-06-11 15:59:44 -04:00
Michael Grosser
ec6efbd9d3 Introduce working example of nginx controller with rbac 2017-06-08 06:34:47 +00:00
Nick Sardo
8cd9a5a98a Merge pull request #786 from aledbf/update-echoheaders
Update echoserver image version in examples
2017-06-06 16:38:48 -07:00
Andrey Arapov
4618fd2f64
rbac-nginx: resourceNames cannot filter create verb 2017-06-03 11:28:28 +02:00
Jan Weitz
cf4ad26d3c Fix #798 - RBAC for leader election
Using gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.7
the nginx-controller needs to handle leader-election via configmaps.

To perform the leader-election the nginx-controller needs to have the
appropiate RBAC permissions.

Previously to this fix, the following errors occured:

-  cannot get configmaps in the namespace "NAMESPACE_PLACEHOLDER". (get configmaps ingress-controller-leader-nginx)
- initially creating leader election record: User "system:serviceaccount:NAMESPACE_PLACEHOLDER" cannot create configmaps in the namespace "NAMESPACE_PLACEHOLDER". (post configmaps)

fix ingress rbac roles

There was 2 things that the current IC (0.9 beta7) needs.

The ClusterRole was missing `get nodes`:

```
RBAC DENY: user "system:serviceaccount:kube-system:nginx-ingress-controller" groups [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] cannot "get" resource "nodes" named "xxx" cluster-wide
```

The Role was missing `update configmaps`:

```RBAC DENY: user "system:serviceaccount:kube-system:nginx-ingress-controller" groups [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] cannot "update" resource "configmaps" named "ingress-controller-leader-nginx" in namespace "kube-system"```

removed update configmap because of #798

rebased on master, moved get nodes to own rule

added get nodes to cluster permissions
2017-06-02 17:57:15 +02:00
明扬
721b228cef typo 2017-05-29 22:32:48 +08:00
Manuel de Brito Fontes
b84fc350ee Update echoserver image version in examples 2017-05-28 17:19:34 -04:00
Manuel de Brito Fontes
6563330d2b Release nginx ingress controller 0.9-beta.7 2017-05-26 15:10:07 -04:00
Manuel Alejandro de Brito Fontes
176a50ca6e Merge pull request #764 from chentao1596/example-copyright
Correct the format of 'copyright'
2017-05-25 07:45:51 -04:00
chentao1596
11eb7dff98 correct the wording of 'copyright' 2017-05-25 15:14:47 +08:00
Nick Sardo
0018fa5b15 Merge pull request #763 from aledbf/release-beta-6
Release nginx ingress controller 0.9-beta.6
2017-05-24 18:02:29 -07:00
Manuel de Brito Fontes
178321b1fe Release nginx ingress controller 0.9-beta.6 2017-05-24 20:14:49 -04:00
Joao Morais
37f8c8bb40 Add ConfigureFlags() on controller interface 2017-05-24 21:03:52 -03:00
Steve Kallestad
d7c999c970 added rbac example discussed in kubernetes/ingress issue #266 2017-05-23 09:58:53 -07:00
zouyee
7dbde0b369 update readme about vts metrics 2017-05-17 11:05:04 +08:00
Manuel Alejandro de Brito Fontes
07647fd313 Merge pull request #715 from olvesh/master
Corrected annotation ex `signin-url` to `auth-url`
2017-05-14 16:03:59 -04:00
Olve S. Hansen
4e94069bb9 Corrected annotation ex signin-url to auth-url 2017-05-14 21:00:09 +02:00
Manuel Alejandro de Brito Fontes
186615daf0 Merge pull request #703 from jcmoraisjr/jm-haproxy-configmap
HAProxy deployment doc improvements
2017-05-11 10:51:35 -03:00
tobilarscheid
9c56c72464 fix header name 2017-05-11 08:04:17 +02:00
Joao Morais
4c753fc51f Add configmap on deployment instructions 2017-05-10 22:01:45 -03:00
Joao Morais
f1a0119b22 deploy web app as an optional step on haproxy deploy 2017-05-10 22:00:29 -03:00
tobilarscheid
8d296109d4 Document passing of ssl_client_cert to backend 2017-05-10 23:29:13 +02:00
chentao1596
5851e355d7 add protocols/UDP example 2017-05-05 17:06:42 +08:00
Manuel Alejandro de Brito Fontes
93e82670bd Merge pull request #561 from caiyixiang/haproxy_custom_configuration
add a example for haproxy_custom_configuration
2017-05-03 07:58:55 -03:00
caiyixiang
baf3253bd2 add a example for haproxy_custom_configuration
fix some error
2017-05-03 14:12:46 +08:00
Luit van Drongelen
ff72c4f1e6 Fix error check in examples/custom-controller
Fixes #669
2017-04-28 13:57:46 +02:00
Manuel de Brito Fontes
83cb03b51c Release 0.9-beta.5 2017-04-27 20:28:05 -03:00
Manuel de Brito Fontes
5684c82d6c Release 0.9-beta.4 2017-04-24 22:51:49 -03:00
Arjan Schaaf
4c54a7be03 ConfigMap with proxy-set-headers not required when using the configuration-snippets to add a custom header to a specific Ingress configuration. The Ingress does need to be created for the example to work. 2017-04-24 16:25:16 +02:00
Arjan Schaaf
1b5f8b8779 ConfigMap with proxy-set-headers not required when using the configuration-snippets to add a custom header to a specific Ingress configuration. The Ingress does need to be created for the example to work. 2017-04-24 16:24:20 +02:00
Manuel Alejandro de Brito Fontes
91c00062c7 Merge pull request #628 from jcmoraisjr/jm-fix-rewrite-doc
Fix HAProxy rewrite doc
2017-04-20 14:49:35 -03:00
chentao1596
df16253fab Add example for TCP loadbalancing 2017-04-20 16:39:29 +08:00
Joao Morais
9b5f8c5e05 Fix HAProxy rewrite doc 2017-04-19 19:26:17 -03:00
Nick Sardo
642cb74cc7 [GLBC] Support backside re-encryption (#519)
Support backside re-encryption
2017-04-18 12:44:17 -07:00
Joao Morais
31b04f9c04 HAProxy Ingress rewrite options 2017-04-15 17:05:58 -03:00
Nick Sardo
12a0373d2e Merge pull request #539 from aledbf/migrate-client-go
Migrate to client-go
2017-04-05 13:50:21 -07:00
Manuel Alejandro de Brito Fontes
f4a376aa83 Merge pull request #543 from philips/use-generic-instead-of-oss
docs: use generic instead of OSS controller
2017-04-05 13:35:22 -03:00
Manuel de Brito Fontes
e0561ddeb9 Update nginx and generic controller 2017-04-04 11:51:50 -03:00
Manuel de Brito Fontes
4103537ea1 Fix lint errors 2017-04-02 11:07:07 -03:00