Ricardo Katz
4c6a7ee158
Decouple shared functions between controllers ( #8829 )
...
* Decouple shared functions between controllers
* Apply suggestions from code review
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
* Fix package names and fmt
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
2022-07-20 11:53:44 -07:00
Ricardo Katz
d226d831bd
Update go version, modules and remove ioutil
2021-08-06 14:15:21 -03:00
Manuel Alejandro de Brito Fontes
d781d99797
Fixes for gosec
2020-12-04 20:29:07 -03:00
Manuel Alejandro de Brito Fontes
108637bb1c
Migrate to structured logging (klog)
2020-09-27 18:59:57 -03:00
Manuel Alejandro de Brito Fontes
cb86c5698c
Migrate to klog v2
2020-08-08 21:01:03 -04:00
Manuel Alejandro de Brito Fontes
55820ef1e8
Allow multiple CA Certificates ( #4556 )
2019-09-13 09:22:24 -03:00
Ricardo Katz
9c51676f17
Add support to CRL ( #3164 )
...
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Add support to CRL
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
2019-09-03 16:47:28 -04:00
Manuel Alejandro de Brito Fontes
8def5ef7ca
Add support for multiple alias and remove duplication of SSL certificates ( #4472 )
2019-08-26 10:58:44 -04:00
Manuel Alejandro de Brito Fontes
23ed3ba4c4
Fix file permissions to support volumes
2019-08-15 20:48:37 -04:00
Manuel Alejandro de Brito Fontes
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
Manuel Alejandro de Brito Fontes
3d7a09347d
Apply fixes suggested by staticcheck
2019-07-08 16:18:52 -04:00
Manuel Alejandro de Brito Fontes
8807db9748
Check and complete intermediate SSL certificates
2019-07-04 19:13:21 -04:00
Thibault Jamet
1cd17cd12c
Implement a validation webhook
...
In case some ingress have a syntax error in the snippet configuration,
the freshly generated configuration will not be reloaded to prevent tearing down existing rules.
Although, once inserted, this configuration is preventing from any other valid configuration to be inserted as it remains in the ingresses of the cluster.
To solve this problem, implement an optional validation webhook that simulates the addition of the ingress to be added together with the rest of ingresses.
In case the generated configuration is not validated by nginx, deny the insertion of the ingress.
In case certificates are mounted using kubernetes secrets, when those
changes, keys are automatically updated in the container volume, and the
controller reloads it using the filewatcher.
Related changes:
- Update vendors
- Extract useful functions to check configuration with an additional ingress
- Update documentation for validating webhook
- Add validating webhook examples
- Add a metric for each syntax check success and errors
- Add more certificate generation examples
2019-04-18 19:07:04 +02:00
Elvin Efendi
13a7e2c5d0
refactor GetFakeSSLCert
2019-04-14 09:35:48 -04:00
Elvin Efendi
c934509309
fix function comment
2019-03-11 00:53:06 -04:00
Elvin Efendi
70df5e03e5
clean up certificate processing
2019-03-11 00:53:06 -04:00
Elvin Efendi
0dc5a1d2e2
do not repeat cert verification against root ca
2019-03-11 00:53:06 -04:00
Elvin Efendi
301a4fb9a5
extract common logic into a helper
2019-03-11 00:53:06 -04:00
Manuel Alejandro de Brito Fontes
a3bcbeb3d2
Add support for redirect https to https when from-to-www-redirect is defined
2019-01-10 20:59:49 -03:00
Zhenhai Gao
05d2baede6
Fix log output format
...
Signed-off-by: Zhenhai Gao <gaozh1988@live.com>
2018-12-06 09:59:31 +08:00
Manuel Alejandro de Brito Fontes
68f344233b
Fix lint issues
2018-12-05 13:28:28 -03:00
Manuel Alejandro de Brito Fontes
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
mikeweiwei
b85f1fa551
Fix typos
2018-11-08 17:04:46 +08:00
Henry Tran
7faf089082
Add dynamic certificate feature to controller
2018-08-16 20:19:33 -04:00
Manuel de Brito Fontes
1542a12764
Refactor controller metrics interface
2018-07-12 12:46:34 -04:00
Oilbeater
17f6996941
fix nil pointer when ssl with ca.crt ( #2331 )
2018-04-11 09:30:16 -03:00
Lihua Tang
1947f35121
Fix typos ( #2046 )
2018-02-07 19:15:50 -08:00
Manuel de Brito Fontes
e9a00ff916
Refactoring of kubernetes informers and local caches
2018-01-18 16:14:54 -03:00
Manuel de Brito Fontes
ff9e804d9a
Refactor SSL intermediate CA certificate check
2017-11-13 12:07:14 -03:00
Manuel de Brito Fontes
73fe95722c
Rename package pkg to internal
2017-11-11 14:53:44 -03:00
