Commit graph

2753 commits

Author SHA1 Message Date
oilbeater
27c177a694 disable lua for arch s390x and ppc64le
LuaJIT is not available for s390x and ppc64le, disable the lua part in nginx.tmpl on these platform.
2018-04-12 08:30:56 +08:00
Oilbeater
1b851087cf fix nil pointer when ssl with ca.crt (#2331) 2018-04-11 09:30:16 -03:00
Manuel Alejandro de Brito Fontes
3f79f27b65 Update nginx image (#2328)
* Update nginx image

* Update minikube start script
2018-04-10 19:52:58 -03:00
Manuel Alejandro de Brito Fontes
aaa01e5761 Update nginx to 1.13.12 (#2327) 2018-04-10 19:09:41 -03:00
Manuel Alejandro de Brito Fontes
732ae126fd Fix survey link (#2321) 2018-04-09 14:33:30 -03:00
Manuel Alejandro de Brito Fontes
45f61771ee Add ingress-nginx survey (#2319) 2018-04-09 14:24:27 -03:00
Elvin Efendi
8b8ba2e42e run lua-resty-waf in different modes (#2317)
* run lua-resty-waf in different modes

* update docs
2018-04-09 09:19:13 -03:00
Elvin Efendi
e6c6952629 extra waf rules per ingress (#2315)
* extra waf rules per ingress

* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules

* regenerate internal/file/bindata.go
2018-04-09 07:14:30 -03:00
Elvin Efendi
389cc50e6b annotation to ignore given list of WAF rulesets (#2314) 2018-04-08 22:55:23 -03:00
Elvin Efendi
d7c5873232 lua-resty-waf controller (#2304) 2018-04-08 17:37:13 -03:00
Manuel Alejandro de Brito Fontes
307f478662 Configure upload limits for setup of lua load balancer (#2309) 2018-04-08 15:47:49 -03:00
Manuel Alejandro de Brito Fontes
c9d4ebb9d2 Add verification of lua load balancer to health check (#2308) 2018-04-08 15:24:37 -03:00
Manuel Alejandro de Brito Fontes
937659f031 Disable lua waf where luajit is not available (#2306) 2018-04-07 15:27:10 -03:00
Manuel Alejandro de Brito Fontes
1c3c0cd4ae Fix issues building nginx image in different platforms (#2305) 2018-04-07 10:02:16 -03:00
Elvin Efendi
ca33465041 include the rest of lua-resty-waf dependencies (#2303) 2018-04-07 07:49:21 -03:00
Elvin Efendi
155dcf4cab include lua-resty-waf and its dependencies in the base Nginx image (#2301)
* install lua-resty-waf

* bump version

* include Kubernetes header
2018-04-06 18:08:25 -03:00
Manuel Alejandro de Brito Fontes
3754f09ac8 Fix race condition when Ingress does not contains a secret (#2300) 2018-04-06 17:44:41 -03:00
Manuel de Brito Fontes
188240d1b7 Escape variables in add-base-url annotation 2018-04-05 20:45:49 -03:00
Manuel Alejandro de Brito Fontes
d20c63d09a Improve indentation of generated nginx.conf (#2296) 2018-04-05 18:19:30 -03:00
Manuel Alejandro de Brito Fontes
19c6b3bdc4 Disable dynamic configuration in s390x and ppc64le (#2298) 2018-04-05 17:37:21 -03:00
Manuel Alejandro de Brito Fontes
cfb1e45729 Fix HSTS without preload (#2294) 2018-04-04 23:17:51 -03:00
Manuel Alejandro de Brito Fontes
f13cfe6152 Update nginx to 1.13.11 (#2290) 2018-04-04 12:18:17 -03:00
Manuel Alejandro de Brito Fontes
8a4f93dca2 Fix custom-error-pages image publication script (#2289) 2018-04-03 15:09:34 -03:00
Sergey Lanzman
35a1abfbb0 Update controller.go (#2285) 2018-04-02 20:16:06 -03:00
Alvaro Aleman
a93ffd2618 Add NoAuthLocations and default it to "/.well-known/acme-challenge" (#2243)
* Add NoAuthLocations and default it to "/.well-known/acme-challenge"

* Add e2e tests for no-auth-location

* Improve wording of no-auth-location tests
2018-04-01 21:02:34 -03:00
Alvaro Aleman
a3a6f48ccd Fix flaky e2e tests by always waiting after redeploying the ingress controller (#2283) 2018-04-01 20:37:27 -03:00
Elvin Efendi
49a77f157e e2e tests for dynamic configuration and Lua features and a bug fix (#2254)
* e2e tests for dynamic configuration and Lua features

* do not rely on force reload to dynamically configure when reload is needed

* fix misspelling

* skip dynamic configuration in the first template rendering

* dont error on first sync
2018-04-01 17:09:27 -03:00
Manuel Alejandro de Brito Fontes
b3f29c62e7 Fix nlb instructions (#2282) 2018-03-30 14:24:11 -03:00
Elvin Efendi
7cee1d3f3a Fix bug when auth req is enabled(external authentication) (#2280)
* set proxy_upstream_name correctly when auth_req module is used

* log a more meaningful message when backend is not found
2018-03-30 14:19:33 -03:00
AdamDang
6cd482d9dc Update README.md (#2276)
Small typo fix .
2018-03-30 08:00:43 -03:00
Manuel Alejandro de Brito Fontes
937abe6d30 Update go to 1.10.1 (#2273) 2018-03-29 14:04:59 -03:00
AdamDang
1cf69b0337 Typo fixes in modsecurity.md (#2274)
* Update modsecurity.md

Some typo fixes

* Update modsecurity.md
2018-03-29 13:48:16 -03:00
Manuel Alejandro de Brito Fontes
a025dac811 Disable opentracing for nginx internal urls (#2272) 2018-03-29 13:47:13 -03:00
Oilbeater
c7671884c9 clean up tmpl (#2263)
The nginx.conf generated now is too messy remove some section only useful when dynamic configure enabled and headers only useful for https.
2018-03-29 09:36:00 -03:00
Antoine Cotten
df3f5b4f13 Use SharedIndexInformers in place of Informers (#2271) 2018-03-29 09:35:01 -03:00
Manuel Alejandro de Brito Fontes
5bc4e2b062 Revert deleted assignment in #2146 (#2270) 2018-03-28 20:33:03 -03:00
Sylvain Rabot
d459cf0333 Managing a whitelist for _/nginx_status (#2187)
Signed-off-by: Sylvain Rabot <s.rabot@lectra.com>
2018-03-28 09:27:34 -03:00
AdamDang
5c5c97866c Update README.md (#2267)
It should be "your Ingress targets" in line 7.
2018-03-27 12:50:26 -03:00
AdamDang
a14e81fb82 Update annotations.md (#2255)
a typo fix
2018-03-25 12:55:30 -03:00
Manuel Alejandro de Brito Fontes
20f3d913d3 Add deployment docs for AWS NLB (#1785) 2018-03-24 15:27:24 -03:00
Manuel Alejandro de Brito Fontes
4b2354fa6d Update go dependencies (#2234) 2018-03-23 13:35:19 -03:00
Zenara Daley
9470b03561 Add EWMA as configurable load balancing algorithm (#2229) 2018-03-23 12:06:21 -03:00
Manuel Alejandro de Brito Fontes
5017b96deb Fix grpc json tag name (#2246) 2018-03-23 09:12:26 -03:00
Oilbeater
9da0ade914 fix: empty ingress path (#2244)
If the origin ingress rule has no field `path`, the default value will be an empty string which will cause issues when rendering template as other place will use `/` as the default value.
Set the default value of path to `/` when retrieve ingress rules from api-server. Thie will fix https://github.com/kubernetes/ingress-nginx/issues/1980
2018-03-23 08:08:42 -03:00
k8s-ci-robot
b99dd3c1ee Merge pull request #2242 from agau4779/http2
add http/2
2018-03-22 10:26:04 -07:00
Ashley Gau
eb473fad86 add http/2 2018-03-22 10:25:35 -07:00
maxlaverse
33623834b8 Revert "Get file max from fs/file-max. (#2050)" (#2241)
This reverts commit a240a23129.
2018-03-22 13:03:04 -03:00
Oilbeater
a1c295f4ca fix: cannot set $service_name if use rewrite (#2220)
$path here is the regular expression formatted nginx location not the origin path in ingress rules. Fix https://github.com/kubernetes/ingress-nginx/issues/2131
2018-03-22 09:43:45 -03:00
yulng
3a8aeda4d7 to kubernetes (#2240)
to kubernetes
2018-03-22 09:20:09 -03:00
halfcrazy
9c1ec681fc Add missing configuration in #2235 (#2236) 2018-03-22 08:53:29 -03:00