Elvin Efendi
2b46c3a056
fix monitor test after move to openresty
2019-06-24 14:21:19 -04:00
Kubernetes Prow Robot
5dfc7e211f
Merge pull request #4221 from aledbf/upgrade-nginx-image
...
Switch to openresty image
2019-06-24 09:45:57 -07:00
Manuel Alejandro de Brito Fontes
991f95f6bf
Migrate to openresty
2019-06-23 22:29:11 -04:00
Manuel Alejandro de Brito Fontes
d7b213d979
Do not set Host header when backend protocol is grpc
2019-06-18 23:44:10 -04:00
Kubernetes Prow Robot
57a0542fa3
Merge pull request #4187 from s-shirayama/add_unit_test_case_for_balancer_lua_module
...
Add unit test cases for balancer lua module
2019-06-13 09:02:20 -07:00
Sebastiaan Tammer
c11583dc5f
Only load modsecurity_module when ModSec is active
2019-06-11 16:39:52 +02:00
s-shirayama
6f0d6b38b8
Add unit test case for canary by header
2019-06-11 22:34:33 +09:00
s-shirayama
0ff679baa7
Add unit test case for canary by cookie
2019-06-11 22:34:30 +09:00
s-shirayama
e9f4c0bb0e
Add unit test case for canary by weight
2019-06-11 22:34:24 +09:00
s-shirayama
7a15f52cf1
Add unit test case for balancer.route_to_alternative_balancer()
2019-06-11 22:34:05 +09:00
Elvin Efendi
e2c6202324
bugfix: check all previously failing upstreams, not just the last one
2019-06-07 10:00:31 -04:00
Elvin Efendi
b9b1ffb1d5
simplify sticky balancer
2019-06-06 16:32:33 -04:00
Elvin Efendi
83f2acbe38
Session Affinity ChangeOnFailure should be boolean
2019-06-06 11:22:05 -04:00
Kubernetes Prow Robot
286ff13af2
Merge pull request #4048 from fedunineyu/change-upstream-on-error-with-sticky-session
...
Change upstream on error when sticky session balancer is used
2019-06-06 07:22:17 -07:00
Eugene Fedunin
254629cf16
Added support for annotation session-cookie-change-on-failure
...
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.
Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
Manuel Alejandro de Brito Fontes
c4597522bf
Refactor whitelist from map to standard allow directives
2019-05-27 04:55:38 -04:00
Elvin Efendi
0e9e40a60b
use nkeys for counting lua table elements
2019-05-26 18:15:15 -04:00
Elvin Efendi
dc7fa885a2
log info when endpoints change for a balancer
2019-05-25 23:50:18 -04:00
weltschraet
abca32ba8e
reduce memory footprint and cpu usage when modsecurity and owasp rules are enabled globally
2019-05-18 19:08:30 +02:00
MRoci
8b7f069b56
load modsecurity.conf on ModSecurity.Enable
2019-05-13 17:39:06 +02:00
okryvoshapka-connyun
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
Kubernetes Prow Robot
34734edc6e
Merge pull request #4005 from Shopify/proxy-next-upstream-timeout
...
Support proxy_next_upstream_timeout
2019-04-15 09:10:09 -07:00
Alex Kursell
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
Kubernetes Prow Robot
6b6610dabe
Merge pull request #4000 from ElvinEfendi/dynamic-ssl-improvements
...
Dynamic ssl improvements
2019-04-13 14:38:00 -07:00
Elvin Efendi
2f3cf1a6c0
do not create empty access_by_lua_block
2019-04-13 16:11:46 -04:00
Elvin Efendi
93f00b2143
fix luacheck warning
2019-04-13 15:26:48 -04:00
Elvin Efendi
45add6cb7d
better certificate lua unit tests
2019-04-13 14:01:44 -04:00
Elvin Efendi
42c207c548
handle default certificate correctly in Lua
2019-04-13 12:32:06 -04:00
Elvin Efendi
f067712824
better logging in certificate.lua
2019-04-13 12:32:06 -04:00
Elvin Efendi
8f81538b0d
lua plugin system
2019-04-04 09:25:22 -04:00
Elvin Efendi
87e962682f
properly parse x-forwarded-host
2019-03-31 15:10:45 -04:00
Elvin Efendi
496ff07bf1
replace some of the Nginx configuration to Lua code
2019-03-31 12:04:52 -04:00
Gregor Noczinski
1bef3e75b2
Set X-Request-ID
for the default-backend
, too.
2019-03-22 11:33:11 +01:00
Manuel Alejandro de Brito Fontes
6c1a7f1efd
Add support for IPV6 resolvers
2019-03-21 11:23:47 -03:00
Alejandro Pedraza
a3c87cf9cb
Properly set ing.Service when there are multiple rules with different hosts using the same path
...
Fixes #3611
Signed-off-by: Alejandro Pedraza <alejandro.pedraza@gmail.com>
2019-03-07 06:06:24 -05:00
Alex Kursell
d3ac73be79
Remove session-cookie-hash annotation
2019-03-04 10:34:48 -05:00
Mikhail Marchenko
8b3702c829
Enable access log for default backend
...
disable log on default_server
2019-02-26 11:14:31 +03:00
Alex Kursell
c96eae3015
Add /dbg certs command
2019-02-25 11:38:07 -05:00
jasongwartz
3865e30a00
Changes CustomHTTPErrors annotation to use custom default backend
...
Updates e2e test
Removes focus from e2e test
Fixes renamed function
Adds tests for new template funcs
Addresses gofmt
Updates e2e test, fixes custom-default-backend test by creating service
Updates docs
2019-02-24 22:48:56 +01:00
Kubernetes Prow Robot
7b2495047f
Merge pull request #3781 from zoumo/proxy-buffer-number
...
feat: configurable proxy buffers number
2019-02-22 12:11:46 -08:00
Jim Zhang
dc63e5d185
fix: rename proxy-buffer-number to proxy-buffers-number
2019-02-22 10:21:17 +08:00
Manuel Alejandro de Brito Fontes
8b6e4d4697
Use UsePortInRedirects only if enabled
2019-02-21 17:48:45 -03:00
Jim Zhang
c92d29d462
feat: configurable proxy buffer number
2019-02-20 18:05:09 +08:00
Kubernetes Prow Robot
15d5ef95ef
Merge pull request #3740 from Shopify/session-annotation-reload
...
Fix ingress updating for session-cookie-* annotation changes
2019-02-19 15:14:21 -08:00
Alex Kursell
c180a0998b
Fix session-cookie-* annotation reloading
2019-02-19 17:27:08 -05:00
Anthony Ho
ec04852526
Create custom annotation for satisfy "value"
2019-02-19 15:58:35 -05:00
Kubernetes Prow Robot
201718ec0f
Merge pull request #3775 from kppullin/fix-l4-dns-resolve-failures
...
Fix DNS lookup failures in L4 services
2019-02-19 11:11:48 -08:00
Kevin Pullin
f6aded2c51
Fix DNS failures in L4 services
2019-02-17 14:12:10 -08:00
Kubernetes Prow Robot
908a2ae506
Merge pull request #3764 from ElvinEfendi/cleanup-confusing-attribute
...
delete confusing CustomErrors attribute to make things more explicit
2019-02-14 03:26:21 -08:00
Elvin Efendi
adc128711b
delete confusing CustomErrors attribute to make things more explicit
2019-02-13 22:41:02 -05:00