DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
4755 commits 4 branches 217 tags 166 MiB
Commit graph

4755 commits

This branch
This branch
All branches
Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
176678ce8e Update nginx and e2e images (#4805) 2019-12-02 14:36:49 -03:00
Kubernetes Prow Robot
4c14edfaf7 Merge pull request #4797 from pauvos/dashboard-datasource 
Add a datasource variable $DS_PROMETHEUS
 2019-12-02 07:55:05 -08:00
Manuel Alejandro de Brito Fontes
4b96ce3609 Update nginx image to fix regression in jaeger tracing (#4803) 2019-12-02 12:17:26 -03:00
Manuel Alejandro de Brito Fontes
25212b1647 Fix markdown list (#4801) 2019-12-01 21:57:09 -03:00
Manuel Alejandro de Brito Fontes
9deed184f6 Update sysctl example (#4800) 2019-12-01 21:48:00 -03:00
Paul Voss
faaf7a5958 Add a datasource variable $DS_PROMETHEUS 2019-11-30 14:04:39 +01:00
Manuel Alejandro de Brito Fontes
3d5165bca3 Update nginx image and Go to 1.13.4 (#4785) 2019-11-29 15:20:18 -03:00
Kubernetes Prow Robot
820ffc51b5 Merge pull request #4793 from MMeent/patch-2 
Fix issue in logic of modsec template
 2019-11-28 10:57:04 -08:00
Kubernetes Prow Robot
31d594cff0 Merge pull request #4794 from sablumiah/patch-1 
Remove extra annotation when Enabling ModSecurity
 2019-11-28 10:13:04 -08:00
Sablu Miah
871033d0ae Remove extra annotation when Enabling ModSecurity 
Since version 0.25, if you try to use both annotations of:

nginx.ingress.kubernetes.io/modsecurity-snippet: |
Include /etc/nginx/owasp-modsecurity-crs/nginx-modsecurity.conf
Include /etc/nginx/modsecurity/modsecurity.conf

and 

nginx.ingress.kubernetes.io/enable-modsecurity: "true"

it breaks nginx config and you will not catch it unless you have nginx admission controller enabled. 

You do not need the annotation of `Include /etc/nginx/modsecurity/modsecurity.conf` from version 0.25
 2019-11-28 15:16:09 +00:00
MMeent
4a4025e578 Fix issue in logic of modsec template 
according to go templates: `(and ((not false) false))` == `true`

the only way to remove the owasp rules from every location is to disable modsec on that location, or to enable owasp globally, both not-so-great choices.

This commit fixes the logic issue by fixing the and-clause in the if-statement. As a result this reduces global resource usages when modsecurity is configured globally, but not on every location.
 2019-11-28 14:56:41 +01:00
Kubernetes Prow Robot
f9dfff9063 Merge pull request #4791 from bouk/manifest-add-staticport 
deploy: add protocol to all Container/ServicePorts
 2019-11-28 05:05:04 -08:00
Bouke van der Bijl
3dff92a9f3 deploy: add protocol to all Container/ServicePorts 
kubectl apply --server-side currently doesn't work with Port specs that
are missing protocol:
https://github.com/kubernetes-sigs/structured-merge-diff/issues/130 so
we should always specify it.
 2019-11-28 12:41:48 +00:00
Manuel Alejandro de Brito Fontes
449af8e4a3 Add log to parallel command to dump logs in case of errors 2019-11-27 22:01:50 -03:00
Kubernetes Prow Robot
d67126d305 Merge pull request #4780 from aledbf/openresty-master 
Update nginx image to use openresty master
 2019-11-27 12:33:03 -08:00
Kubernetes Prow Robot
4235e3e779 Merge pull request #4779 from aledbf/update-image 
Remove lua-resty-waf feature
 2019-11-27 11:45:05 -08:00
Kubernetes Prow Robot
ffa84b1284 Merge pull request #4732 from willthames/enable-opentracing-annotation 
Allow enabling/disabling opentracing for ingresses
 2019-11-26 17:31:21 -08:00
Will Thames
fcccd63002 Improve safety of AWS-based builds 
Ensure that AWS and Docker credentials don't get
accidentally added
 2019-11-27 11:07:26 +10:00
Will Thames
3716655525 Provide annotation to control opentracing 
By default you might want opentracing off, but on for a particular
ingress.

Similarly, you might want opentracing globally on, but disabled for
a specific endpoint. To achieve this, `opentracing_propagate_context`
cannot be set when combined with `opentracing off`

A new annotation, `enable-opentracing` allows more fine grained control
of opentracing for specific ingresses.
 2019-11-27 11:07:26 +10:00
Kubernetes Prow Robot
11c7e3001b Merge pull request #4777 from Miouge1/x-forwarded-prefix-chanegelog 
[docs] Add info about x-forwarded-prefix breaking change
 2019-11-26 15:57:20 -08:00
Kubernetes Prow Robot
7fe61dfd26 Merge pull request #4700 from TronWallet/fix/nodeport_externalips 
adds hability to use externalIP when controller service is of type NodePort
 2019-11-26 15:33:20 -08:00
Manuel Alejandro de Brito Fontes
523a856d55 Remove Lua resty waf feature 2019-11-26 10:37:43 -03:00
Miouge1
efb5c28693 Add info about x-forwarded-prefix breaking change 2019-11-26 10:11:02 +01:00
Kubernetes Prow Robot
d2b461a114 Merge pull request #4766 from AndiDog/dev-env-fixes 
dev-env.sh: fix for parsing `minikube status` output of newer versions, fix shellcheck lints
 2019-11-25 11:07:25 -08:00
Andreas Sommer
b3377a8980 Fix for parsing minikube status output of newer versions 
Changed in ca7d378aaa to "Configured" or "Misconfigured"
 2019-11-21 10:25:31 +01:00
Andreas Sommer
6838a2f25c Fix shellcheck lints in dev-env.sh 2019-11-21 10:23:19 +01:00
Kubernetes Prow Robot
f0c1862125 Merge pull request #4765 from mrbusche/master 
Fix extra word
 2019-11-20 17:41:28 -08:00
Matt Busche
cadacfe89f Fix extra word 2019-11-20 19:01:56 -06:00
Kubernetes Prow Robot
e452426997 Merge pull request #4749 from skomma/patch-1 
Update documentation for rate limiting
 2019-11-18 20:31:42 -08:00
Kubernetes Prow Robot
4ffc076e0c Merge pull request #4689 from janosi/upstream_ssl 
Server-only authentication of backends and per-location SSL config
 2019-11-18 19:49:43 -08:00
Kubernetes Prow Robot
9481d399e2 Merge pull request #4747 from FRI-DAY/image-add-opencontainer-source-label 
Docker image: Add source code reference label
 2019-11-18 19:23:41 -08:00
Michael Frister
89ef76490f Docker image: Add more opencontainers labels (incl. version) 2019-11-18 10:20:20 +01:00
Kubernetes Prow Robot
21a6767095 Merge pull request #4748 from argeas/update-static-ip-docs 
Update documentation for static ip example
 2019-11-14 05:07:35 -08:00
Syunsuke Komma
2af74cc9f0 Update annotations.md 
Add links to proxy-buffering section
 2019-11-13 12:54:42 +09:00
Syunsuke Komma
cbd7d60972 Update annotations.md 
Add notes of limit-rate/limit-rate-after
 2019-11-13 12:49:59 +09:00
argeas
60f4f3a490 fix ingress name in get example 2019-11-13 02:24:48 +00:00
argeas
d3fb794fce set correct apiVersion 2019-11-13 02:23:27 +00:00
Michael Frister
46401cab1f Docker image: Add source code reference label 
This allows tools that automate component updates (in our case Renovate Bot [1])
to automatically find the source repository for the Docker image and extract
release notes from there. Renovate Bot can include the relevant release notes
automatically in a merge request changing the component version.

In [2], Renovate added the label for their own Docker image.

[1] https://github.com/renovatebot/renovate
[2] https://github.com/renovatebot/renovate/pull/3753
 2019-11-12 11:40:37 +01:00
Manuel Alejandro de Brito Fontes
d6e20ea09f Fix broken links in documentation (#4746) 2019-11-08 16:22:52 -03:00
Kubernetes Prow Robot
d91b7385bd Merge pull request #4727 from nothinux/master 
update docs, remove output in prometheus deploy command
 2019-11-08 09:02:14 -08:00
Kubernetes Prow Robot
aa75e439af Merge pull request #4745 from cmluciano/cml/cmlreviewer 
add cmluciano to owners
 2019-11-08 08:34:16 -08:00
Christopher M. Luciano
62dd38a02d add cmluciano to owners 
cmluciano will be working to implement new v1/v2 API changes in the codebase
and is volunteering for triage and PR reviews.

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2019-11-08 11:06:23 -05:00
Kubernetes Prow Robot
81c52c7e89 Merge pull request #4730 from stamm/master 
add configuration for http2_max_concurrent_streams
 2019-11-08 07:12:29 -08:00
Kubernetes Prow Robot
cb1a37fbc5 Merge pull request #4695 from janosi/secure-verify-ca-secret 
Removing secure-verify-ca-secret support
 2019-11-08 07:12:21 -08:00
Kubernetes Prow Robot
fcdf22fb28 Merge pull request #4664 from bryanhanner/master 
warn when ConfigMap is missing or not parsable instead of erroring
 2019-11-08 07:12:14 -08:00
Manuel Alejandro de Brito Fontes
19f5b2348f Fix generation of sitemap.xml file (#4744) 2019-11-08 11:44:47 -03:00
Manuel Alejandro de Brito Fontes
5fd5d6a731 Update nginx image to use openresty master 2019-11-04 15:36:03 -03:00
Rustam Zagirov
ee2072446f add configuration for http2_max_concurrent_streams 2019-10-31 15:13:38 +03:00
nothinux
b92a411080 remove output in prometheus deploy command 2019-10-31 10:29:14 +07:00
Laszlo Janosi
23ccfe81f5 Server level proxy_ssl parameters are applied again, following the comments received. 
Also writing tls.crt and tls.key to disk is according to the original code.
 2019-10-26 20:20:18 +02:00