Commit graph

117 commits

Author SHA1 Message Date
Manuel de Brito Fontes
2bc507c2d4 Add example of TLS termination using a classic ELB 2017-06-28 17:36:39 -04:00
TheCodeAssassin
e1ee583b3a Update README.md
Small typo fix
2017-06-16 16:42:02 +02:00
Manuel de Brito Fontes
4d4ece1d89 Release nginx ingress controller 0.9-beta.8 2017-06-13 22:22:21 -04:00
Manuel de Brito Fontes
8a8e955b64 Update dummy controller interface 2017-06-11 15:59:44 -04:00
Michael Grosser
ec6efbd9d3 Introduce working example of nginx controller with rbac 2017-06-08 06:34:47 +00:00
Nick Sardo
8cd9a5a98a Merge pull request #786 from aledbf/update-echoheaders
Update echoserver image version in examples
2017-06-06 16:38:48 -07:00
Andrey Arapov
4618fd2f64
rbac-nginx: resourceNames cannot filter create verb 2017-06-03 11:28:28 +02:00
Jan Weitz
cf4ad26d3c Fix #798 - RBAC for leader election
Using gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.7
the nginx-controller needs to handle leader-election via configmaps.

To perform the leader-election the nginx-controller needs to have the
appropiate RBAC permissions.

Previously to this fix, the following errors occured:

-  cannot get configmaps in the namespace "NAMESPACE_PLACEHOLDER". (get configmaps ingress-controller-leader-nginx)
- initially creating leader election record: User "system:serviceaccount:NAMESPACE_PLACEHOLDER" cannot create configmaps in the namespace "NAMESPACE_PLACEHOLDER". (post configmaps)

fix ingress rbac roles

There was 2 things that the current IC (0.9 beta7) needs.

The ClusterRole was missing `get nodes`:

```
RBAC DENY: user "system:serviceaccount:kube-system:nginx-ingress-controller" groups [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] cannot "get" resource "nodes" named "xxx" cluster-wide
```

The Role was missing `update configmaps`:

```RBAC DENY: user "system:serviceaccount:kube-system:nginx-ingress-controller" groups [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] cannot "update" resource "configmaps" named "ingress-controller-leader-nginx" in namespace "kube-system"```

removed update configmap because of #798

rebased on master, moved get nodes to own rule

added get nodes to cluster permissions
2017-06-02 17:57:15 +02:00
明扬
721b228cef typo 2017-05-29 22:32:48 +08:00
Manuel de Brito Fontes
b84fc350ee Update echoserver image version in examples 2017-05-28 17:19:34 -04:00
Manuel de Brito Fontes
6563330d2b Release nginx ingress controller 0.9-beta.7 2017-05-26 15:10:07 -04:00
Manuel Alejandro de Brito Fontes
176a50ca6e Merge pull request #764 from chentao1596/example-copyright
Correct the format of 'copyright'
2017-05-25 07:45:51 -04:00
chentao1596
11eb7dff98 correct the wording of 'copyright' 2017-05-25 15:14:47 +08:00
Nick Sardo
0018fa5b15 Merge pull request #763 from aledbf/release-beta-6
Release nginx ingress controller 0.9-beta.6
2017-05-24 18:02:29 -07:00
Manuel de Brito Fontes
178321b1fe Release nginx ingress controller 0.9-beta.6 2017-05-24 20:14:49 -04:00
Joao Morais
37f8c8bb40 Add ConfigureFlags() on controller interface 2017-05-24 21:03:52 -03:00
Steve Kallestad
d7c999c970 added rbac example discussed in kubernetes/ingress issue #266 2017-05-23 09:58:53 -07:00
zouyee
7dbde0b369 update readme about vts metrics 2017-05-17 11:05:04 +08:00
Manuel Alejandro de Brito Fontes
07647fd313 Merge pull request #715 from olvesh/master
Corrected annotation ex `signin-url` to `auth-url`
2017-05-14 16:03:59 -04:00
Olve S. Hansen
4e94069bb9 Corrected annotation ex signin-url to auth-url 2017-05-14 21:00:09 +02:00
Manuel Alejandro de Brito Fontes
186615daf0 Merge pull request #703 from jcmoraisjr/jm-haproxy-configmap
HAProxy deployment doc improvements
2017-05-11 10:51:35 -03:00
tobilarscheid
9c56c72464 fix header name 2017-05-11 08:04:17 +02:00
Joao Morais
4c753fc51f Add configmap on deployment instructions 2017-05-10 22:01:45 -03:00
Joao Morais
f1a0119b22 deploy web app as an optional step on haproxy deploy 2017-05-10 22:00:29 -03:00
tobilarscheid
8d296109d4 Document passing of ssl_client_cert to backend 2017-05-10 23:29:13 +02:00
chentao1596
5851e355d7 add protocols/UDP example 2017-05-05 17:06:42 +08:00
Manuel Alejandro de Brito Fontes
93e82670bd Merge pull request #561 from caiyixiang/haproxy_custom_configuration
add a example for haproxy_custom_configuration
2017-05-03 07:58:55 -03:00
caiyixiang
baf3253bd2 add a example for haproxy_custom_configuration
fix some error
2017-05-03 14:12:46 +08:00
Luit van Drongelen
ff72c4f1e6 Fix error check in examples/custom-controller
Fixes #669
2017-04-28 13:57:46 +02:00
Manuel de Brito Fontes
83cb03b51c Release 0.9-beta.5 2017-04-27 20:28:05 -03:00
Manuel de Brito Fontes
5684c82d6c Release 0.9-beta.4 2017-04-24 22:51:49 -03:00
Arjan Schaaf
4c54a7be03 ConfigMap with proxy-set-headers not required when using the configuration-snippets to add a custom header to a specific Ingress configuration. The Ingress does need to be created for the example to work. 2017-04-24 16:25:16 +02:00
Arjan Schaaf
1b5f8b8779 ConfigMap with proxy-set-headers not required when using the configuration-snippets to add a custom header to a specific Ingress configuration. The Ingress does need to be created for the example to work. 2017-04-24 16:24:20 +02:00
Manuel Alejandro de Brito Fontes
91c00062c7 Merge pull request #628 from jcmoraisjr/jm-fix-rewrite-doc
Fix HAProxy rewrite doc
2017-04-20 14:49:35 -03:00
chentao1596
df16253fab Add example for TCP loadbalancing 2017-04-20 16:39:29 +08:00
Joao Morais
9b5f8c5e05 Fix HAProxy rewrite doc 2017-04-19 19:26:17 -03:00
Nick Sardo
642cb74cc7 [GLBC] Support backside re-encryption (#519)
Support backside re-encryption
2017-04-18 12:44:17 -07:00
Joao Morais
31b04f9c04 HAProxy Ingress rewrite options 2017-04-15 17:05:58 -03:00
Nick Sardo
12a0373d2e Merge pull request #539 from aledbf/migrate-client-go
Migrate to client-go
2017-04-05 13:50:21 -07:00
Manuel Alejandro de Brito Fontes
f4a376aa83 Merge pull request #543 from philips/use-generic-instead-of-oss
docs: use generic instead of OSS controller
2017-04-05 13:35:22 -03:00
Manuel de Brito Fontes
e0561ddeb9 Update nginx and generic controller 2017-04-04 11:51:50 -03:00
Manuel de Brito Fontes
4103537ea1 Fix lint errors 2017-04-02 11:07:07 -03:00
Joao Morais
9d807a843d Remove pre-release messages 2017-04-02 09:50:52 -03:00
Manuel Alejandro de Brito Fontes
02cd3ce885 Merge pull request #225 from electroma/nginx/extauth_headers
Support for http header passing from external authentication service
2017-04-01 20:40:29 -03:00
Brandon Philips
8c9e88058c docs: use generic instead of OSS controller
This term was really confusing me because all of these controllers in
this repo are OSS. So, instead use the term generic and define it upon
first use.
2017-04-01 17:03:44 +02:00
Manuel de Brito Fontes
7e86cfe64b Fix link to custom nginx configuration 2017-03-30 23:01:45 -03:00
caiyixiang
776dc4a6f3 add example for haproxy multi tsl 2017-03-28 16:13:53 +08:00
Joao Morais
b2c6276f0e [docs] haproxy ingress - client cert auth 2017-03-26 18:31:10 -03:00
Manuel de Brito Fontes
b33bcd9ba0 Add example for nginx in aws 2017-03-26 17:47:26 -03:00
rsafronov
6d07d32003 Merge branch 'upstream' into nginx/extauth_headers 2017-03-24 20:25:18 -04:00