DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
4562 commits 4 branches 217 tags 166 MiB
Commit graph

4562 commits

This branch
This branch
All branches
Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
1d46ec2eb2 Cleanup test 2019-12-10 22:45:11 -03:00
Manuel Alejandro de Brito Fontes
fe2ae8a1ec Check the configmap is valid 2019-12-10 22:45:02 -03:00
Manuel Alejandro de Brito Fontes
75c3c47f81 Update go dependencies to v1.17.0 2019-12-10 21:55:54 -03:00
Kubernetes Prow Robot
67dce30ba6
Merge pull request #4813 from aledbf/ssl-ciphers 
Update default SSL ciphers
 2019-12-06 15:05:53 -08:00
Manuel Alejandro de Brito Fontes
cfccc2acc0 Update default SSL ciphers 2019-12-05 19:34:53 -03:00
Manuel Alejandro de Brito Fontes
19d596b72b
Allow custom CA certificate when flag --api-server is specified (#4807) 2019-12-05 19:12:54 -03:00
Kubernetes Prow Robot
833d0e98a3
Merge pull request #4806 from aledbf/build 
Add log to parallel command to dump logs in case of errors
 2019-12-02 18:08:57 -08:00
Manuel Alejandro de Brito Fontes
fd9e2b2214
Update nginx and e2e images (#4805) 2019-12-02 14:36:49 -03:00
Kubernetes Prow Robot
6429c0157d
Merge pull request #4797 from pauvos/dashboard-datasource 
Add a datasource variable $DS_PROMETHEUS
 2019-12-02 07:55:05 -08:00
Manuel Alejandro de Brito Fontes
97c59728dc
Update nginx image to fix regression in jaeger tracing (#4803) 2019-12-02 12:17:26 -03:00
Manuel Alejandro de Brito Fontes
d890303a3f
Fix markdown list (#4801) 2019-12-01 21:57:09 -03:00
Manuel Alejandro de Brito Fontes
e864fc7198
Update sysctl example (#4800) 2019-12-01 21:48:00 -03:00
Paul Voss
f5a02c1452
Add a datasource variable $DS_PROMETHEUS 2019-11-30 14:04:39 +01:00
Manuel Alejandro de Brito Fontes
46953ccb4d
Update nginx image and Go to 1.13.4 (#4785) 2019-11-29 15:20:18 -03:00
Kubernetes Prow Robot
60fc37d0e2
Merge pull request #4793 from MMeent/patch-2 
Fix issue in logic of modsec template
 2019-11-28 10:57:04 -08:00
Kubernetes Prow Robot
504c0aacd5
Merge pull request #4794 from sablumiah/patch-1 
Remove extra annotation when Enabling ModSecurity
 2019-11-28 10:13:04 -08:00
Sablu Miah
010ec6f159
Remove extra annotation when Enabling ModSecurity 
Since version 0.25, if you try to use both annotations of:

nginx.ingress.kubernetes.io/modsecurity-snippet: |
Include /etc/nginx/owasp-modsecurity-crs/nginx-modsecurity.conf
Include /etc/nginx/modsecurity/modsecurity.conf

and 

nginx.ingress.kubernetes.io/enable-modsecurity: "true"

it breaks nginx config and you will not catch it unless you have nginx admission controller enabled. 

You do not need the annotation of `Include /etc/nginx/modsecurity/modsecurity.conf` from version 0.25
 2019-11-28 15:16:09 +00:00
MMeent
75e8d37d71
Fix issue in logic of modsec template 
according to go templates: `(and ((not false) false))` == `true`

the only way to remove the owasp rules from every location is to disable modsec on that location, or to enable owasp globally, both not-so-great choices.

This commit fixes the logic issue by fixing the and-clause in the if-statement. As a result this reduces global resource usages when modsecurity is configured globally, but not on every location.
 2019-11-28 14:56:41 +01:00
Kubernetes Prow Robot
de12fc16f0
Merge pull request #4791 from bouk/manifest-add-staticport 
deploy: add protocol to all Container/ServicePorts
 2019-11-28 05:05:04 -08:00
Bouke van der Bijl
5b918e2d95 deploy: add protocol to all Container/ServicePorts 
kubectl apply --server-side currently doesn't work with Port specs that
are missing protocol:
https://github.com/kubernetes-sigs/structured-merge-diff/issues/130 so
we should always specify it.
 2019-11-28 12:41:48 +00:00
Manuel Alejandro de Brito Fontes
e7f63b450a Add log to parallel command to dump logs in case of errors 2019-11-27 22:01:50 -03:00
Kubernetes Prow Robot
d523b4a96e
Merge pull request #4780 from aledbf/openresty-master 
Update nginx image to use openresty master
 2019-11-27 12:33:03 -08:00
Kubernetes Prow Robot
a85d5ed93a
Merge pull request #4779 from aledbf/update-image 
Remove lua-resty-waf feature
 2019-11-27 11:45:05 -08:00
Kubernetes Prow Robot
b286c2a336
Merge pull request #4732 from willthames/enable-opentracing-annotation 
Allow enabling/disabling opentracing for ingresses
 2019-11-26 17:31:21 -08:00
Will Thames
6927d9351a Improve safety of AWS-based builds 
Ensure that AWS and Docker credentials don't get
accidentally added
 2019-11-27 11:07:26 +10:00
Will Thames
0ae463a5f3 Provide annotation to control opentracing 
By default you might want opentracing off, but on for a particular
ingress.

Similarly, you might want opentracing globally on, but disabled for
a specific endpoint. To achieve this, `opentracing_propagate_context`
cannot be set when combined with `opentracing off`

A new annotation, `enable-opentracing` allows more fine grained control
of opentracing for specific ingresses.
 2019-11-27 11:07:26 +10:00
Kubernetes Prow Robot
5935ce7df5
Merge pull request #4777 from Miouge1/x-forwarded-prefix-chanegelog 
[docs] Add info about x-forwarded-prefix breaking change
 2019-11-26 15:57:20 -08:00
Kubernetes Prow Robot
95edf02f91
Merge pull request #4700 from TronWallet/fix/nodeport_externalips 
adds hability to use externalIP when controller service is of type NodePort
 2019-11-26 15:33:20 -08:00
Manuel Alejandro de Brito Fontes
61d902db14 Remove Lua resty waf feature 2019-11-26 10:37:43 -03:00
Miouge1
fe7a9986d4 Add info about x-forwarded-prefix breaking change 2019-11-26 10:11:02 +01:00
Kubernetes Prow Robot
9f72cb3aee
Merge pull request #4766 from AndiDog/dev-env-fixes 
dev-env.sh: fix for parsing `minikube status` output of newer versions, fix shellcheck lints
 2019-11-25 11:07:25 -08:00
Andreas Sommer
bb25070f64 Fix for parsing minikube status output of newer versions 
Changed in ca7d378aaa to "Configured" or "Misconfigured"
 2019-11-21 10:25:31 +01:00
Andreas Sommer
885cdb2ac1 Fix shellcheck lints in dev-env.sh 2019-11-21 10:23:19 +01:00
Kubernetes Prow Robot
59a97535e6
Merge pull request #4765 from mrbusche/master 
Fix extra word
 2019-11-20 17:41:28 -08:00
Matt Busche
6b0a6ec8b3 Fix extra word 2019-11-20 19:01:56 -06:00
Kubernetes Prow Robot
e32f60fe38
Merge pull request #4749 from skomma/patch-1 
Update documentation for rate limiting
 2019-11-18 20:31:42 -08:00
Kubernetes Prow Robot
62518b60b4
Merge pull request #4689 from janosi/upstream_ssl 
Server-only authentication of backends and per-location SSL config
 2019-11-18 19:49:43 -08:00
Kubernetes Prow Robot
3ffe85537f
Merge pull request #4747 from FRI-DAY/image-add-opencontainer-source-label 
Docker image: Add source code reference label
 2019-11-18 19:23:41 -08:00
Michael Frister
dea9c405e5 Docker image: Add more opencontainers labels (incl. version) 2019-11-18 10:20:20 +01:00
Kubernetes Prow Robot
d4355b56aa
Merge pull request #4748 from argeas/update-static-ip-docs 
Update documentation for static ip example
 2019-11-14 05:07:35 -08:00
Syunsuke Komma
73aaf0ff28
Update annotations.md 
Add links to proxy-buffering section
 2019-11-13 12:54:42 +09:00
Syunsuke Komma
0b38a48ac9
Update annotations.md 
Add notes of limit-rate/limit-rate-after
 2019-11-13 12:49:59 +09:00
argeas
efc64c85a4 fix ingress name in get example 2019-11-13 02:24:48 +00:00
argeas
f5cf7e5566 set correct apiVersion 2019-11-13 02:23:27 +00:00
Michael Frister
be5349c05a Docker image: Add source code reference label 
This allows tools that automate component updates (in our case Renovate Bot [1])
to automatically find the source repository for the Docker image and extract
release notes from there. Renovate Bot can include the relevant release notes
automatically in a merge request changing the component version.

In [2], Renovate added the label for their own Docker image.

[1] https://github.com/renovatebot/renovate
[2] https://github.com/renovatebot/renovate/pull/3753
 2019-11-12 11:40:37 +01:00
Manuel Alejandro de Brito Fontes
d1eea794e9
Fix broken links in documentation (#4746) 2019-11-08 16:22:52 -03:00
Kubernetes Prow Robot
2771095b8c
Merge pull request #4727 from nothinux/master 
update docs, remove output in prometheus deploy command
 2019-11-08 09:02:14 -08:00
Kubernetes Prow Robot
c1136067ad
Merge pull request #4745 from cmluciano/cml/cmlreviewer 
add cmluciano to owners
 2019-11-08 08:34:16 -08:00
Christopher M. Luciano
0089dd595e
add cmluciano to owners 
cmluciano will be working to implement new v1/v2 API changes in the codebase
and is volunteering for triage and PR reviews.

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2019-11-08 11:06:23 -05:00
Kubernetes Prow Robot
0d244e1c41
Merge pull request #4730 from stamm/master 
add configuration for http2_max_concurrent_streams
 2019-11-08 07:12:29 -08:00