Maksim Nabokikh
2c27e66cc7
feat: always set auth cookie ( #8213 )
...
* feat: always set auth cookie
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
* feat: Add annotation to always set auth cookie
* Add annotation
* Add global configmap key
* Provide unit tests and e2e tests
* Fix e2e documentation autogen script
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
* Regenerate e2e tests
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2022-05-19 15:27:53 -07:00
Josh Soref
5a7d053c6f
Document nginx 1.19.7 deprecations pulled in by ingress-nginx 1.1.3 ( #8532 )
...
* Document nginx 1.19.7 deprecations pulled in by ingress-nginx 1.1.3
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Document ingress-nginx 1.1.3/1.3.0 removals
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
2022-05-04 04:45:53 -07:00
sskserk
d4b9b486e6
Upstream keepalive time ( #8319 )
...
* nginx 1.19.10 keepalive_time parameter
* nginx v1.19.10 base image
* keepalive_time documentation
* base image
* restore base image
* e2e test
* replace default value in test
2022-04-15 04:09:10 -07:00
Mathieu Parent
5e322f79a1
Fix suggested annotation-value-word-blocklist ( #8446 )
...
Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
2022-04-08 20:14:04 -07:00
陳傑夫
c8ed1f1d7a
typo fixing ( #8447 )
2022-04-08 09:48:42 -07:00
Josh Soref
c6a8ad9a65
Darwin arm64 ( #8399 )
...
* Use sed instead of gnu find flags
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Support building linux/amd64 on darin/arm64
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Upgrade awesome_bot to dkhamsing/awesome_bot:1.20.0
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Favor find -prune for vendor
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Skip golang modcache folder
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Favor find -prune for changelog
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Ignore Changelogs of any case
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Fix service-l7 link
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Fix route53-mapper link
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
* Update rootfs contents description
The auxiliary scripts were removed after:
ab8349008a/rootfs/ingress-controller
2022-04-06 13:46:26 -07:00
Josh Soref
1614027cd4
Minor documentation cleanup ( #7826 )
...
* clarify link
* Add section headers
* console blocks
* grpc example json was not valid
* multi-tls update text
The preceding point 1 related to 4f2cb51ef8/ingress/controllers/nginx/examples/ingress.yaml4f2cb51ef8/ingress/controllers/nginx/examples/README.mdhttps://github.com/kubernetes/ingress-nginx/issues/5238
is fixed.
* article
* period
* infinitive verb + period
* clarify that the gRPC server is responsible for listening for TCP traffic and not some other part of the backend application
* avoid using ; and reword
* whitespace
* brand: gRPC
* only-does is the right form
`for` adds nothing here
* spelling: GitHub
* punctuation
`;` is generally not the right punctuation...
* drop stray `to`
* sentence
* backticks
* fix link
* Improve readability of compare/vs
* Renumber list
* punctuation
* Favor Ingress-NGINX and Ingress NGINX
* Simplify custom header restart text
* Undo typo damage
Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
2022-01-16 16:57:28 -08:00
Tobias Salzmann
ce9deaa332
Add stream-snippet as a ConfigMap and Annotation option ( #8029 )
...
* stream snippet
* gofmt -s
2021-12-23 11:46:30 -08:00
Jedidiah Park
2b499d9c86
Fix spelling in documentation and top-level files ( #8009 )
...
* fix typos in docs
* fix typos in top-level files
2021-12-06 05:46:33 -08:00
Ansil H
a03895d91e
Add ssl_reject_handshake to defaul server ( #7977 )
...
* Add ssl_reject_handshake to defaul server
* Added SSLRejectHandshake to NewDefault
* Added documentation
2021-11-29 08:33:23 -08:00
Sven Schliesing
dbf3689c5e
add documentation for "force-ssl-redirect" ( #7957 )
...
See #4628
2021-11-23 15:27:45 -08:00
James Strong
d4a6ade65f
update default block list,docs, tests ( #7942 )
...
* update default block list,docs, tests
* fix config for admin test
* gofmt
* remove the err return
2021-11-23 09:06:17 -08:00
Ricardo Katz
15567b07c0
Trim spaces from badword items ( #7921 )
2021-11-15 20:37:29 -03:00
James Strong
b7b2714b69
Update proxy-set-header example ( #7898 )
...
The Example was directed to the repo markdown and not the site.
/kind documentation
2021-11-08 22:15:39 -08:00
Sablu Miah
62ab435958
Fix Formatting/Typo ( #7894 )
...
Quick simple typo/formatting fix to keep consistency with direct sections below
2021-11-05 13:34:41 -07:00
Rahil Patel
c8ab4dc307
add brotli-min-length configuration option ( #7854 )
...
* add `brotli-min-length` configuration option
* add e2e tests for brotli
* include check for expected content type
* fix header and format
2021-11-02 04:52:59 -07:00
Ricardo Katz
4fc57dcc49
Change enable-snippet to allow-snippet-annotation ( #7670 )
...
Signed-off-by: Ricardo Pchevuzinske Katz <rkatz@vmware.com>
2021-09-20 16:52:23 -07:00
Ricardo Katz
5e6ab651ec
Add option to force enabling snippet directives ( #7665 )
...
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-09-19 12:40:08 -07:00
Renan Gonçalves
48601bcd0e
Allow the usage of Services as Upstream on a global level ( #7469 )
...
It is possible to change this behavior on an ingress level, which works
well when you only have a few of them. When running several dozen
ingress and with a high change rate of running pods it makes it easier
to define this configuration on a global level.
This change is completely backwards compatible, only adding the
possibility of defining a new key in the configmap.
2021-09-07 12:47:15 -07:00
Pål Kristensen
66c2a716da
Document the keep-alive 0 effect on http/2 requests ( #7503 )
2021-08-25 17:53:23 -07:00
Ricardo Katz
90c79689c4
Release v1 ( #7470 )
...
* Drop v1beta1 from ingress nginx (#7156 )
* Drop v1beta1 from ingress nginx
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Fix intorstr logic in controller
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* fixing admission
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* more intorstr fixing
* correct template rendering
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Fix e2e tests for v1 api
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Fix gofmt errors
* This is finally working...almost there...
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Re-add removed validation of AdmissionReview
* Prepare for v1.0.0-alpha.1 release
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Update changelog and matrix table for v1.0.0-alpha.1 (#7274 )
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* add docs for syslog feature (#7219 )
* Fix link to e2e-tests.md in developer-guide (#7201 )
* Use ENV expansion for namespace in args (#7146 )
Update the DaemonSet namespace references to use the `POD_NAMESPACE` environment variable in the same way that the Deployment does.
* chart: using Helm builtin capabilities check (#7190 )
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* Update proper default value for HTTP2MaxConcurrentStreams in Docs (#6944 )
It should be 128 as documented in https://github.com/kubernetes/ingress-nginx/blob/master/internal/ingress/controller/config/config.go#L780
* Fix MaxWorkerOpenFiles calculation on high cores nodes (#7107 )
* Fix MaxWorkerOpenFiles calculation on high cores nodes
* Add e2e test for rlimit_nofile
* Fix doc for max-worker-open-files
* ingress/tcp: add additional error logging on failed (#7208 )
* Add file containing stable release (#7313 )
* Handle named (non-numeric) ports correctly (#7311 )
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
* Updated v1beta1 to v1 as its deprecated (#7308 )
* remove mercurial from build (#7031 )
* Retry to download maxmind DB if it fails (#7242 )
* Retry to download maxmind DB if it fails.
Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>
* Add retries count arg, move retry logic into DownloadGeoLite2DB function
Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>
* Reorder parameters in DownloadGeoLite2DB
Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>
* Remove hardcoded value
Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>
* Release v1.0.0-alpha.1
* Add changelog for v1.0.0-alpha.2
* controller: ignore non-service backends (#7332 )
* controller: ignore non-service backends
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
* update per feedback
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
* fix: allow scope/tcp/udp configmap namespace to altered (#7161 )
* Lower webhook timeout for digital ocean (#7319 )
* Lower webhook timeout for digital ocean
* Set Digital Ocean value controller.admissionWebhooks.timeoutSeconds to 29
* update OWNERS and aliases files (#7365 ) (#7366 )
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
* Downgrade Lua modules for s390x (#7355 )
Downgrade Lua modules to last known working version.
* Fix IngressClass logic for newer releases (#7341 )
* Fix IngressClass logic for newer releases
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Change e2e tests for the new IngressClass presence
* Fix chart and admission tests
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Fix helm chart test
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
* Fix reviews
* Remove ingressclass code from admission
* update tag to v1.0.0-beta.1
* update readme and changelog for v1.0.0-beta.1
* Release v1.0.0-beta.1 - helm and manifests (#7422 )
* Change the order of annotation just to trigger a new helm release (#7425 )
* [cherry-pick] Add dev-v1 branch into helm releaser (#7428 )
* Add dev-v1 branch into helm releaser (#7424 )
* chore: add link for artifacthub.io/prerelease annotations
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
* k8s job ci pipeline for dev-v1 br v1.22.0 (#7453 )
* k8s job ci pipeline for dev-v1 br v1.22.0
Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com>
* k8s job ci pipeline for dev-v1 br v1.21.2
Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com>
* remove v1.21.1 version
Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com>
* Add controller.watchIngressWithoutClass config option (#7459 )
Signed-off-by: Akshit Grover <akshit.grover2016@gmail.com>
* Release new helm chart with certgen fixed (#7478 )
* Update go version, modules and remove ioutil
* Release new helm chart with certgen fixed
* changed appversion, chartversion, TAG, image (#7490 )
* Fix CI conflict
* Fix CI conflict
* Fix build.sh from rebase process
* Fix controller_test post rebase
Co-authored-by: Tianhao Guo <rggth09@gmail.com>
Co-authored-by: Ray <61553+rctay@users.noreply.github.com>
Co-authored-by: Bill Cassidy <cassid4@gmail.com>
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
Co-authored-by: Sathish Ramani <rsathishx87@gmail.com>
Co-authored-by: Mansur Marvanov <nanorobocop@gmail.com>
Co-authored-by: Matt1360 <568198+Matt1360@users.noreply.github.com>
Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
Co-authored-by: Kundan Kumar <kundan.kumar@india.nec.com>
Co-authored-by: Tom Hayward <thayward@infoblox.com>
Co-authored-by: Sergey Shakuto <sshakuto@infoblox.com>
Co-authored-by: Tore <tore.lonoy@gmail.com>
Co-authored-by: Bouke Versteegh <info@boukeversteegh.nl>
Co-authored-by: Shahid <shahid@us.ibm.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Long Wu Yuan <longwuyuan@gmail.com>
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Neha Lohia <nehapithadiya444@gmail.com>
Co-authored-by: Akshit Grover <akshit.grover2016@gmail.com>
2021-08-21 13:42:00 -07:00
Matthew Silverman
b591adac48
allow kb granularity for lua shared dicts ( #6750 )
...
Update internal/ingress/controller/template/configmap.go
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2021-08-12 11:13:50 -07:00
Sergey Lanzman
8b2db80433
Update configmap.md ( #7462 )
2021-08-08 05:19:30 -07:00
Ricardo Katz
2d90ba14f5
Change all master reference to main ( #7369 )
2021-08-06 17:07:29 -07:00
Kubernetes Prow Robot
afe10c862b
Merge pull request #6942 from rwaweber/proxyrealipcidr_docs
...
[docs]: proxy-real-ip-cidr, mention default and comma-separated behavior
2021-04-29 07:58:51 -07:00
Matthew Silverman
08250deedc
updating test-runner/echo in code, docs fixup
2021-03-29 12:29:48 -04:00
Matthew Silverman
71c8ef119d
add support for the jaeger propagation format
...
adding default, testing w3c traceparent is propagated
2021-03-26 12:33:24 -04:00
rwaweber
cdaf1bdd84
docs: proxy-real-ip-cidr
...
Mention default setting and comma-separated list behavior.
2021-03-08 22:03:39 -05:00
Matthew Silverman
28280de175
jaeger-endpoint configmap attribute
2021-02-18 17:29:35 -05:00
Elvin Efendi
e0dece48f7
Add Global Rate Limiting support
2021-01-04 17:47:07 -05:00
Josh Soref
a8728f3d2c
Spelling
2020-12-15 16:10:48 -05:00
inosato
11825698ff
fix log-format-upstream sample
...
- Align column names to snake case.
- Align the space.
2020-12-03 23:14:06 +09:00
Kubernetes Prow Robot
35338c4193
Merge pull request #6553 from agile6v/stream
...
fixes: allow user to specify the maxmium number of retries in stream block
2020-12-02 03:08:51 -08:00
agile6v
06f53bcf05
feat: allow user to specify the maxmium number of retries in stream block.
2020-12-02 14:54:14 +08:00
Matthieu Paret
948265f2e8
indicate configuration for DHE based ciphers
2020-12-01 16:43:11 +01:00
Kubernetes Prow Robot
e3a3ea8826
Merge pull request #6294 from ianbuss/auth-error-redirect-param
...
Allow customisation of redirect URL parameter in external auth redirects
2020-11-23 01:27:37 -08:00
Aditya Purandare
57b10f5693
Add datadog environment as a configuration option
...
(cherry picked from commit 4306558baa595606cd6befff08c8c815d6fe2bd4)
2020-10-12 13:52:15 -07:00
Ian Buss
41cf628bdf
Add a configurable URL redirect parameter for error URLs
2020-10-08 12:53:46 +01:00
Stevo Slavić
d4152c74fc
Sync user guide with config defaults changes
...
PRs #6226 and #6143 changed the configuration defaults but didn't update
all the configuration defaults docs in the user guide.
This PR updates the user guide to be in sync with the defaults.
Signed-off-by: Stevo Slavić <sslavic@gmail.com>
2020-10-05 10:15:06 +02:00
Manuel Alejandro de Brito Fontes
a990ac3910
Change defaults
2020-09-24 21:33:56 -03:00
Elvin Efendi
e050ff1b9f
disable session tickets by default
2020-09-18 00:08:00 -04:00
Manuel Alejandro de Brito Fontes
87aa96b468
Change server-tokens default value to false
2020-09-17 09:52:07 -03:00
Bernard Van De Walle
2baca9e32a
Merge branch 'add-opentracing-operation-name-settings' of https://github.com/JorritSalverda/ingress-nginx into add-opentracing-operation-name-settings
2020-07-23 11:42:44 -07:00
David Schwartz
d52141c2b9
Add enable-real-ip
2020-07-15 15:25:29 -04:00
agile6v
3402d07ff0
doc: update docs and fixed typos ( #5821 )
2020-07-01 10:02:52 -04:00
mengqi.wmq
f232a264ab
Add default-type as a configurable for default_type
2020-06-21 11:10:51 +08:00
agile6v
fc1c043437
Add http-access-log-path and stream-access-log-path options in configMap
2020-06-05 01:27:26 +08:00
Mark Janssen
4a36c804e6
Add 0-RTT warning
2020-05-08 12:40:11 +02:00
Kubernetes Prow Robot
0d2c6db75e
Merge pull request #5358 from praseodym/update-tls-configuration
...
Update TLS configuration
2020-04-28 07:46:08 -07:00
Manuel Alejandro de Brito Fontes
d18fa90cfd
Add e2e test for OCSP and new configmap setting
2020-04-17 12:53:47 -04:00
