Commit graph

2501 commits

Author SHA1 Message Date
Oilbeater
17f6996941 fix nil pointer when ssl with ca.crt (#2331) 2018-04-11 09:30:16 -03:00
Manuel Alejandro de Brito Fontes
156bc7a177
Update nginx image (#2328)
* Update nginx image

* Update minikube start script
2018-04-10 19:52:58 -03:00
Manuel Alejandro de Brito Fontes
22a2e9b426
Update nginx to 1.13.12 (#2327) 2018-04-10 19:09:41 -03:00
Manuel Alejandro de Brito Fontes
4c2b3643c2
Fix survey link (#2321) 2018-04-09 14:33:30 -03:00
Manuel Alejandro de Brito Fontes
aced54cb40
Add ingress-nginx survey (#2319) 2018-04-09 14:24:27 -03:00
Elvin Efendi
d6eb44376d run lua-resty-waf in different modes (#2317)
* run lua-resty-waf in different modes

* update docs
2018-04-09 09:19:13 -03:00
Elvin Efendi
bad8295a42 extra waf rules per ingress (#2315)
* extra waf rules per ingress

* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules

* regenerate internal/file/bindata.go
2018-04-09 07:14:30 -03:00
Elvin Efendi
16faf309ca annotation to ignore given list of WAF rulesets (#2314) 2018-04-08 22:55:23 -03:00
Elvin Efendi
a6fe800a47 lua-resty-waf controller (#2304) 2018-04-08 17:37:13 -03:00
Manuel Alejandro de Brito Fontes
b17ed7b6fd
Configure upload limits for setup of lua load balancer (#2309) 2018-04-08 15:47:49 -03:00
Manuel Alejandro de Brito Fontes
1c65320618
Add verification of lua load balancer to health check (#2308) 2018-04-08 15:24:37 -03:00
Manuel Alejandro de Brito Fontes
888b74b336
Disable lua waf where luajit is not available (#2306) 2018-04-07 15:27:10 -03:00
Manuel Alejandro de Brito Fontes
fd458df0a6
Fix issues building nginx image in different platforms (#2305) 2018-04-07 10:02:16 -03:00
Elvin Efendi
6987b3f667 include the rest of lua-resty-waf dependencies (#2303) 2018-04-07 07:49:21 -03:00
Elvin Efendi
82a6d4c2f5 include lua-resty-waf and its dependencies in the base Nginx image (#2301)
* install lua-resty-waf

* bump version

* include Kubernetes header
2018-04-06 18:08:25 -03:00
Manuel Alejandro de Brito Fontes
2a02b7c35c
Fix race condition when Ingress does not contains a secret (#2300) 2018-04-06 17:44:41 -03:00
Manuel Alejandro de Brito Fontes
ab8349008a
Improve indentation of generated nginx.conf (#2296) 2018-04-05 18:19:30 -03:00
Manuel Alejandro de Brito Fontes
ee30c55dfc
Disable dynamic configuration in s390x and ppc64le (#2298) 2018-04-05 17:37:21 -03:00
Manuel Alejandro de Brito Fontes
dd2bc91018
Fix HSTS without preload (#2294) 2018-04-04 23:17:51 -03:00
Manuel Alejandro de Brito Fontes
13d390ebb0
Update nginx to 1.13.11 (#2290) 2018-04-04 12:18:17 -03:00
Manuel Alejandro de Brito Fontes
e2937cc8f6
Fix custom-error-pages image publication script (#2289) 2018-04-03 15:09:34 -03:00
Sergey Lanzman
83974c32ac Update controller.go (#2285) 2018-04-02 20:16:06 -03:00
Alvaro Aleman
e7aa74b5d4 Add NoAuthLocations and default it to "/.well-known/acme-challenge" (#2243)
* Add NoAuthLocations and default it to "/.well-known/acme-challenge"

* Add e2e tests for no-auth-location

* Improve wording of no-auth-location tests
2018-04-01 21:02:34 -03:00
Alvaro Aleman
9b4d7f28d0 Fix flaky e2e tests by always waiting after redeploying the ingress controller (#2283) 2018-04-01 20:37:27 -03:00
Elvin Efendi
ee46f486c7 e2e tests for dynamic configuration and Lua features and a bug fix (#2254)
* e2e tests for dynamic configuration and Lua features

* do not rely on force reload to dynamically configure when reload is needed

* fix misspelling

* skip dynamic configuration in the first template rendering

* dont error on first sync
2018-04-01 17:09:27 -03:00
Manuel Alejandro de Brito Fontes
e761191011
Fix nlb instructions (#2282) 2018-03-30 14:24:11 -03:00
Elvin Efendi
931e541fb7 Fix bug when auth req is enabled(external authentication) (#2280)
* set proxy_upstream_name correctly when auth_req module is used

* log a more meaningful message when backend is not found
2018-03-30 14:19:33 -03:00
AdamDang
bcb162ac0f Update README.md (#2276)
Small typo fix .
2018-03-30 08:00:43 -03:00
Manuel Alejandro de Brito Fontes
46a97a44c1
Update go to 1.10.1 (#2273) 2018-03-29 14:04:59 -03:00
AdamDang
660e67dc9e Typo fixes in modsecurity.md (#2274)
* Update modsecurity.md

Some typo fixes

* Update modsecurity.md
2018-03-29 13:48:16 -03:00
Manuel Alejandro de Brito Fontes
146db43794
Disable opentracing for nginx internal urls (#2272) 2018-03-29 13:47:13 -03:00
Oilbeater
c6c219a7d1 clean up tmpl (#2263)
The nginx.conf generated now is too messy remove some section only useful when dynamic configure enabled and headers only useful for https.
2018-03-29 09:36:00 -03:00
Antoine Cotten
b09ecf790b Use SharedIndexInformers in place of Informers (#2271) 2018-03-29 09:35:01 -03:00
Manuel Alejandro de Brito Fontes
5738ddbdb5
Revert deleted assignment in #2146 (#2270) 2018-03-28 20:33:03 -03:00
Sylvain Rabot
385368990c Managing a whitelist for _/nginx_status (#2187)
Signed-off-by: Sylvain Rabot <s.rabot@lectra.com>
2018-03-28 09:27:34 -03:00
AdamDang
6bc4dad38a Update README.md (#2267)
It should be "your Ingress targets" in line 7.
2018-03-27 12:50:26 -03:00
AdamDang
5c016bee87 Update annotations.md (#2255)
a typo fix
2018-03-25 12:55:30 -03:00
Manuel Alejandro de Brito Fontes
cd9624584d
Add deployment docs for AWS NLB (#1785) 2018-03-24 15:27:24 -03:00
Manuel Alejandro de Brito Fontes
93c72ef646
Update go dependencies (#2234) 2018-03-23 13:35:19 -03:00
Zenara Daley
6e099c5f57 Add EWMA as configurable load balancing algorithm (#2229) 2018-03-23 12:06:21 -03:00
Manuel Alejandro de Brito Fontes
b0a63fe3ff
Fix grpc json tag name (#2246) 2018-03-23 09:12:26 -03:00
Oilbeater
1f93a1ccad fix: empty ingress path (#2244)
If the origin ingress rule has no field `path`, the default value will be an empty string which will cause issues when rendering template as other place will use `/` as the default value.
Set the default value of path to `/` when retrieve ingress rules from api-server. Thie will fix https://github.com/kubernetes/ingress-nginx/issues/1980
2018-03-23 08:08:42 -03:00
k8s-ci-robot
935a5ef2c8
Merge pull request #2242 from agau4779/http2
add http/2
2018-03-22 10:26:04 -07:00
Ashley Gau
84a6e0c1ab add http/2 2018-03-22 10:25:35 -07:00
maxlaverse
39cb880f32 Revert "Get file max from fs/file-max. (#2050)" (#2241)
This reverts commit d8efd39694.
2018-03-22 13:03:04 -03:00
Oilbeater
0b0a274a9a fix: cannot set $service_name if use rewrite (#2220)
$path here is the regular expression formatted nginx location not the origin path in ingress rules. Fix https://github.com/kubernetes/ingress-nginx/issues/2131
2018-03-22 09:43:45 -03:00
yulng
e1c7892e4a to kubernetes (#2240)
to kubernetes
2018-03-22 09:20:09 -03:00
halfcrazy
b45ee8d85f Add missing configuration in #2235 (#2236) 2018-03-22 08:53:29 -03:00
fqsghostcloud
65fde75a7f fix-link (#2239) 2018-03-22 08:32:33 -03:00
fqsghostcloud
4b9cb90f30 Correct typo (#2238)
* correct spelling

* correct typo
2018-03-22 08:14:06 -03:00