Bernard Van De Walle
2baca9e32a
Merge branch 'add-opentracing-operation-name-settings' of https://github.com/JorritSalverda/ingress-nginx into add-opentracing-operation-name-settings
2020-07-23 11:42:44 -07:00
Manuel Alejandro de Brito Fontes
a4ec5c8a88
Validate endpoints are ready in e2e tests
2020-07-21 09:53:03 -04:00
Manuel Alejandro de Brito Fontes
268f7c5c4b
Fix error in grpcbin deployment and enable e2e test
2020-07-21 09:39:56 -04:00
Kubernetes Prow Robot
e825af86e1
Merge pull request #5887 from dschwar/force-use-forwarded-for
...
Add force-enable-realip-module
2020-07-17 07:17:02 -07:00
David Schwartz
d52141c2b9
Add enable-real-ip
2020-07-15 15:25:29 -04:00
Manuel Alejandro de Brito Fontes
d76ff21d94
Update e2e-test-runner image
2020-07-15 14:21:03 -04:00
Manuel Alejandro de Brito Fontes
dc3876666b
Revert "use-regex annotation should be applied to only one Location"
...
This reverts commit a8a8b5f6e9
.
2020-07-15 11:20:47 -04:00
Manuel Alejandro de Brito Fontes
5e615efa91
Fix missing variable in run-chart-test script
2020-07-10 08:57:40 -04:00
Manuel Alejandro de Brito Fontes
6c73d66ae6
Update helm chart for v0.34.0
2020-07-10 08:57:40 -04:00
Manuel Alejandro de Brito Fontes
86534b5124
Prepare switch to gcr.io
2020-07-09 07:42:39 -04:00
Manuel Alejandro de Brito Fontes
a8a8b5f6e9
use-regex annotation should be applied to only one Location
2020-07-06 19:29:39 -04:00
Manuel Alejandro de Brito Fontes
ec4fb05cad
Fix proxy ssl e2e test
2020-07-06 18:41:42 -04:00
Kubernetes Prow Robot
585569b638
Merge pull request #5712 from laozc/sni
...
Add proxy-ssl-server-name to pass server name on SNI
2020-07-04 15:34:48 -07:00
Manuel Alejandro de Brito Fontes
e9a92070d9
Update chart-testing image
2020-07-04 00:24:55 -04:00
Manuel Alejandro de Brito Fontes
8836cfe04a
Filter github actions to be executed
2020-07-04 00:24:55 -04:00
Zhongcheng Lao
c0629e92c2
Add proxy-ssl-server-name to enable passing SNI
2020-07-03 14:14:32 +08:00
Kubernetes Prow Robot
baa2b2cd33
Merge pull request #5709 from agile6v/master
...
fix: remove duplicated X-Forwarded-Proto header.
2020-07-02 17:50:47 -07:00
Manuel Alejandro de Brito Fontes
5f81b84288
Temporarily disable e2e Prow jobs
2020-07-02 20:12:05 -04:00
Manuel Alejandro de Brito Fontes
b392fed580
Test pull requests using github actions
2020-07-02 20:12:05 -04:00
Manuel Alejandro de Brito Fontes
ff60aa9e2b
Switch to promoted e2e images in gcr
2020-06-30 19:43:21 -04:00
Manuel Alejandro de Brito Fontes
0e19740ee2
Update e2e configuration
2020-06-30 00:30:14 -04:00
Manuel Alejandro de Brito Fontes
95bec54d5d
Update kind node image version
2020-06-29 18:30:31 -04:00
Manuel Alejandro de Brito Fontes
10dcf0db15
Remove unused variables and verbose e2e logs
2020-06-29 18:11:01 -04:00
Manuel Alejandro de Brito Fontes
40738fc6f8
Adjust default e2e timeout
2020-06-27 11:36:17 -04:00
Manuel Alejandro de Brito Fontes
51691d4776
Adjust e2e nodes
2020-06-27 11:36:17 -04:00
Manuel Alejandro de Brito Fontes
1539a24c7b
Start using e2e test images from gcr.io
2020-06-27 11:36:17 -04:00
Manuel Alejandro de Brito Fontes
e977c8e056
Improve execution of prow jobs
2020-06-26 15:51:11 -04:00
agile6v
e8aaa15ce8
Remove duplicated X-Forwarded-Proto header.
2020-06-25 11:11:00 +08:00
Manuel Alejandro de Brito Fontes
53fbaaf6bc
Update httpexpect package name
2020-06-24 16:15:04 -04:00
Manuel Alejandro de Brito Fontes
93bf818214
Remove vendor directory and enable go modules
2020-06-24 13:27:15 -04:00
Manuel Alejandro de Brito Fontes
fc5c448697
Allow to use a custom arch to run e2e tests
2020-06-18 23:22:31 -04:00
Manuel Alejandro de Brito Fontes
c0035d29c3
Fix e2e externalName test
2020-06-16 12:24:10 -04:00
Manuel Alejandro de Brito Fontes
3d3efaab29
Fix proxy_protocol duplication in listen definition
2020-06-09 15:00:59 -04:00
Jeff Hui
7767230e6a
fix undefined variable $auth_cookie error when location is denied
...
(add) isLocationAllowed check before setting the cookie
2020-06-08 13:59:52 -04:00
agile6v
fc1c043437
Add http-access-log-path and stream-access-log-path options in configMap
2020-06-05 01:27:26 +08:00
Manuel Alejandro de Brito Fontes
2b17980e3c
Remove copy of binaries and deprecated e2e task
2020-06-02 17:22:58 -04:00
Manuel Alejandro de Brito Fontes
ea8e711d2c
Refactor build of docker images
2020-06-02 12:16:39 -04:00
Manuel Alejandro de Brito Fontes
810acfafbe
Enable coredumps for e2e tests
2020-06-01 19:33:44 -04:00
Manuel Alejandro de Brito Fontes
5f03b07245
Update e2e image
2020-05-31 15:38:02 -04:00
Manuel Alejandro de Brito Fontes
7bd62f5c0a
Fix makefile task names
2020-05-31 12:57:02 -04:00
Manuel Alejandro de Brito Fontes
d250b97b43
Build multi-arch images by default
2020-05-31 12:35:19 -04:00
Kubernetes Prow Robot
ee02d897d5
Merge pull request #5534 from agile6v/master
...
Add annotation ssl-prefer-server-ciphers.
2020-05-29 08:35:16 -07:00
Manuel Alejandro de Brito Fontes
78935500eb
Update nginx image and go to 1.14.3
2020-05-26 16:47:25 -04:00
agile6v
0e79ad8e4f
Update unit & e2e tests.
2020-05-21 02:19:13 +08:00
Manuel Alejandro de Brito Fontes
b18ea267a8
Wait before any request to the ingress controller pod
2020-05-14 10:47:51 -04:00
Andrey Voronkov
96d86995e1
Disable Access Log tests. Draft.
...
Signed-off-by: Andrey Voronkov <voronkovaa@gmail.com>
2020-05-13 22:22:41 +03:00
Manuel Alejandro de Brito Fontes
46cca5ad40
Fix error setting $service_name NGINX variable
2020-05-13 10:01:41 -04:00
Mark Janssen
639a8c7871
Enable TLSv1.3 by default
...
Fix for 049b25e566
which mistakenly only
updated documentation.
2020-05-08 12:40:11 +02:00
Christopher M. Luciano
5c65cf498e
build: remove unnecessary tag line in e2e
...
The comment on this block states that this line should be removed
after the multi-arch image action is merged in the Makefile.
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
2020-05-07 14:51:00 -04:00
Manuel Alejandro de Brito Fontes
080b917f91
Update kind
2020-05-01 12:32:30 -04:00
Manuel Alejandro de Brito Fontes
e4dcaf0b67
Only load docker images in kind worker nodes
2020-04-30 18:12:40 -04:00
Manuel Alejandro de Brito Fontes
a8c7ec6cfb
Changes on services must trigger a sync event
2020-04-29 13:37:39 -04:00
Manuel Alejandro de Brito Fontes
a95d850384
Add support for PathTypeExact
2020-04-23 11:12:37 -04:00
Manuel Alejandro de Brito Fontes
efbb3f9fc8
Add support for IngressClass and ingress.class annotation
2020-04-22 09:15:32 -04:00
Manuel Alejandro de Brito Fontes
d4e0657991
Update nginx image to fix openssl CVE
2020-04-21 22:35:21 -04:00
Manuel Alejandro de Brito Fontes
e9bd1d8b1f
Add new cfssl image and update e2e tests to use it
2020-04-17 16:41:50 -04:00
Manuel Alejandro de Brito Fontes
d18fa90cfd
Add e2e test for OCSP and new configmap setting
2020-04-17 12:53:47 -04:00
Manuel Alejandro de Brito Fontes
2b2acae28f
Add e2e tests for helm chart
2020-04-15 21:25:40 -04:00
Manuel Alejandro de Brito Fontes
e87ddedc73
Update e2e image
2020-04-14 14:15:40 -04:00
Elvin Efendi
129df3892c
adjust e2e test
2020-04-14 10:27:38 -04:00
Manuel Alejandro de Brito Fontes
c0db19b0ec
Enable configuration of plugins using configmap
2020-04-13 11:38:42 -04:00
Artem Miroshnychenko
39c01c6f96
fix e2e rests related to the removed string
2020-04-09 00:24:53 +03:00
Manuel Alejandro de Brito Fontes
f20b9befd0
Update e2e dev image to v1.18.0
2020-04-04 16:27:26 -03:00
Manuel Alejandro de Brito Fontes
5390ce4879
Fix definition order of modsecurity directives
2020-04-03 10:53:20 -03:00
Balazs Szekeres
1e899cacfc
Added auth-tls-verify-client testcase
2020-04-01 14:47:38 +02:00
Manuel Alejandro de Brito Fontes
1216ed03f7
Fix condition in server-alias annotation
2020-04-01 08:37:14 -03:00
Kubernetes Prow Robot
461aa93d13
Merge pull request #5296 from SzekeresB/dev/proxy-ssl
...
Added proxy-ssl-location-only test.
2020-03-30 05:07:55 -07:00
Balazs Szekeres
d362475334
Added proxy-ssl-location-only test.
2020-03-30 10:30:22 +02:00
Manuel Alejandro de Brito Fontes
a46126a034
Update client-go methods to support context and and new create and delete options
2020-03-27 19:52:51 -03:00
Manuel Alejandro de Brito Fontes
9af24fdf5b
Update go and e2e image ( #5289 )
2020-03-24 11:42:31 -03:00
Manuel Alejandro de Brito Fontes
d8ecfb7324
Wait for update in tcp e2e test ( #5284 )
2020-03-23 18:09:21 -03:00
Manuel Alejandro de Brito Fontes
760f40e45c
Add retries for dns in tcp e2e test ( #5283 )
2020-03-23 17:05:15 -03:00
Bhavin Gandhi
380ef3a92c
Fix the ability to disable ModSecurity at location level
...
- Adds 'modsecurity off;' to the nginx config if the
'enable-modsecurity' annotation is set to false.
- Update tests and e2e tests accordingly
Signed-off-by: Bhavin Gandhi <bhavin7392@gmail.com>
2020-03-22 23:51:02 +05:30
Manuel Alejandro de Brito Fontes
d72ff0f8af
Ensure DeleteDeployment waits until there are no pods running ( #5269 )
2020-03-20 13:02:15 -03:00
Manuel Alejandro de Brito Fontes
07b70f68bd
Redirect for app-root should preserve current scheme ( #5266 )
2020-03-19 15:49:18 -03:00
Manuel Alejandro de Brito Fontes
7627757081
Cleanup of chart labels ( #5258 )
2020-03-18 08:35:29 -03:00
Manuel Alejandro de Brito Fontes
130af33510
Use rbac scope feature in e2e tests ( #5250 )
2020-03-14 18:52:56 -03:00
Balazs Szekeres
fd66e6337b
Refacored proxy ssl TC-s
2020-03-10 09:50:55 +01:00
Kubernetes Prow Robot
0c9db55265
Merge pull request #5217 from SzekeresB/dev/affinity
...
Added affinity-mode tc and refactored affinity.go
2020-03-07 15:05:34 -08:00
Manuel Alejandro de Brito Fontes
1374c1e242
Update NGINX image ( #5221 )
2020-03-07 17:42:56 -03:00
Balazs Szekeres
7789843bd7
Added affinity-mode tc and refactored affinity.go
2020-03-06 12:43:34 +01:00
Kubernetes Prow Robot
103eb067f2
Merge pull request #5201 from SzekeresB/dev/proxy-config
...
Added TC for proxy connect, read, and send timeout
2020-03-02 15:41:37 -08:00
Balazs Szekeres
a182ca799b
Refactored client body buffer size TC-s.
2020-03-02 13:06:21 +01:00
Balazs Szekeres
12fe318fdb
Added test case for proxy connect, read, and send timeout from setting them via Nginx configmap.
2020-03-02 09:36:52 +01:00
Balazs Szekeres
6757224996
Refactored test/e2e/annotations/proxy.go
2020-02-27 16:03:28 +01:00
Manuel Alejandro de Brito Fontes
652a8e62b7
Update e2e image ( #5174 )
2020-02-26 16:52:31 -03:00
Manuel Alejandro de Brito Fontes
f48774e6db
Cleanup e2e directory ( #5169 )
2020-02-25 14:22:30 -03:00
Manuel Alejandro de Brito Fontes
e3e16941e5
Use local chart directory for dev-env and e2e tests ( #5165 )
2020-02-25 09:35:44 -03:00
Kubernetes Prow Robot
35264d6e8f
Merge pull request #5114 from whalecold/match
...
Feat: add header-pattern annotation.
2020-02-24 17:07:36 -08:00
Kubernetes Prow Robot
ceb721d6eb
Merge pull request #5160 from szombi/e2e-build-fix
...
Fix e2e test run.sh
2020-02-24 11:57:43 -08:00
Sandor Szombat
5c3ffa8cf0
Fix e2e test run.sh
2020-02-24 19:37:11 +01:00
Balazs Szekeres
2b77529c74
Added limit-rate annotation test
2020-02-24 13:31:02 +01:00
Manuel Alejandro de Brito Fontes
8e7def937a
Update nginx and e2e images ( #5153 )
2020-02-21 19:32:31 -03:00
Kubernetes Prow Robot
380840f27e
Merge pull request #5145 from szombi/e2e-hsts-fix
...
Refactor the HSTS related test file and add config check to the HSTS tests
2020-02-21 07:08:35 -08:00
Kubernetes Prow Robot
ad4221f8bb
Merge pull request #4963 from HowJMay/fix_typo
...
fix: Fix typo
2020-02-21 05:58:32 -08:00
Sandor Szombat
1906832bc5
Rework the hsts related test file
2020-02-21 14:25:18 +01:00
Lisheng Zheng
0b33650bb8
Feat: canary supports using specific match strategy to match header value.
2020-02-21 10:02:20 +08:00
Kubernetes Prow Robot
7d52174b51
Merge pull request #5125 from SzekeresB/dev/limit-connection-tc
...
Added tc for limit-connection annotation
2020-02-20 15:07:57 -08:00
Balazs Szekeres
0986ea8f18
Added configmap test ssl-ciphers.
2020-02-20 20:43:43 +01:00
Balazs Szekeres
4f11e99131
Added tc for limit-connection annotation
2020-02-20 16:22:06 +01:00
Kubernetes Prow Robot
f4454612cb
Merge pull request #5109 from SzekeresB/dev/limit-rate-tc
...
Added basic limit-rate configmap test.
2020-02-20 06:55:04 -08:00
Kubernetes Prow Robot
b6516344bf
Merge pull request #5103 from SzekeresB/dev/no-tls-redirect-location
...
Added configmap test for no-tls-redirect-locations
2020-02-20 06:23:02 -08:00
Balazs Szekeres
122bf02489
Added configmap test for no-tls-redirect-locations
2020-02-20 14:54:41 +01:00
Balazs Szekeres
c47aa3cac7
Added basic limit-rate configmap test.
2020-02-20 14:22:26 +01:00
Sandor Szombat
d149382743
Add upstream keep alive tests
2020-02-20 09:59:36 +01:00
Manuel Alejandro de Brito Fontes
57fcbdfb73
Lint go code ( #5132 )
2020-02-19 21:43:14 -03:00
Kubernetes Prow Robot
f6cbf3e735
Merge pull request #5117 from szombi/e2e-hash-size
...
Hash size e2e check test case
2020-02-19 15:44:30 -08:00
Manuel Alejandro de Brito Fontes
7f280512f1
Adjust ingress-nginx probes
2020-02-19 19:42:50 -03:00
Manuel Alejandro de Brito Fontes
f9624cbe46
Refactor e2e tests to use testify y httpexpect
2020-02-19 19:42:50 -03:00
Manuel Alejandro de Brito Fontes
046e2d959d
Replace gomega with testify
2020-02-19 19:42:50 -03:00
Sandor Szombat
bd23b815bd
Add hash size check tc
2020-02-19 09:27:53 +01:00
Sandor Szombat
0b1efdb549
Add reuse-port config check tc
2020-02-18 10:09:34 +01:00
Kubernetes Prow Robot
9a52f12b19
Merge pull request #5101 from szombi/e2e-keep-alive
...
Add keep-alive config check test
2020-02-17 11:27:29 -08:00
Kubernetes Prow Robot
24ce209af7
Merge pull request #5097 from szombi/e2e-log-format
...
New e2e test: log-format-escape-json and log-format-upstream
2020-02-17 08:17:31 -08:00
Sandor Szombat
2400febc48
Add keep-alive config check test
2020-02-17 15:04:43 +01:00
Sandor Szombat
8470a06174
Add log-format related tests
2020-02-17 14:52:35 +01:00
Manuel Alejandro de Brito Fontes
ca34f39ade
Remove comment from e2e_test.go ( #5094 )
2020-02-17 06:55:38 -03:00
Manuel Alejandro de Brito Fontes
cc318cdec1
Cleanup and standardization of e2e test definitions ( #5090 )
2020-02-16 15:27:58 -03:00
Manuel Alejandro de Brito Fontes
37c24b0df5
Migration e2e installation to helm ( #5086 )
2020-02-16 11:58:37 -03:00
Balazs Szekeres
6206adf188
Added 'Add headers' configmap parameter testcase.
2020-02-14 19:56:43 +01:00
Manuel Alejandro de Brito Fontes
71e35c9100
Make sure set-cookie is retained from external auth endpoint ( #5067 )
2020-02-14 01:41:11 -03:00
Manuel Alejandro de Brito Fontes
e179a24f97
Cleanup of e2e tests
2020-02-14 01:09:08 -03:00
Manuel Alejandro de Brito Fontes
2e3f128ed5
Enable grpc e2e tests
2020-02-14 01:09:08 -03:00
Manuel Alejandro de Brito Fontes
fa3642d01b
Update go to 1.13.8 ( #5070 )
2020-02-13 19:41:35 -03:00
Manuel Alejandro de Brito Fontes
1e42967d91
Adjust Suite time execution
2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
b4dba519fc
Remove dependency of https://grpcb.in
2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
4a21dc17f4
Remove cleanup helper
2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
0197ea0dc4
Remove empty BeforeEach and AfterEach from e2e tests
2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
b37270bdde
Cleanup framework package
2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
28350f9876
Fix scripts to run in osx ( #5061 )
2020-02-12 21:17:26 -03:00
Manuel Alejandro de Brito Fontes
281139d1a7
Only set mirror source when a target is configured ( #5055 )
2020-02-11 13:48:42 -03:00
Ilya Nemakov
46a3e0a6fd
Fix X-Forwarded-Proto based on proxy-protocol server port
2020-02-10 18:08:34 +03:00
Manuel Alejandro de Brito Fontes
8d4278bfd2
Update default kind k8s version ( #5031 )
2020-02-07 14:20:16 -03:00
Manuel Alejandro de Brito Fontes
ac2ce11739
Add echo image to avoid building and installing dependencies in each test ( #5028 )
2020-02-06 18:08:44 -03:00
Manuel Alejandro de Brito Fontes
b3146354d4
Refactor mirror feature
2020-02-05 10:39:55 -03:00
Manuel Alejandro de Brito Fontes
a16ed1b01f
Update nginx image, go to 1.13.7 and e2e image ( #5011 )
2020-02-04 14:02:10 -03:00
Manuel Alejandro de Brito Fontes
11192819ff
Dump kind logs after e2e tests ( #4987 )
2020-01-30 11:42:57 -03:00
Manuel Alejandro de Brito Fontes
02c99e9ccf
Update e2e image
2020-01-27 00:01:13 -03:00
Manuel Alejandro de Brito Fontes
68bfbd939b
Remove hard-coded timeout in e2e tests
2020-01-27 00:01:13 -03:00
Kubernetes Prow Robot
2f8cbeb8fa
Merge pull request #4956 from djboris9/proxy-protocol-port
...
Fix proxy protocol support for X-Forwarded-Port
2020-01-26 12:27:02 -08:00
Manuel Alejandro de Brito Fontes
5eddf1095d
Add verification of docker buildx support ( #4966 )
2020-01-26 10:07:55 -03:00
Manuel Alejandro de Brito Fontes
1443ebf5a8
Cleanup of e2e docker images ( #4962 )
2020-01-25 17:43:21 -03:00
HowJMay
ad8a01f945
fix: Fix typo
...
Fix typo in comment
2020-01-25 16:03:18 +08:00
Boris Djurdjevic
665f924e9e
Add proxy protocol support for X-Forwarded-Port
...
Fixes https://github.com/kubernetes/ingress-nginx/issues/4951
2020-01-24 13:50:35 +01:00
Manuel Alejandro de Brito Fontes
c8015c7734
Update nginx image, use docker buildx and remove qemu ( #4923 )
...
* Update nginx image, use docker buildx and remove qemu
* Update e2e image
2020-01-14 20:52:57 -03:00
Manuel Alejandro de Brito Fontes
fcd3a580d9
Use docker to run makefile tasks ( #4893 )
2020-01-09 00:58:16 -03:00
Manuel Alejandro de Brito Fontes
2af6305a4f
Fix flaking e2e tests
2020-01-05 14:08:56 -03:00
Manuel Alejandro de Brito Fontes
9c0061f482
Update e2e image ( #4884 )
2020-01-04 22:18:29 -03:00
Manuel Alejandro de Brito Fontes
8fb2695d54
Update e2e image ( #4883 )
2020-01-04 20:29:49 -03:00
Manuel Alejandro de Brito Fontes
1f2820a343
GeoIP test are temporarily disabled
2020-01-04 15:17:24 -03:00
Manuel Alejandro de Brito Fontes
f9e2b7c14b
Fix status code
2020-01-04 13:23:16 -03:00
Manuel Alejandro de Brito Fontes
fbdd924a45
Update nginx image
2020-01-04 13:23:16 -03:00
Manuel Alejandro de Brito Fontes
6c92c80073
Fix sticky session for ingress without host
2020-01-02 16:52:49 -03:00
Manuel Alejandro de Brito Fontes
a0523c3c8a
Use a named location for authSignURL ( #4859 )
2019-12-24 22:50:25 -03:00
Manuel Alejandro de Brito Fontes
0ae5892935
Update nginx image ( #4848 )
2019-12-18 09:32:20 -03:00
Manuel Alejandro de Brito Fontes
5c30820d1f
Remove hard-coded annotation and don't use map pointers
2019-12-13 03:05:20 -03:00
Manuel Alejandro de Brito Fontes
c2550930b1
Fix e2e test flakes
2019-12-13 01:34:52 -03:00
Manuel Alejandro de Brito Fontes
1800ffa30d
Use deployments only from apps/v1 group
2019-12-12 21:25:01 -03:00
Manuel Alejandro de Brito Fontes
0dce5be743
Migrate ingress definitions from extensions to networking.k8s.io
2019-12-12 21:25:00 -03:00
Elvin Efendi
49ba53b7b6
regression test for duplicate hsts
2019-12-12 13:45:43 -05:00
Kamil Domański
16b5ad3c09
add e2e test for HTTP->HTTPS redirection
2019-12-09 15:56:21 +01:00
Manuel Alejandro de Brito Fontes
fd9e2b2214
Update nginx and e2e images ( #4805 )
2019-12-02 14:36:49 -03:00
Manuel Alejandro de Brito Fontes
46953ccb4d
Update nginx image and Go to 1.13.4 ( #4785 )
2019-11-29 15:20:18 -03:00
Manuel Alejandro de Brito Fontes
61d902db14
Remove Lua resty waf feature
2019-11-26 10:37:43 -03:00
Thomas Jackson
500b043f27
Don't use DNS resolution to "validate FQDN"
...
As the controller stands today this "validation" is done once per config load, which means if the DNS query fails for any reason the endpoint will remain dead until both (1) a change happens to the ingress and (2) the DNS resolution works. If the user configured the name we should just pass it through, this way the lua dns can attempt to re-query it at its leisure.
2019-10-13 13:16:47 -07:00
Kubernetes Prow Robot
fb025ab501
Merge pull request #4087 from MRoci/master
...
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
Andrea Spacca
e84c8cd705
ISSUE-4244 e2e test
2019-09-29 23:28:44 +02:00
MRoci
1ee081ccc8
test modsecurity-snippet
2019-09-28 09:54:10 +02:00
Manuel Alejandro de Brito Fontes
2bd8121338
Change default for proxy-add-original-uri-header
2019-09-25 10:57:31 -03:00
Elvin Efendi
fe2ea692a6
adjust tests to the new no-reload on cert update world
2019-09-25 06:59:47 -04:00
Elvin Efendi
799f0ae76d
more meaningful assertion for tls hsts test
2019-09-24 15:39:20 -04:00
A Gardner
786a3b6862
Add support for configmap of headers to be sent to external auth service
2019-09-24 10:53:23 -04:00
Kubernetes Prow Robot
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode
...
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
Kubernetes Prow Robot
846ff00363
Merge pull request #4560 from Shopify/basic-auth-map
...
Support configuring basic auth credentials as a map of user/password hashes
2019-09-16 07:52:39 -07:00
A Gardner
376b862c23
Add annotation to support map of user/pass pairs in basic auth
2019-09-13 11:33:33 -04:00
Manuel Alejandro de Brito Fontes
9af574a234
Remove the_real_ip variable
2019-09-12 20:01:33 -03:00
Manuel Alejandro de Brito Fontes
ce3e3d51c3
WIP Remove nginx unix sockets ( #4531 )
...
* Remove nginx unix sockets
* Use an emptyDir volume for /tmp in PSP e2e tests
2019-09-08 18:14:54 -03:00
Manuel Alejandro de Brito Fontes
1433cde9e6
Improve the time to run e2e tests
2019-09-05 11:46:53 -04:00
Manuel Alejandro de Brito Fontes
1304cb194f
Update nginx image to 0.92
2019-09-04 10:34:54 -04:00
Kubernetes Prow Robot
74031cc8b8
Merge pull request #4528 from aledbf/clean-docker
...
Cleanup of docker images
2019-09-03 18:04:58 -07:00
Manuel Alejandro de Brito Fontes
dc20551288
Cleanup of docker images
2019-09-03 19:10:40 -04:00
Manuel Alejandro de Brito Fontes
48c89cbe3c
Switch to official kind images ( #4527 )
2019-09-03 16:46:43 -04:00
Manuel Alejandro de Brito Fontes
c2935ca35c
Refactor health checks and wait until NGINX process ends
2019-09-01 15:31:27 -04:00
Manuel Alejandro de Brito Fontes
c85450c1e7
Remove hard-coded names from e2e test and use local docker dependencies ( #4502 )
2019-09-01 14:16:52 -04:00
Alexander Maret-Huskinson
9170591185
Added new affinity mode for maximum session stickyness. Fixes kubernetes/ingress-nginx#4475
2019-08-30 11:40:29 +02:00
Manuel Alejandro de Brito Fontes
fcd3054f13
Lint code using staticcheck ( #4471 )
2019-08-23 12:08:40 -04:00
Kubernetes Prow Robot
75d65bbd15
Merge pull request #4327 from leki75/proxyssl
...
Add proxy_ssl_* directives
2019-08-18 09:14:04 -07:00
Guangming Wang
3c05cc4225
cleanup: fix typos in framework.go
...
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-08-17 23:16:15 +08:00
Guangming Wang
8cf384b212
cleanup logging message typos in rewrite.go
...
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-08-16 23:36:24 +08:00
Gabor Lekeny
65b9e2c574
Merge branch 'master' of https://github.com/kubernetes/ingress-nginx into proxyssl
2019-08-16 06:21:53 +02:00
Manuel Alejandro de Brito Fontes
23ed3ba4c4
Fix file permissions to support volumes
2019-08-15 20:48:37 -04:00
Manuel Alejandro de Brito Fontes
816f4b0824
Fix service type external name using the name
2019-08-15 12:09:42 -04:00
Elvin Efendi
b21c721196
lua-shared-dicts improvements, fixes and documentation
2019-08-14 22:10:56 -04:00
Kubernetes Prow Robot
dd0fe4b458
Merge pull request #4422 from ElvinEfendi/lua-resolv-conf-search
...
teach lua about search and ndots settings in resolv.conf
2019-08-14 17:36:33 -07:00
Kubernetes Prow Robot
0d690fba1a
Merge pull request #4356 from aledbf/only-dynamic-mode
...
Only support SSL dynamic mode
2019-08-14 17:08:35 -07:00
Elvin Efendi
1be52afa8d
e2e test for service with incomplete external name
2019-08-14 18:03:30 -04:00
Gabor Lekeny
8a2a0e915a
Add e2e tests for proxyssl
2019-08-14 11:49:28 +02:00
Kubernetes Prow Robot
adef152db8
Merge pull request #4379 from diazjf/mirror
...
Allow Requests to be Mirrored to different backends
2019-08-13 17:52:24 -07:00
Elvin Efendi
d46b4148fa
Lua /etc/resolv.conf parser and some refactoring
2019-08-13 18:34:54 -04:00
Manuel Alejandro de Brito Fontes
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
Manuel Alejandro de Brito Fontes
8a9298ae27
Add helper to extract prometheus metrics in e2e tests
2019-08-13 12:53:40 -04:00
Kubernetes Prow Robot
8c472190d1
Merge pull request #4086 from jeroen92/issue-4038
...
Resolve #4038 , move X-Forwarded-Port variable to the location context
2019-08-09 08:07:25 -07:00
Manuel Alejandro de Brito Fontes
4a9b02bc03
Remove dynamic TLS records
2019-08-08 15:52:56 -04:00
tals
a2e667c082
lua shared dict from cm
...
lua shared dict teml test and update func sign
lua shared dict cm test
lua shared dict integration test
lua shared dict add cm parsing
lua shared dict change test header
2019-08-08 12:44:11 +03:00
Jeroen Schutrup
8dd912114e
Move X-Forwarded-Port variable to the location context
...
Resolves issue #4038 where the X-Forwarded-Port header would be set to the value of the https listening port if all of the following settings were satisfied:
- The ingress controller was started with a non-default HTTPS port set with the `--https-port` argument
- An ingress is created having:
- the `nginx.ingress.kubernetes.io/auth-url` annotation set
- TLS enabled
This commit solves this issue by moving the setting of the `pass_server_port` variable from the server, one level down to the location context.
2019-08-06 17:00:58 +02:00
Fernando Diaz
386486e969
Allow Requests to be Mirrored to different backends
...
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.
See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
2019-08-01 11:53:58 -05:00
Charle Demers
72271e9313
FastCGI backend support ( #2982 )
...
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
Kubernetes Prow Robot
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
...
feat: auth-req caching
2019-07-17 12:06:12 -07:00
Moritz Johner
23504db770
feat: auth-req caching
...
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.
[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
Manuel Alejandro de Brito Fontes
d5c7fa8cfb
Fix scripts to be able to run tests in docker
2019-07-17 11:06:53 -04:00
E. Stuart Hicks
3b0c523e49
added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends
2019-07-08 14:32:00 -04:00
Elvin Efendi
08906ef8f2
add comment to the test
2019-07-04 18:39:29 -04:00
Elvin Efendi
e988217fdf
e2e test for ewma
2019-07-03 16:25:53 -04:00
Elvin Efendi
964a484b2f
GetLbAlgorithm helper func for e2e
2019-07-03 08:15:41 -04:00
Manuel Alejandro de Brito Fontes
004d0c8214
Fix go imports
2019-06-30 18:58:18 -04:00
Kubernetes Prow Robot
a2009484f7
Merge pull request #4249 from ElvinEfendi/trailing-dot
...
test to make sure dynamic cert works trailing dot in domains
2019-06-29 16:43:22 -07:00
Manuel Alejandro de Brito Fontes
975a63516d
Update kind to 0.4.0
2019-06-29 18:32:02 -04:00
Elvin Efendi
f771e7247a
test to make sure dynamic cert works trailing dot in domains
2019-06-28 16:21:59 -04:00
Manuel Alejandro de Brito Fontes
591887089f
Add e2e test suite to detect memory leaks in lua
2019-06-27 22:05:52 -04:00
Manuel Alejandro de Brito Fontes
3268d79610
Update nginx image to 0.90
2019-06-26 18:46:56 -04:00
Manuel Alejandro de Brito Fontes
225f881ed0
Add e2e test for invalid secrets
2019-06-25 09:28:52 -04:00
Kubernetes Prow Robot
c8cbf0db29
Merge pull request #4227 from aledbf/lint
...
Fix misspelled and e2e check
2019-06-24 21:30:34 -07:00
Manuel Alejandro de Brito Fontes
85a848faaf
Fix misspelled and e2e check
2019-06-24 23:47:22 -04:00
Manuel Alejandro de Brito Fontes
d769c8a4d8
Update nginx image
2019-06-24 23:36:23 -04:00
Kubernetes Prow Robot
5dfc7e211f
Merge pull request #4221 from aledbf/upgrade-nginx-image
...
Switch to openresty image
2019-06-24 09:45:57 -07:00
Manuel Alejandro de Brito Fontes
dca5557c50
In case of errors running e2e tests, print the generated nginx.conf file
2019-06-23 22:51:39 -04:00
Manuel Alejandro de Brito Fontes
ca6b61f639
Update e2e tests for openresty
2019-06-23 22:51:39 -04:00
Manuel Alejandro de Brito Fontes
73be06960e
Update test image and binaries
2019-06-23 22:51:38 -04:00
Manuel Alejandro de Brito Fontes
5670e3d9de
Add e2e tests for grpc using https://grpcb.in
2019-06-18 23:44:10 -04:00
Manuel Alejandro de Brito Fontes
1ed6d89c7b
Add e2e test for service type=ExternalName
2019-06-17 23:12:24 -04:00
Manuel Alejandro de Brito Fontes
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 11:32:39 -04:00
Jorrit Salverda
f77eaaee50
Add opentracing-operation-name and opentracing-location-operation-name config settings
...
With these settings custom span names can be used for the server span and location span
Signed-off-by: Jorrit Salverda <jsalverda@travix.com>
2019-06-07 14:19:34 +02:00
Michael Stramel
686f2310e4
Add "text/javascript" to compressible MIME types
...
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages , servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
Manuel Alejandro de Brito Fontes
14a394fc9e
Update nginx ( #4150 )
...
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
Kubernetes Prow Robot
251f48b120
Merge pull request #4135 from nicknovitski/deployment-api-appsv1
...
Use apps/v1 api group in e2e tests
2019-05-29 16:50:18 -07:00
Nick Novitski
e1958b8272
Run PodSecurityPolicy E2E test in parallel
...
Previously, this test modified a ClusterRole used by _every_ test. It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.
Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
2019-05-29 14:13:04 -07:00
Nick Novitski
d617e5abdc
Use apps/v1 api group in e2e tests
2019-05-29 12:12:45 -07:00
Manuel Alejandro de Brito Fontes
c2227a058d
Refactor e2e test
2019-05-27 06:31:01 -04:00
Manuel Alejandro de Brito Fontes
c4597522bf
Refactor whitelist from map to standard allow directives
2019-05-27 04:55:38 -04:00
Manuel Alejandro de Brito Fontes
77f5e4decb
Update nginx image to 0.86
2019-05-26 11:28:35 -04:00
Kubernetes Prow Robot
dfa7f10fc9
Merge pull request #4055 from nicknovitski/kustomize
...
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
Manuel Alejandro de Brito Fontes
f63f0457be
Update e2e images ( #4110 )
2019-05-24 02:47:14 +02:00
Nick Novitski
51ad0bc54b
Rearrange deployment files into kustomizations
2019-05-19 12:35:54 -07:00
Manuel Alejandro de Brito Fontes
d32079e69c
Allow to use a custom k8s version in e2e tests
2019-05-15 20:58:58 -04:00
Manuel Alejandro de Brito Fontes
87b730d5fe
Add binaries required by kubernetes-sigs/testing_frameworks
2019-05-15 17:17:32 -04:00
Manuel Alejandro de Brito Fontes
3dd1699637
Add dependencies for code generator
2019-05-14 20:15:49 -04:00
Manuel Alejandro de Brito Fontes
be2792c5f9
Refactor scripts to run e2e tests
2019-05-14 20:15:43 -04:00
Manuel Alejandro de Brito Fontes
7be1dccea7
Add option to run scripts in debug mode
2019-05-13 22:31:06 -04:00
Manuel Alejandro de Brito Fontes
16540a1dba
Run tests with only one worker
2019-05-13 22:30:21 -04:00
Manuel Alejandro de Brito Fontes
ebc50b5c68
Add image for prow jobs
2019-05-13 22:29:44 -04:00
Nick Novitski
5c26a72256
Don't try to create e2e runner rbac resources twice
2019-05-07 18:07:18 -07:00
Nick Novitski
8ea40bbcb9
fix typo: deployement->deployment
2019-05-07 16:16:06 -07:00
Kubernetes Prow Robot
b06e114177
Merge pull request #3506 from KoerberDigitalDevTeam/feature/extrenal-auth-security-opt-out
...
Improve the external authorization concept from opt-in to secure-by-default
2019-05-07 09:15:53 -07:00
Manuel Alejandro de Brito Fontes
b8fb09d7b3
Update go to 1.12.5, kubectl to 1.14.1 and kind to 0.2.1 ( #4064 )
2019-05-06 23:28:15 -04:00
okryvoshapka-connyun
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
Anthony Ho
bd694bf3de
add e2e coverage for multi auth
2019-04-18 10:32:15 -04:00
Manuel Alejandro de Brito Fontes
7283a01b9f
Update nginx image and Go to 1.12.4 ( #4010 )
2019-04-17 22:45:51 -04:00
Kubernetes Prow Robot
34734edc6e
Merge pull request #4005 from Shopify/proxy-next-upstream-timeout
...
Support proxy_next_upstream_timeout
2019-04-15 09:10:09 -07:00
Alex Kursell
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
Elvin Efendi
b13432dbe0
adjust default ssl cert e2e test
2019-04-13 15:00:44 -04:00
Elvin Efendi
1ddf5d2752
regression test for dynamic cert related default-certificate issue
2019-04-09 22:11:21 -04:00
Elvin Efendi
107bec676a
fix custom default backend test title
2019-04-09 20:24:45 -04:00
Manuel Alejandro de Brito Fontes
c9d069e64d
Update nginx image to 0.84 ( #3969 )
2019-04-06 12:30:35 -03:00
Kubernetes Prow Robot
39ecab8d5a
Merge pull request #3954 from Shopify/lb-configmap
...
Fix load-balance configmap value
2019-04-02 05:10:34 -07:00
Alex Kursell
4f819b6256
Fix load-balance configmap value
2019-04-01 15:55:36 -04:00
Kubernetes Prow Robot
b87cc5a1a6
Merge pull request #3786 from Shopify/rewrite-x-forwarded-prefix
...
Fix x-forwarded-prefix annotation
2019-03-31 16:18:32 -07:00
Elvin Efendi
87e962682f
properly parse x-forwarded-host
2019-03-31 15:10:45 -04:00
Elvin Efendi
496ff07bf1
replace some of the Nginx configuration to Lua code
2019-03-31 12:04:52 -04:00
Alex Kursell
fdd445cb2a
Fix e2e-tests
2019-03-29 16:25:25 -04:00
Alex Kursell
188295550c
Simplify x-forwarded-prefix annotation
2019-03-29 16:25:25 -04:00
Manuel Alejandro de Brito Fontes
14a9e9f3fa
Update dependencies client-go to release-11.0 and kubernetes-1.14.0
2019-03-28 20:43:18 -03:00
Manuel Alejandro de Brito Fontes
3ec1028d0b
Fix dynamic SSL certificate for aliases and redirect-from-to-www
2019-03-28 16:29:11 -03:00
Kubernetes Prow Robot
e624fe171d
Merge pull request #3839 from perprogramming/bugfix/panic-on-multiple-non-matching-canary
...
Fix panic on multiple non-matching canary
2019-03-27 16:46:48 -07:00
Manuel Alejandro de Brito Fontes
f38f1d9d0e
Update nginx image
2019-03-26 17:28:44 -03:00
Gregor Noczinski
1bef3e75b2
Set X-Request-ID
for the default-backend
, too.
2019-03-22 11:33:11 +01:00
Kubernetes Prow Robot
ec81605cae
Merge pull request #3908 from aledbf/update-nginx
...
Update nginx image
2019-03-21 11:45:41 -07:00
Manuel Alejandro de Brito Fontes
3339db2cb5
Migrate e2e cluster to kind
2019-03-20 18:36:29 -03:00
Manuel Alejandro de Brito Fontes
0bd5f5e9a0
Update nginx image
2019-03-19 10:18:19 -03:00
Elvin Efendi
1d59e4f1fe
enable dynamic SSL mode by default
2019-03-17 14:58:06 -04:00
Per Bernhardt
c995e13249
Improve text, error level, tests...
2019-03-12 15:57:36 +01:00
Alex Kursell
d3ac73be79
Remove session-cookie-hash annotation
2019-03-04 10:34:48 -05:00
Per Bernhardt
8a40e82ffb
Fix panic on multiple non-matching canary
2019-03-04 12:30:59 +01:00
Manuel Alejandro de Brito Fontes
fbed06fd3c
Update nginx image
2019-03-01 09:18:45 -03:00
Alex Kursell
28d99c6d7d
Set default for satisfy annotation to nothing
2019-02-26 15:05:45 -05:00
Manuel Alejandro de Brito Fontes
f899506b2b
Update nginx image
2019-02-26 14:38:09 -03:00
Manuel Alejandro de Brito Fontes
51c6e950a3
Fix e2e test in osx
2019-02-26 12:46:38 -03:00
Mikhail Marchenko
8b3702c829
Enable access log for default backend
...
disable log on default_server
2019-02-26 11:14:31 +03:00
Kubernetes Prow Robot
bb7a3f3527
Merge pull request #3812 from ecosia/jg-customerrors-e2e-removeunused
...
Removes unused const from customhttperrors e2e test
2019-02-25 11:40:57 -08:00
jasongwartz
164b8590a3
Removes unused const from customhttperrors e2e test
2019-02-25 17:27:05 +01:00
Manuel Alejandro de Brito Fontes
11177c95ec
Fix e2e tests
2019-02-25 12:37:20 -03:00
Kubernetes Prow Robot
d8ec96ca7d
Merge pull request #3730 from ecosia/jg-customerrors-defaultbackend
...
Changes CustomHTTPErrors annotation to use custom default backend
2019-02-25 07:22:07 -08:00
Kubernetes Prow Robot
8f5e7de623
Merge pull request #3800 from aledbf/refactor-e2e
...
Refactor e2e
2019-02-24 16:33:54 -08:00
Manuel Alejandro de Brito Fontes
5e249d3366
Refactor e2e tests to use the service ClusterIP
2019-02-24 20:04:07 -03:00
jasongwartz
3865e30a00
Changes CustomHTTPErrors annotation to use custom default backend
...
Updates e2e test
Removes focus from e2e test
Fixes renamed function
Adds tests for new template funcs
Addresses gofmt
Updates e2e test, fixes custom-default-backend test by creating service
Updates docs
2019-02-24 22:48:56 +01:00
Kubernetes Prow Robot
7b2495047f
Merge pull request #3781 from zoumo/proxy-buffer-number
...
feat: configurable proxy buffers number
2019-02-22 12:11:46 -08:00
Jim Zhang
dc63e5d185
fix: rename proxy-buffer-number to proxy-buffers-number
2019-02-22 10:21:17 +08:00
Manuel Alejandro de Brito Fontes
8b6e4d4697
Use UsePortInRedirects only if enabled
2019-02-21 17:48:45 -03:00
Jim Zhang
c92d29d462
feat: configurable proxy buffer number
2019-02-20 18:05:09 +08:00
Kubernetes Prow Robot
15d5ef95ef
Merge pull request #3740 from Shopify/session-annotation-reload
...
Fix ingress updating for session-cookie-* annotation changes
2019-02-19 15:14:21 -08:00
Alex Kursell
c180a0998b
Fix session-cookie-* annotation reloading
2019-02-19 17:27:08 -05:00
Anthony Ho
ec04852526
Create custom annotation for satisfy "value"
2019-02-19 15:58:35 -05:00
Kubernetes Prow Robot
201718ec0f
Merge pull request #3775 from kppullin/fix-l4-dns-resolve-failures
...
Fix DNS lookup failures in L4 services
2019-02-19 11:11:48 -08:00
Kevin Pullin
3ac57097f6
Add 'waitForLuaSync' sleep in external name TCP test
2019-02-17 20:32:27 -08:00
Kevin Pullin
f6aded2c51
Fix DNS failures in L4 services
2019-02-17 14:12:10 -08:00
Kubernetes Prow Robot
b72dfa99d8
Merge pull request #3765 from ElvinEfendi/custom-http-error-bug-fix
...
simplify customhttperrors e2e test and add regression test and fix a bug
2019-02-14 06:51:33 -08:00
Elvin Efendi
1959191cf3
simplify customhttperrors e2e test and add regression test
2019-02-14 08:11:18 -05:00
Alex Kursell
7e3304d4f9
Apply annotations to default location
2019-02-11 14:32:49 -05:00
Alex Kursell
9534f8bc43
Add debug tool to image
2019-02-08 11:25:04 -05:00
Kubernetes Prow Robot
17e788b8e1
Merge pull request #3684 from aledbf/health
...
Replace Status port using a socket
2019-02-06 13:49:08 -08:00
Manuel Alejandro de Brito Fontes
34b0580225
Replace Status port using a socket
2019-02-06 18:00:10 -03:00
Tim Reddehase
16dcace669
do not wait for endpoints that shouldn't exist
...
If there are no replicas defined, do not wait
around for the respective endpoints, since none
are expected.
2019-02-03 16:53:38 +01:00
Tim Reddehase
018a1e4d94
respond with 503 when there are no endpoints
...
* related to:
* https://github.com/kubernetes/ingress-nginx/issues/3070
* https://github.com/kubernetes/ingress-nginx/issues/3335
* add a 503 test
* test a service that starts out empty
(a.k.a. ingress-nginx controller (re-)start)
* test scaling up (should route traffic accordingly)
* test scaling down to empty service
* use custom deployments for scaling test.
* provide a fix by updating the lua table (cache) of the configured backends
to unset the backend if there are no endpoints available.
2019-02-03 11:43:47 +01:00
minherz
de2a1ece6d
add header-value annotation
...
add new annotation (header-value)
parse it and propogate to lua script
alter balancer rule to include it into the canary routing logic
add e2e test to validate fallback for canary-by-header-value
add description of canary-by-header-value to documentation
2019-01-30 23:23:44 +02:00
Alex Kursell
ca74960905
Fix --disable-catch-all
2019-01-25 14:53:55 -05:00
Kubernetes Prow Robot
1db9c91af4
Merge pull request #3363 from skeeey/master
...
Document for cookie expires annotation
2019-01-14 07:52:28 -08:00
liuwei
7aa5834948
add cookie expires document and fix a flaw for session-cookie-expires
2019-01-11 15:35:39 +08:00
Manuel Alejandro de Brito Fontes
0db09f425d
Refactor e2e tls helper
2019-01-10 20:59:49 -03:00
Manuel Alejandro de Brito Fontes
a3bcbeb3d2
Add support for redirect https to https when from-to-www-redirect is defined
2019-01-10 20:59:49 -03:00
Kubernetes Prow Robot
b433108ead
Merge pull request #3634 from Shopify/hyphen-in-canary-by-cookie
...
canary by cookie should support hypen in cookie name
2019-01-08 11:00:49 -08:00
Elvin Efendi
ba7b542d78
canary by cookie should support hypen in cookie name
2019-01-08 13:15:02 -05:00
Maxime Ginters
3fa8395f7f
Fix a bug in Ingress update handler
2019-01-08 09:28:42 -05:00
Kubernetes Prow Robot
8f57f9578d
Merge pull request #3586 from Shopify/disable-catch-all
...
Add --disable-catch-all option to disable catch-all server
2019-01-07 07:16:26 -08:00
Diego Woitasen
60b983503b
Consistent hashing to a subset of nodes. It works like consistent hash,
...
but instead of mapping to a single node, we map to a subset of nodes.
2019-01-03 01:32:52 -03:00
Kubernetes Prow Robot
29118750be
Merge pull request #3342 from aledbf/allowPrivilegeEscalation
...
Allow privilege escalation
2019-01-02 17:49:39 -08:00
Kubernetes Prow Robot
71cc6df74f
Merge pull request #3174 from Shopify/rewrite-regex
...
Generalize Rewrite Block Creation and Deprecate AddBaseUrl (not backwards compatible)
2019-01-02 12:30:18 -08:00
Manuel Alejandro de Brito Fontes
09e2466671
Add support to run e2e tests serially
2019-01-02 15:47:26 -03:00
Manuel Alejandro de Brito Fontes
a73dac2c0b
Fix proxy_host variable configuration
2019-01-02 15:31:27 -03:00
Anish Ramasekar
382049a0bf
Adds support for HTTP2 Push Preload annotation
...
update test for backendprotocols
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Adds support for HTTP2 Push Preload annotation
2018-12-24 17:13:25 -02:00
Manuel Alejandro de Brito Fontes
1109db2d09
Add e2e test
2018-12-21 19:30:34 -03:00
Manuel Alejandro de Brito Fontes
9be174738d
Add allowPrivilegeEscalation
2018-12-21 19:30:19 -03:00
Maxime Ginters
1678d99a03
Add --disable-catch-all option to disable catch-all server
2018-12-21 13:22:26 -05:00
Kubernetes Prow Robot
63b01370e4
Merge pull request #3548 from breunigs/integration-test-graceful-shutdown-clean
...
e2e test to ensure graceful shutdown does not lose requests
2018-12-21 06:33:27 -08:00
Elvin Efendi
17d4b2c64c
fix dind-cluster executable path
2018-12-20 16:27:42 +04:00
Kubernetes Prow Robot
ee3a8fe581
Merge pull request #3505 from Shopify/watch-pod-lua
...
Update lua configuration_data when number of controller pod change
2018-12-17 00:10:30 -08:00
Maxime Ginters
f90881b367
Update lua configuration_data when number of controller pod change
2018-12-14 13:34:54 -05:00
Zenara Daley
67654a6fd5
Generalize Rewrite Block Creation
2018-12-13 13:02:05 -05:00
Stefan Breunig
571bcfc433
e2e test to ensure graceful shutdown does not lose requests (see #3533 #3536 )
2018-12-11 11:37:19 +01:00
Conor Landry
d5840a4071
make canary ingresses independent of the order they were applied
2018-12-10 13:17:05 -05:00
Maxime Ginters
af460f7e15
Fix a bug with Canary becoming main server
2018-12-06 11:04:32 -05:00
Joshua Mervine
5de991bb5b
{tcp,udp}-services cm appear twice
2018-12-05 09:15:51 -08:00
Manuel Alejandro de Brito Fontes
68f344233b
Fix lint issues
2018-12-05 13:28:28 -03:00
Manuel Alejandro de Brito Fontes
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
Manuel Alejandro de Brito Fontes
fdeeac3606
Wait for the right number of endpoints ( #3497 )
2018-11-30 20:17:18 -03:00
Manuel Alejandro de Brito Fontes
c3ff68e9ca
Adjust default timeout for e2e tests ( #3495 )
2018-11-30 18:55:53 -03:00
Manuel Alejandro de Brito Fontes
334c38255d
Fix flaky auth test
2018-11-30 10:18:52 -03:00
Manuel Alejandro de Brito Fontes
2f71c12add
Since dynamic mode only checking for 'return 503' is not valid anymore
2018-11-30 09:37:48 -03:00
Manuel Alejandro de Brito Fontes
430045d249
Fix error in e2e test proxy setting check
2018-11-29 13:06:16 -03:00
Manuel Alejandro de Brito Fontes
e192bbaf14
Wait for endpoints instead of pods
2018-11-29 13:06:10 -03:00
Manuel Alejandro de Brito Fontes
8a0dec9dd1
Add probes to deployments used in e2e tests
2018-11-29 10:53:48 -03:00
k8s-ci-robot
710ea8c76f
Merge pull request #3333 from Shopify/dont-trust-by-default
...
breaking change: by default do not trust any client
2018-11-27 05:12:48 -08:00
Zenara Daley
2b109b360b
Only set cookies on paths that enable session affinity
2018-11-19 11:42:12 -05:00
k8s-ci-robot
82721e575d
Merge pull request #3372 from Shopify/session-cookie-path
...
Add annotation for session affinity path
2018-11-19 07:25:32 -08:00
Zenara Daley
50b29feb4a
Add annotation for session affinity path
2018-11-19 09:15:24 -05:00
k8s-ci-robot
bf7ad0daca
Merge pull request #3374 from aledbf/restore-tcp-udp
...
Revert removal of support for TCP and UDP services
2018-11-18 08:33:29 -08:00
Manuel Alejandro de Brito Fontes
a51136b863
Refactor assertions
2018-11-18 10:53:05 -03:00
Manuel Alejandro de Brito Fontes
af2dce901d
Fix tests
2018-11-18 08:17:18 -03:00
Manuel Alejandro de Brito Fontes
654eceda46
Add tcp e2e test
2018-11-16 21:07:52 -03:00
Manuel Alejandro de Brito Fontes
168f30d1ec
Revert removal of support for TCP and UDP services
2018-11-16 13:48:47 -03:00
Fernando Diaz
95b3042b6e
Add a Snippet for ModSecurity
...
Allows for the configuration of Mod Security rules via
a Snippet.
2018-11-14 23:31:27 -06:00
Elvin Efendi
5f3b48e16d
breaking change: do not trust x-forwarded-* headers by default
2018-11-13 10:35:59 +04:00
Zenara Daley
8b32c4c326
Restructure load balance e2e tests and update round robin test
2018-11-12 10:19:52 -05:00
Zenara Daley
95db733c12
add e2e test for round robin load balancing
2018-11-09 13:20:33 -05:00
Fernando Diaz
5195600841
Allows ModSecurity to be configured per location
...
The following annotations will be added:
- enable-modsecurity
- enable-owasp-core-rules
- modsecurity-transaction-id
Fixes #3167
2018-11-06 22:24:31 -06:00
k8s-ci-robot
17cad51e47
Merge pull request #3341 from Shopify/canary_upstream
...
Add canary annotation and alternative backends for traffic shaping
2018-11-06 12:22:16 -08:00
Conor Landry
412cd70d3a
implement canary annotation and alternative backends
...
Adds the ability to create alternative backends. Alternative backends enable
traffic shaping by sharing a single location but routing to different
backends depending on the TrafficShapingPolicy defined by AlternativeBackends.
When the list of upstreams and servers are retrieved, we then call
mergeAlternativeBackends which iterates through the paths of every ingress
and checks if the backend supporting the path is a AlternativeBackend. If
so, we then iterate through the map of servers and find the real backend
that the AlternativeBackend should fall under. Once found, the
AlternativeBackend is embedded in the list of VirtualBackends for the real
backend.
If no matching real backend for a AlternativeBackend is found, then the
AlternativeBackend is deleted as it cannot be backed by any server.
2018-11-06 13:13:14 -05:00
k8s-ci-robot
265f96bf14
Merge pull request #3344 from ecosia/jg-customerrors-per-ingress
...
Adds CustomHTTPErrors ingress annotation and test
2018-11-06 09:21:49 -08:00
jasongwartz
0ebf0354cb
Adds CustomHTTPErrors ingress annotation and test
...
Adds per-server/location error-catch functionality to nginx template
Adds documentation
Reduces template duplication with helper function for CUSTOM_ERRORS data
Updates documentation
Adds e2e test for customerrors
Removes AllCustomHTTPErrors, replaces with template function with deduplication and adds e2e test of deduplication
Fixes copy-paste error in test, adds additional test cases
Reverts noop change in controller.go (unused now)
2018-11-06 16:47:52 +01:00
Adnan Baruni
b511333130
add support for auth-snippet annotation
...
add test for new auth-snippet annotation
document auth-snippet annotation
add e2e test for auth-snippet annotation
add log warning and update documentation
2018-11-05 16:02:29 -06:00
Fernando Diaz
290488a505
Add e2e test for ssl-redirect
...
Adds the e2e test for the ssl-redirect annotation.
Part of the #3124 effort.
2018-11-04 03:16:03 -06:00
liuwei
5febef5e69
Use second as cookie expires unit
2018-11-02 20:07:23 +08:00
liuwei
25a839c9df
Use second as cookie expires unit
2018-11-02 19:02:32 +08:00
liuwei
e22e7e6e95
Merge remote-tracking branch 'upstream/master'
2018-11-02 18:35:41 +08:00
liuwei
f48e0162a3
Use second as cookie expires unit
2018-11-02 18:13:54 +08:00
liuwei
c74e59fa4c
Use second as cookie expires unit
2018-11-02 17:05:38 +08:00
liuwei
ce6e564f82
merge from master
2018-11-02 13:13:24 +08:00
Fernando Diaz
71f97c400a
Add e2e test for session-cookie-hash
...
Adds the e2e test for the session-cookie-hash annotation.
Part of the #3124 effort.
2018-11-01 23:44:22 -05:00
Manuel Alejandro de Brito Fontes
36aceded32
Avoid reloads when endpoints are not available
2018-11-01 10:00:49 -03:00
Manuel Alejandro de Brito Fontes
c9668dd40b
Fix e2e tests
2018-10-30 13:35:31 -03:00
k8s-ci-robot
5671c1718f
Merge pull request #3322 from aledbf/tests-cleanup
...
Remove e2e boilerplate
2018-10-30 08:40:23 -07:00
Elvin Efendi
91a12ffd52
sticky session e2e test
2018-10-30 16:12:54 +04:00
k8s-ci-robot
bec97b36c7
Merge pull request #3321 from mbode/geoip2
...
Add configuration for geoip2 module
2018-10-30 05:09:38 -07:00
liuwei
6d2d42ee0b
remove some useless comments
2018-10-30 19:31:17 +08:00
liuwei
38279366a5
add e2e test for cookie annotations
2018-10-30 19:27:21 +08:00
Manuel Alejandro de Brito Fontes
83dc4607c5
Remove e2e boilerplate
2018-10-29 22:38:15 -03:00
Maximilian Bode
c27c57dc8b
Add configuration for geoip2 module
...
Based on closed PRs #2551 , #2755
2018-10-29 21:25:23 +01:00
Manuel Alejandro de Brito Fontes
fed013ab6f
Fix status update in case of connection errors
2018-10-29 13:01:41 -03:00
k8s-ci-robot
0e2ac454cb
Merge pull request #3301 from diazjf/e2e-whitelist
...
Add e2e tests for IP Whitelist
2018-10-26 13:28:00 -07:00
Fernando Diaz
49ac77e01b
Add e2e tests for IP Whitelist
...
Adds e2e test for the whitelist-source-range annotation.
Part of the #3124 effort.
2018-10-26 14:56:11 -05:00
k8s-ci-robot
a2062cbdac
Merge pull request #3305 from aramase/approot-e2e-test
...
Add e2e test for app-root
2018-10-26 10:53:49 -07:00
k8s-ci-robot
e48a1aaa59
Merge pull request #3302 from diazjf/e2e-server-snippet
...
Add e2e test for server snippet
2018-10-26 10:51:47 -07:00
Fernando Diaz
213be6103f
Add e2e test for server snippet
...
Adds the e2e test for server snippet. Similar test to the
configuration snippet. Part of the #3124 effort.
2018-10-26 11:56:33 -05:00
Anish Ramasekar
d3a82f7b04
enhance test logic
2018-10-26 11:21:44 -05:00
Anish Ramasekar
519c30ea70
Add e2e test for app-root
2018-10-26 11:12:44 -05:00
Anish Ramasekar
04e6f7bd82
Add e2e test for force-ssl-redirect
2018-10-26 10:02:09 -05:00
Manuel Alejandro de Brito Fontes
abeb176198
Update kubeadm-dind-cluster ( #3304 )
2018-10-26 08:52:36 -03:00
k8s-ci-robot
063f652711
Merge pull request #3187 from DesmondHoLLM/feature/annotations-resty-lua
...
UPT: annotation enhancement for resty-lua-waf
2018-10-25 00:06:03 -07:00
Desmond Ho
bf03046a80
UPT: updated e2e test and default true for process-multipart-body annotation
2018-10-25 14:17:38 +08:00
Elvin Efendi
5cc116fa10
fix bug with balancer.lua configuration
2018-10-24 22:42:40 +04:00
Desmond Ho
3c2c0d0858
UPT: updated e2e testing title for lua test
2018-10-24 18:30:43 +08:00
k8s-ci-robot
01854c9113
Merge pull request #3281 from aramase/log-e2e-test
...
Add e2e test for log
2018-10-23 19:37:51 -07:00