Commit graph

4158 commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
14a394fc9e
Update nginx (#4150)
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
Ionut Craciunescu
d08b8844a1 update modsecurity to latest, libmodsecurity to v3.0.3 and owasp-scrs to v3.1.0 (#4140) 2019-06-04 12:13:40 -04:00
Kubernetes Prow Robot
251f48b120
Merge pull request #4135 from nicknovitski/deployment-api-appsv1
Use apps/v1 api group in e2e tests
2019-05-29 16:50:18 -07:00
Kubernetes Prow Robot
85842edebb
Merge pull request #4133 from nicknovitski/parallel-psp-e2e-test
Run PodSecurityPolicy E2E test in parallel
2019-05-29 16:18:20 -07:00
Kubernetes Prow Robot
8a2d506d41
Merge pull request #4132 from zhucebuliaolongchuan/patch-1
Update README.md for external-auth Test 4
2019-05-29 14:40:22 -07:00
Nick Novitski
e1958b8272 Run PodSecurityPolicy E2E test in parallel
Previously, this test modified a ClusterRole used by _every_ test.  It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.

Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
2019-05-29 14:13:04 -07:00
Nick Novitski
d617e5abdc Use apps/v1 api group in e2e tests 2019-05-29 12:12:45 -07:00
Chuan Long
30d3505e7e
Update README.md for external-auth Test 4
Title for Test 4 should be `secure service with valid auth header`. The current one is the same as Test 3.
2019-05-29 13:23:20 -05:00
Sergio Morales
c38c66e00a feature(collectors): Added services to collectorLabels and requests Countervec to capture the name of the kubernetes service used to serve the client request. 2019-05-27 11:19:42 -04:00
Kubernetes Prow Robot
bf11e2ef63
Merge pull request #4101 from aledbf/reftactor-whitelist
Refactor whitelist from map to standard allow directives
2019-05-27 05:33:51 -07:00
Manuel Alejandro de Brito Fontes
c2227a058d
Refactor e2e test 2019-05-27 06:31:01 -04:00
Eugene Fedunin
254629cf16 Added support for annotation session-cookie-change-on-failure
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.

Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
Manuel Alejandro de Brito Fontes
c4597522bf
Refactor whitelist from map to standard allow directives 2019-05-27 04:55:38 -04:00
Kubernetes Prow Robot
24cb0e5d0b
Merge pull request #3803 from ElvinEfendi/use-table-nkeys
use nkeys for counting lua table elements
2019-05-27 01:41:51 -07:00
Elvin Efendi
0e9e40a60b use nkeys for counting lua table elements 2019-05-26 18:15:15 -04:00
Kubernetes Prow Robot
29ced14f4a
Merge pull request #4123 from aledbf/update-nginx
Update nginx image to 0.86
2019-05-26 10:07:49 -07:00
Kubernetes Prow Robot
eebed18a89
Merge pull request #4122 from ElvinEfendi/update-nginx-and-dependencies
Update Nginx to 1.17.0 and upgrade some other modules
2019-05-26 09:03:48 -07:00
Manuel Alejandro de Brito Fontes
77f5e4decb
Update nginx image to 0.86 2019-05-26 11:28:35 -04:00
Elvin Efendi
37a603a1af updated nginx and some other modules 2019-05-26 09:09:57 -04:00
Kubernetes Prow Robot
c7df848662
Merge pull request #4109 from aledbf/use-real-server
Use real apiserver
2019-05-26 04:47:50 -07:00
Kubernetes Prow Robot
008822b37f
Merge pull request #4120 from ElvinEfendi/lua-balancer-logging
log info when endpoints change for a balancer
2019-05-26 01:17:50 -07:00
Elvin Efendi
dc7fa885a2 log info when endpoints change for a balancer 2019-05-25 23:50:18 -04:00
Kubernetes Prow Robot
dfa7f10fc9
Merge pull request #4055 from nicknovitski/kustomize
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
Kubernetes Prow Robot
1f4469fc21
Merge pull request #4113 from Shopify/goos-linux
Force GOOS to linux
2019-05-24 09:00:22 -07:00
Maxime Ginters
7bf996fdd2 Force GOOS to linux 2019-05-24 10:33:16 -04:00
Manuel Alejandro de Brito Fontes
f63f0457be
Update e2e images (#4110) 2019-05-24 02:47:14 +02:00
Kubernetes Prow Robot
ee1f36d8df
Merge pull request #4108 from aledbf/fix-flake
Add retry to  LookupHost used to check the content of ExternalName
2019-05-23 06:34:28 -07:00
Manuel Alejandro de Brito Fontes
0baf75cd17
Add retry to LookupHost used to check the content of ExternalName 2019-05-23 05:07:25 -04:00
Manuel Alejandro de Brito Fontes
d3c957192e
Update go dependencies 2019-05-23 04:58:14 -04:00
Manuel Alejandro de Brito Fontes
c639f490b1
Use a real apiserver to test the store 2019-05-23 04:58:14 -04:00
Kubernetes Prow Robot
3e3e29b78f
Merge pull request #4102 from aledbf/listingresses
Refactor ListIngresses to add filters
2019-05-22 06:48:14 -07:00
Kubernetes Prow Robot
0bdca63d6d
Merge pull request #4100 from aledbf/remove-stop
Remove stop controller endpoint
2019-05-22 06:10:13 -07:00
Manuel Alejandro de Brito Fontes
bae49a4657
Refactor ListIngresses to add filters 2019-05-22 05:37:44 -04:00
Kubernetes Prow Robot
def96a5439
Merge pull request #4107 from MMeent/patch-1
Clear up some inconsistent / unclear wording
2019-05-21 07:00:54 -07:00
MMeent
73c70e28b4
Clear up some inconsistent / unclear wording
IPv6 enabled/disabled working was confusing or contradicting itself. This updates the wording to what is expected, based on the default values in the table above, and the behaviour that I could find in code.
2019-05-21 15:27:58 +02:00
Kubernetes Prow Robot
9ee0b5a795
Merge pull request #4105 from reynaldiwijaya/master
UPT: Add variable to define custom sampler host and port
2019-05-21 05:56:45 -07:00
reynaldi.wijaya
616b1e239a UPT: Opentracing configmap documentation 2019-05-21 18:14:33 +08:00
reynaldi.wijaya
d468cd5ec5 UPT: Modify configmap to include jaeger sampler host and jaeger sampler port 2019-05-21 17:54:29 +08:00
reynaldi.wijaya
31ffad8fa1 UPT: Add variable to define custom sampler host and port, add commituser 2019-05-21 12:34:38 +08:00
Nick Novitski
51ad0bc54b Rearrange deployment files into kustomizations 2019-05-19 12:35:54 -07:00
Kubernetes Prow Robot
ff80dca51e
Merge pull request #4091 from weltschraet/modsecurity-memory
reduce memory footprint and cpu usage when modsecurity and owasp rule…
2019-05-19 06:27:11 -07:00
weltschraet
abca32ba8e reduce memory footprint and cpu usage when modsecurity and owasp rules are enabled globally 2019-05-18 19:08:30 +02:00
Kubernetes Prow Robot
19501b217d
Merge pull request #4089 from alanjcastonguay/docs/use-gzip-configmap-defaults
Docs: configmap: use-gzip
2019-05-18 04:09:14 -07:00
Kubernetes Prow Robot
c12059bff5
Merge pull request #4098 from kevinsimper/patch-1
Update configmap about adding custom locations
2019-05-18 03:39:12 -07:00
Kubernetes Prow Robot
0f13d65b05
Merge pull request #4099 from kppullin/patch-1
Docs - Update capture group `placeholder`
2019-05-18 03:09:13 -07:00
Kevin Pullin
3ef6689bbd
Docs - Update capture group placeholder
The current ingress example uses the `$2` capture group placeholder, however the description refers to the `$1` placeholder (this was previously correct, but was not updated when the ingress example changed from $1 to $2).
2019-05-17 16:01:17 -07:00
Manuel Alejandro de Brito Fontes
32fda20378
Remove stop controller endpoint 2019-05-17 18:42:22 -04:00
Kevin Simper
ddc2ce5c70
Update configmap about adding custom locations 2019-05-17 21:39:40 +02:00
Kubernetes Prow Robot
1bd3fd2429
Merge pull request #4088 from aledbf/prow
Migrate to Prow
2019-05-17 12:26:11 -07:00
Manuel Alejandro de Brito Fontes
d32079e69c
Allow to use a custom k8s version in e2e tests 2019-05-15 20:58:58 -04:00