Manuel Alejandro de Brito Fontes
2ed75b3362
Move listen logic to go
2019-08-13 14:52:25 -04:00
Pierrick Charron
f459515d0d
Add quote function in template
...
Co-authored-by: Charle Demers <charle.demers@gmail.com>
2019-08-09 15:47:29 -04:00
tals
a2e667c082
lua shared dict from cm
...
lua shared dict teml test and update func sign
lua shared dict cm test
lua shared dict integration test
lua shared dict add cm parsing
lua shared dict change test header
2019-08-08 12:44:11 +03:00
Charle Demers
72271e9313
FastCGI backend support ( #2982 )
...
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
Manuel Alejandro de Brito Fontes
ddffa2a173
Enable arm again
2019-06-26 23:00:58 -04:00
tals
a9a73c6ed6
increase lua_shared_dict config data
2019-06-12 18:42:47 +03:00
Sebastiaan Tammer
c11583dc5f
Only load modsecurity_module when ModSec is active
2019-06-11 16:39:52 +02:00
Elvin Efendi
c4ced9d694
fix source file mods
2019-06-06 10:47:08 -04:00
okryvoshapka-connyun
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
Thibault Jamet
1cd17cd12c
Implement a validation webhook
...
In case some ingress have a syntax error in the snippet configuration,
the freshly generated configuration will not be reloaded to prevent tearing down existing rules.
Although, once inserted, this configuration is preventing from any other valid configuration to be inserted as it remains in the ingresses of the cluster.
To solve this problem, implement an optional validation webhook that simulates the addition of the ingress to be added together with the rest of ingresses.
In case the generated configuration is not validated by nginx, deny the insertion of the ingress.
In case certificates are mounted using kubernetes secrets, when those
changes, keys are automatically updated in the container volume, and the
controller reloads it using the filewatcher.
Related changes:
- Update vendors
- Extract useful functions to check configuration with an additional ingress
- Update documentation for validating webhook
- Add validating webhook examples
- Add a metric for each syntax check success and errors
- Add more certificate generation examples
2019-04-18 19:07:04 +02:00
Kubernetes Prow Robot
b87cc5a1a6
Merge pull request #3786 from Shopify/rewrite-x-forwarded-prefix
...
Fix x-forwarded-prefix annotation
2019-03-31 16:18:32 -07:00
Elvin Efendi
496ff07bf1
replace some of the Nginx configuration to Lua code
2019-03-31 12:04:52 -04:00
Alex Kursell
188295550c
Simplify x-forwarded-prefix annotation
2019-03-29 16:25:25 -04:00
Thomas Jackson
eba4a8b87c
Correctly format ipv6 resolver config for lua
...
Fixes #3881
2019-03-14 10:00:24 -07:00
Alejandro Pedraza
a3c87cf9cb
Properly set ing.Service when there are multiple rules with different hosts using the same path
...
Fixes #3611
Signed-off-by: Alejandro Pedraza <alejandro.pedraza@gmail.com>
2019-03-07 06:06:24 -05:00
jasongwartz
3865e30a00
Changes CustomHTTPErrors annotation to use custom default backend
...
Updates e2e test
Removes focus from e2e test
Fixes renamed function
Adds tests for new template funcs
Addresses gofmt
Updates e2e test, fixes custom-default-backend test by creating service
Updates docs
2019-02-24 22:48:56 +01:00
Alan J Castonguay
a29c27ed4c
Datadog Opentracing support - part 2
...
This commit is part 2 of 2, adding configuration of the
Datadog Opentracing module to the controller.
Fixes half of #3752
2019-02-15 15:20:10 -05:00
Elvin Efendi
d99390f402
remove old unused lua dicts
2019-02-06 17:33:16 -05:00
Fernando Diaz
7b507095f4
Increase Unit Test Coverage for Templates
...
Increases the Coverage for nginx ingress template
functions. The majority of the added unit tests
are for checking the invalid type handling.
2019-01-29 22:55:44 -06:00
Kubernetes Prow Robot
71cc6df74f
Merge pull request #3174 from Shopify/rewrite-regex
...
Generalize Rewrite Block Creation and Deprecate AddBaseUrl (not backwards compatible)
2019-01-02 12:30:18 -08:00
Fernando Diaz
429110aa13
Add Unit Tests for getIngressInformation
...
Adds a unit test for the getIngressInformation
function.
2018-12-18 11:10:48 -06:00
Zenara Daley
67654a6fd5
Generalize Rewrite Block Creation
2018-12-13 13:02:05 -05:00
Manuel Alejandro de Brito Fontes
68f344233b
Fix lint issues
2018-12-05 13:28:28 -03:00
Manuel Alejandro de Brito Fontes
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
Manuel Alejandro de Brito Fontes
06d33c16b5
Allow to disable NGINX metrics
2018-12-05 10:14:35 -03:00
Elvin Efendi
4eabd535f9
be consistent with what Nginx supports
2018-12-02 22:20:56 +04:00
Kubernetes Prow Robot
ccd7b890fd
Merge pull request #3492 from aledbf/fix-units
...
Fix data size validations
2018-12-02 09:01:12 -08:00
Andre Marianiello
b80b19902a
Use opentracing_grpc_propagate_context when necessary
2018-12-01 16:31:10 -05:00
Manuel Alejandro de Brito Fontes
6098f6c0e7
Fix data size validations
2018-11-30 10:40:33 -03:00
Elvin Efendi
60569137ca
delete unused buildLoadBalancingConfig
2018-11-28 11:55:41 +04:00
k8s-ci-robot
c99716aadf
Merge pull request #3437 from Shopify/ingress-annotations
...
Use struct to pack Ingress and its annotations
2018-11-21 00:41:58 -08:00
Manuel Alejandro de Brito Fontes
a5341822d5
Increase log level when there is an invalid size value
2018-11-20 15:09:03 -03:00
Maxime Ginters
12766cdfc6
Use struct to pack Ingress and its annotations
2018-11-20 09:38:22 -05:00
Maxime Ginters
0f3e2b9bf0
Convert isValidClientBodyBufferSize to something more generic and use it for client_max_body_size
2018-11-13 10:11:40 -05:00
jasongwartz
0ebf0354cb
Adds CustomHTTPErrors ingress annotation and test
...
Adds per-server/location error-catch functionality to nginx template
Adds documentation
Reduces template duplication with helper function for CUSTOM_ERRORS data
Updates documentation
Adds e2e test for customerrors
Removes AllCustomHTTPErrors, replaces with template function with deduplication and adds e2e test of deduplication
Fixes copy-paste error in test, adds additional test cases
Reverts noop change in controller.go (unused now)
2018-11-06 16:47:52 +01:00
Manuel Alejandro de Brito Fontes
71ebe1cba5
Code linting
2018-10-30 20:46:48 -03:00
Henry Tran
3cbfd63992
Refactor EWMA to not use shared dictionaries
2018-10-25 22:33:42 +04:00
k8s-ci-robot
3edf11b85f
Merge pull request #3198 from aledbf/only-dynamic
...
Only support dynamic configuration
2018-10-10 05:07:34 -07:00
Manuel Alejandro de Brito Fontes
74c2f93de6
Only support dynamic configuration
2018-10-09 22:05:45 -03:00
k8s-ci-robot
f56ab42cd2
Merge pull request #3194 from bshelton229/literal-dollar-character
...
Make literal $ character work in set $location_path
2018-10-09 15:52:39 -07:00
Bryan Shelton
3686e4f366
Move escapeLocationPathVar to escapeLiteralDollar
2018-10-09 12:58:50 -07:00
Manuel Alejandro de Brito Fontes
859b298d42
Remove annotations grpc-backend and secure-backend already deprecated
2018-10-08 12:26:06 -03:00
Bryan Shelton
3dc131bd57
Make literal $ character work in set $location_path
2018-10-07 12:58:39 -07:00
Zenara Daley
bd3f56eaa0
allow curly braces to be used in regex paths
2018-10-04 10:58:38 -04:00
Zenara Daley
f29bdc3e8d
Add 'use regex' annotation to toggle nginx regex location modifier
2018-10-01 13:54:11 -04:00
k8s-ci-robot
6393ca6aaf
Merge pull request #2997 from StarOfService/global-block-ip-ua-ref
...
Provide possibility to block IPs, User-Agents and Referers globally
2018-09-25 05:51:56 -07:00
Pavel Sinkevych
7212d0081b
Provide possibility to block CIDRs, User-Agents and Referers globally
2018-09-25 14:16:20 +03:00
Zenara Daley
0de19c8062
Fix/add unit tests; Styling changes
2018-09-14 15:07:57 -04:00
Zenara Daley
0e6f0bb88d
enforce ^~ location modifier when rewrite-target annotation is set
2018-09-13 10:39:52 -04:00
Jeroen van Dongen
e428095e3c
fixed rewrites for paths not ending in /
2018-08-15 21:15:40 +02:00