DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1897 commits 4 branches 217 tags 166 MiB
Commit graph

219 commits

Author SHA1 Message Date
Manuel de Brito Fontes
b7b41248cb Lint code 2017-08-23 15:40:57 -03:00
Manuel de Brito Fontes
806144421e Move certificate authentication from location to server 2017-08-23 00:39:38 -03:00
Seth Pollack
f045fa6d88 refactor rate limit whitelist 2017-08-22 20:47:29 -04:00
Seth Pollack
a3594f6c4c keep zones unique per ingress resource 2017-08-22 14:54:08 -04:00
Manuel de Brito Fontes
a392f29956 Replace base64 encoding with random uuid 2017-08-22 10:53:13 -03:00
Manuel Alejandro de Brito Fontes
def5155aa6 Merge pull request #1210 from sethpollack/whitelist 
add rate limit whitelist
 2017-08-22 08:23:45 -04:00
Manuel Alejandro de Brito Fontes
9863140b8c Merge pull request #1186 from diazjf/client-body-buffer-size 
Add annotation for client-body-buffer-size per location
 2017-08-22 08:02:35 -04:00
Seth Pollack
6253c34266 add rate limit whitelist 2017-08-22 07:53:52 -04:00
Fernando Diaz
e9ffbf0f87 Add annotation for client-body-buffer-size per location 
Adds an annotation which allows for client-body-buffer-size to
be configured per specific locations specified in the ingress
resource yaml.
 2017-08-21 23:12:30 -05:00
danielqsj
68685edfc9 Add support for specific scheme for base url 2017-08-21 14:10:35 +08:00
Manuel Alejandro de Brito Fontes
6ef63438b6 Merge pull request #1190 from aledbf/disable-ssl-passthrough 
Add flag to disable SSL passthrough
 2017-08-20 22:25:06 -04:00
Manuel de Brito Fontes
daa9fea41a Add flag to disable SSL Passthrough 2017-08-20 22:34:31 -03:00
Manuel de Brito Fontes
b2be9f0e04 Fix sign in URL 2017-08-20 20:39:58 -03:00
Manuel de Brito Fontes
ed68194688 Add support for temporal and permanent redirects 2017-08-20 15:07:25 -03:00
Manuel Alejandro de Brito Fontes
f6413e292f Merge pull request #1123 from diazjf/server-alias 
Add support for Server Alias in Nginx
 2017-08-19 14:47:23 -04:00
danielqsj
d996a25a79 Fix sticky upstream not used when enable rewrite 2017-08-18 17:55:23 +08:00
Fernando Diaz
47e4dd59a8 Merge branch 'master' into server-alias 2017-08-17 17:32:48 -05:00
Fernando Diaz
e12138f4dc Remove any aliases that conflict with a hostname 
Removes the alias association if an existing server
with the same hostname as the alias exists. This is
done to disallow any duplicate server creation when
the alias annotation is provided.
 2017-08-17 13:05:52 -05:00
hzxuzhonghu
fb2ad65c41 update nginx.go: preformance improve 2017-08-16 15:02:30 +08:00
Fernando Diaz
62fea9aa01 Update Server Alias Annotation with Review Changes 
Updates the Server-Alias annotation to create another server
containing the same configuration as the current server, but
with the name provided in the annotation.
 2017-08-15 14:49:04 -05:00
TigerXu
2af727a33e Update nginx.go 
fix typo
 2017-08-15 15:14:08 +08:00
TigerXu
92b59fc8bf Update nginx.go 2017-08-15 14:25:46 +08:00
Fernando Diaz
ac504bdbc0 Add support for Server Alias in Nginx 
Adds support for server alias in nginx. Adds a new annotation
which allows us to specify a server alias that will be appended
to the server name.
 2017-08-13 13:01:00 -05:00
zhengjiajin
890c57f2ca feat(#733)Support nginx bandwidth control 2017-08-13 14:52:20 +08:00
Manuel Alejandro de Brito Fontes
cf732e846e Merge pull request #1074 from aledbf/rem-lua 
Remove lua and use fastcgi to render errors
 2017-08-07 22:15:32 -04:00
zhengjiajin
13ab894e6f feat/proxytimeout support proxy timeout for stream type 2017-08-08 02:01:12 +08:00
Manuel de Brito Fontes
a091d3ede7 Remove lua and use fastcgi to render errors 2017-08-05 16:29:58 -04:00
Seth Pollack
40a9a54082
add per minute rate limiting 2017-08-01 23:24:48 -04:00
Manuel de Brito Fontes
fe1b913f21 Add function to allow custom values in Ingress status 2017-07-28 20:26:35 -04:00
Manuel Alejandro de Brito Fontes
a56dd7cc38 Merge pull request #1013 from caiyixiang/unify_forms 
The fields of vtsDate are unified in the form of plural
 2017-07-26 22:39:08 -04:00
caiyixiang
2b72441bc5 The fields of vtsDate are unified in the form of plural 2017-07-25 14:21:12 +08:00
Manuel de Brito Fontes
294ecb4986 Update nginx controller 2017-07-20 10:41:50 -07:00
Bastian Hofmann
38d198bfde Make proxy_headers_hash_bucket_size and proxy_headers_hash_max_size configurable in the nginx controller 
See https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_headers_hash_bucket_size and https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_headers_hash_max_size
 2017-07-13 13:57:03 +02:00
n1koo
02832dec6c Add support for add_headers 2017-07-10 09:55:07 +03:00
Georgiy Kutsurua
d56e261835 Sets parameters for a shared memory zone that will keep states for various keys. 2017-07-07 15:45:13 +04:00
Manuel de Brito Fontes
835aea4bab Fix lint code errors 2017-07-06 16:17:46 -04:00
Remington Reackhof
1b3f0acde1 add configmap and template changes for comma separated proxy-real-ip-cidr list 2017-07-06 10:54:36 -05:00
Manuel de Brito Fontes
5d5e0df4b0 Lint code 2017-07-03 22:10:48 -04:00
Gorka Lerchundi Osa
5503e8d0e9 nginx/proxy: allow specifying next upstream behaviour 2017-06-27 23:30:43 +02:00
Manuel Alejandro de Brito Fontes
312c9ec7e2 Merge pull request #871 from aledbf/fix-sticky 
Add feature to allow sticky sessions per location
 2017-06-23 13:22:12 -04:00
Manuel de Brito Fontes
b28485cf31 Fix nginx error check 2017-06-23 09:55:45 -04:00
Manuel de Brito Fontes
83d03a19a6 Add feature to allow sticky sessions per location 2017-06-22 14:12:57 -04:00
Manuel de Brito Fontes
6e2203594e Add upstream keepalive connections cache 2017-06-21 23:52:06 -04:00
Manuel de Brito Fontes
85e6d30844 Improve variable configuration for source IP address 2017-06-21 00:52:12 -04:00
Manuel de Brito Fontes
92e3b5ba78 Lint nginx code 2017-06-14 23:05:04 -04:00
Manuel de Brito Fontes
d5d958a332 Avoid setting maximum number of open file descriptors lower than 1024 2017-06-12 16:20:40 -04:00
Manuel de Brito Fontes
748f686eca Update nginx interface 2017-06-11 15:56:40 -04:00
Cory Klein
fa70e5e905 Make log format json escaping configurable 
This will allow json logging in nginx ingress controllers which greatly
improves ease of log indexing and searching via elasticsearch.

After this change is made, users could set the following property in the
ingress configmap to enable json logging:

log-format-upstream: '{"proxy_protocol_addr": "$proxy_protocol_addr", "proxy_add_x_forwarded_for": "$proxy_add_x_forwarded_for", "remote_user": "$remote_user", "time_iso8601": "$time_iso8601", "request": "$request", "status": "$status", "body_bytes_sent": "$body_bytes_sent", "http_referer": "$http_referer", "http_user_agent": "$http_user_agent", "request_length": "$request_length", "request_time": "$request_time", "proxy_upstream_name": "$proxy_upstream_name", "upstream_addr": "$upstream_addr", "upstream_response_length": "$upstream_response_length", "upstream_response_time": "$upstream_response_time", "upstream_status": "$upstream_status"}'
 2017-06-09 15:32:11 -06:00
Manuel Alejandro de Brito Fontes
dbb12afbb9 Merge pull request #829 from rlguarino/ross/2017-06-08T18-48-35-07-00 
feat(template): wrap IPv6 addresses in []
 2017-06-09 13:21:30 -04:00
Ross Guarino
54f6729dc8 feat(template): wrap IPv6 addresses in [] 
Add formatIP helper function which will wrap IPv6 addresses
in [] and print IPv4 addresses as is.

Closes #828
 2017-06-08 20:11:00 -07:00
Manuel de Brito Fontes
b70e9ca078 Fix dynamic variable name 2017-06-02 11:12:02 -04:00
Manuel Alejandro de Brito Fontes
32f24380ec Merge pull request #787 from aledbf/pass-server-header 
Add setting to allow returning the Server header from the backend
 2017-05-28 19:16:58 -04:00
Manuel de Brito Fontes
2f20c6bfcb Add setting to allow returning the Server header from the backend 2017-05-28 17:40:25 -04:00
Manuel de Brito Fontes
8837cf93e2 Allow customization of variables hash tables 2017-05-28 16:05:49 -04:00
Manuel de Brito Fontes
20e99fa409 Update sniff parser to fix index out of bound error 2017-05-26 14:25:06 -04:00
Joao Morais
37f8c8bb40 Add ConfigureFlags() on controller interface 2017-05-24 21:03:52 -03:00
Manuel de Brito Fontes
4d7a280371 Fix server name hash maxSize default value 2017-05-23 20:13:32 -04:00
Manuel Alejandro de Brito Fontes
49e490e5e5 Merge pull request #704 from ckeyer/fix_nginx_reload 
fix nginx reload flags '-c'
 2017-05-17 07:44:54 -04:00
Manuel Alejandro de Brito Fontes
b4032f0648 Merge pull request #722 from aledbf/remove-go-reaper 
Remove go-reap and use tini as process reaper
 2017-05-17 07:37:23 -04:00
Chuanjian Wang
9f32b74fea
fix nginx reload flags '-c' 2017-05-17 18:30:19 +08:00
Vlad Gorodetsky
3bd2cb331f Add keepalive_requests and client_boxy_buffer_size options 2017-05-17 09:36:10 +03:00
Manuel de Brito Fontes
22d63d0ad0 Auto stash before merge of "master" and "master/master" 
Remove go-reap and use tini as process reaper
 2017-05-16 16:06:33 -04:00
Manuel de Brito Fontes
a537d2d0fa Remove secrets from ingress after a Delete event 2017-05-11 22:19:16 -03:00
Manuel de Brito Fontes
4bd4bf3be6 Fix remote address in log when protocol is https 2017-05-11 15:04:19 -03:00
David Pratt
d56d8b7da1 Use proxy-protocol to pass through source IP to nginx 2017-05-10 16:22:48 -05:00
Manuel Alejandro de Brito Fontes
317f222527 Merge pull request #679 from ckeyer/template_getenv 
add getenv
 2017-05-10 08:50:11 -03:00
Chuanjian Wang
87b05847bf
add template function getenv 
Signed-off-by: Chuanjian Wang <me@ckeyer.net>
 2017-05-10 14:35:42 +08:00
Donald Guy
2d1b6dc9c9 [nginx] pass non-SNI TLS hello to default backend, Fixes #693 2017-05-08 17:44:43 -04:00
caiyixiang
f4da971b86 nginx/pkg/config: delete unuseful variable 2017-05-02 17:24:01 +08:00
Jeff Pearce
a5d58cc521 Override load balancer alg view config map 2017-04-29 08:37:24 -07:00
Manuel de Brito Fontes
f4147e9e6c Avoid running nginx if the configuration file is empty 2017-04-26 23:34:36 -03:00
Arjan Schaaf
389e0f527c Nginx sticky annotations #258 made the global enable-sticky-sessions obsolete 2017-04-21 14:57:45 +02:00
Manuel de Brito Fontes
12d4aadf74 Allow configuration of features underscores_in_headers and ignore_invalid_headers 2017-04-20 18:12:16 -03:00
Manuel de Brito Fontes
786d977a90 Fix lint errors 2017-04-20 16:48:14 -03:00
Manuel de Brito Fontes
de14e2f4f1 Refactor ssl-passthroug using go to handle TLS hello 2017-04-19 01:39:14 -03:00
Justin Santa Barbara
322be61522 Compute server_names_hash_bucket_size correctly 
There were some edge cases where we did not calculate hash_bucket_size
correctly.

Fix #623
 2017-04-18 22:29:51 -04:00
Manuel de Brito Fontes
aba45a01ad Process exited cleanly before we hit wait4 2017-04-16 20:04:32 -03:00
Manuel de Brito Fontes
9994365ae4 Allow custom server_names_hash_max_size and server_names_hash_bucket_size values 2017-04-14 20:59:10 -03:00
Manuel de Brito Fontes
256cd6b1df Replace custom child reap code with go-reap 2017-04-12 20:20:18 -03:00
Manuel de Brito Fontes
8f3f51367a Remove test because of the refactoring 2017-04-11 14:50:28 -03:00
Manuel de Brito Fontes
190788848a Read resolv file just oncce 2017-04-11 11:47:49 -03:00
Manuel Alejandro de Brito Fontes
64d0b08128 Merge pull request #577 from aledbf/avoid-childs 
Avoid zombie child processes
 2017-04-09 15:29:04 -03:00
Manuel de Brito Fontes
25bb7e4311 Set different listeners per protocol version 2017-04-09 15:03:27 -03:00
Manuel de Brito Fontes
1c6c4273c9 Avoid child processes 2017-04-09 13:58:03 -03:00
Manuel de Brito Fontes
cbe4029597 Add option to disable hsts preload 2017-04-05 22:48:43 -03:00
Nick Sardo
12a0373d2e Merge pull request #539 from aledbf/migrate-client-go 
Migrate to client-go
 2017-04-05 13:50:21 -07:00
Manuel de Brito Fontes
e0561ddeb9 Update nginx and generic controller 2017-04-04 11:51:50 -03:00
Giancarlo Rubio
197acf0f2b Build namespace and ingress class as label 2017-04-04 16:23:40 +02:00
Giancarlo Rubio
c21f7ce666 OverrideFlags was called before parsing arguments (arguments was always empty) 
correct args order for newStatsCollector
 2017-04-04 13:15:06 +02:00
Manuel de Brito Fontes
4103537ea1 Fix lint errors 2017-04-02 11:07:07 -03:00
Manuel Alejandro de Brito Fontes
02cd3ce885 Merge pull request #225 from electroma/nginx/extauth_headers 
Support for http header passing from external authentication service
 2017-04-01 20:40:29 -03:00
Manuel de Brito Fontes
8e41bdd3d4 Add setting to configure ecdh curve 2017-03-30 23:23:14 -03:00
Manuel de Brito Fontes
cf82f694de Avoid negative values configuring the max number of open files 2017-03-30 10:10:47 -03:00
Manuel de Brito Fontes
1278a97dc6 Convert WorkerProcesses setting to string to allow the value auto 2017-03-28 19:58:09 -03:00
rsafronov
6d07d32003 Merge branch 'upstream' into nginx/extauth_headers 2017-03-24 20:25:18 -04:00
Thomas Peitz
3b55e09e23 Remove unnecessary quote in nginx log format 2017-03-22 15:48:15 +01:00
chentao1596
37bdb3952e fix all go style mistakes about fmt.Errorf 2017-03-17 08:35:55 +08:00
Manuel Alejandro de Brito Fontes
3d681cda78 Merge pull request #430 from ohmystack/fix-baseurl 
Fix add-base-url
 2017-03-15 19:37:44 -03:00
caiyixiang
3b152e6aa7 0 2017-03-14 19:19:21 +08:00
rsafronov
7034e1de69 Merge remote-tracking branch 'upstream/master' into nginx/extauth_headers 
# Conflicts:
#	core/pkg/ingress/annotations/authreq/main.go
 2017-03-13 15:04:37 -04:00