Commit graph

618 commits

Author SHA1 Message Date
Nathan Baulch
4f23049374
Fix minor typos (#11935) 2024-09-06 15:59:43 +01:00
Adam Sunderland
2cec24143d
Allow any protocol for cors origins (#11153)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-31 16:26:45 +01:00
Marco Ebert
e9f6c8e8f2
Security: Follow-up on recent changes. (#11874) 2024-08-26 21:09:16 +01:00
Jon Carl
034c3ccad4
Metrics: Add --metrics-per-undefined-host argument. (#11818)
Signed-off-by: Jon Carl <grounded042@joncarl.com>
2024-08-26 20:09:11 +01:00
Seonghyeon Cho
8b20427d02
Update maxmind post link about geolite2 license changes (#11861)
Signed-off-by: Seonghyeon Cho <seonghyeoncho96@gmail.com>
2024-08-25 21:12:02 +01:00
Ricardo Katz
21cd966d1c
Remove global-rate-limit feature (#11851) 2024-08-25 21:03:29 +01:00
lou-lan
24450ea509
Add custom code handling for temporal redirect (#10651)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-23 21:10:20 +01:00
Sebastian Rabenhorst
ffee96c58c
Add native histogram support for histogram metrics (#9971)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-23 17:32:48 +01:00
Ricardo Katz
7b4e4e2fa1
Enable security features by default (#11819) 2024-08-23 04:45:51 +01:00
Ricardo Katz
3bec99ecfc
Remove 3rd party lua plugin support (#11821) 2024-08-21 14:54:29 +01:00
Ricardo Katz
cf8e374290
Auto-generate annotation docs (#11820) 2024-08-18 16:13:18 -07:00
chengjoey
eee2760907
Metrics: Remove ingress_upstream_latency_seconds. (#11795)
Signed-off-by: joey <zchengjoey@gmail.com>
2024-08-16 01:53:12 -07:00
Marco Ebert
004321e265
Tests & Docs: Bump images. (#11803)
* Tests: Bump CFSSL.

* Docs: Bump Custom Error Pages.

* Tests: Bump FastCGI HelloServer.

* Tests: Bump HTTPBun.

* Docs: Bump OpenTelemetry.
2024-08-14 10:55:17 -07:00
dvglab
c6e86c86dc
Docs: Fix from-to-www redirect description. (#11712) 2024-08-01 03:28:03 -07:00
Chakrit Wichian
e1d81b7818
Docs: Clarify from-to-www redirect direction. (#11682)
* docs: Clarify from-to-www redirect direction.

This was not clear to me when reading the docs whether the ingress will
redirect from non-www to with-www or the reverse. It's also not very
clear from just grepping around the codebase. I found the answer by
reading from this reddit link:

https://www.reddit.com/r/kubernetes/comments/pbl033/k8s_ingress_redirecting_www_to_nonwww_domains/

So, to save time for other people doing the same, which I assumes is a
lot of people since it's a common scenario, this little revision in the
docs is warranted.

* Docs: Implement suggestion.

---------

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-29 01:28:45 -07:00
Long Wu Yuan
a4ffcfb3d8
added real-client-ip faq (#11663) 2024-07-21 09:39:46 -07:00
Marco Ebert
879747a92f
Docs: Format NGINX configuration table. (#11659) 2024-07-21 03:12:51 -07:00
apiwat-chantawibul
60bb8b351c
Fix indent in YAML for example pod (#11598) 2024-07-12 00:47:03 -07:00
kiblik
f0787c3027
Docs: Specify ingressClass for multi-controller setup. (#11493) 2024-07-01 11:11:46 +02:00
Marco
0abc9eaff1
Docs: Improve default certificate usage. (#11504) 2024-07-01 11:09:09 +02:00
JesseBot
6087e04cb1
Upgrade OWASP_MODSECURITY_CRS_VERSION 3.3.5 to 4.4.0 and update docs (#11511)
Signed-off-by: jessebot <jessebot@linux.com>
2024-07-01 11:05:15 +02:00
Yoofi Quansah
e3750b78de
Fix boolean configuration (#11483)
* chore: fix booleans to all have quotes around their values

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>

* Revert "chore: fix booleans to all have quotes around their values"

This reverts commit 7d91e4d9ed.

* chore: fix default values for boolean configuration

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>

---------

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>
2024-06-18 09:38:39 -07:00
Long Wu Yuan
8ca27e7ee9
fixed fastcgi userguide (#11454) 2024-06-12 00:38:56 -07:00
Long Wu Yuan
ec296594c7
fix for docs issue 11432 (#11433) 2024-06-09 15:53:14 -07:00
Long Wu Yuan
8f4f15f8e3
added multiplecontrollers-howto to faq (#11389) 2024-05-29 00:41:45 -07:00
Long Wu Yuan
5639979cb5
removed tlsv1 & tlsv1.1 (#11343) 2024-05-28 11:37:30 -07:00
Anddd7
d0e9934789
feat: Add grpc timeouts annotations (#11258)
*  feat: add grpc timeouts with proxy settings if backend is grpc

* 📝  docs: Documentation only changes

* 🐛 fix: uppercase for protocol

* 📝 docs: grpc timeouts example

* 📝 docs: add links and default values for proxy timeout

* 🧪 test: add e2e test for timeout

* 🐛 fix: upgrade to 1.0.6 to fix nil pointer

* 🐛 fix: lint

* 🧪 test: trigger ci
2024-05-26 09:37:11 -07:00
Lucas Andrade Flores
20d9a609b5
Docs: Remove opentracing and zipkin from docs (#11361) 2024-05-15 13:23:21 -07:00
Rafael da Fonseca
4e11074323
Allow configuring nginx worker reload behaviour, to prevent multiple concurrent worker reloads which can lead to high resource usage and OOMKill (#10884)
* feat: allow configuring nginx worker reload behaviour, to prevent multiple concurrent worker reloads

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* appease linter, remove unnecessary log line

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* Flip to using a positive behaviour flag instead of negative

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* Update helm-docs

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* Avoid calling GetBackendConfiguration() twice, use clearer name for helm chart option

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

* Fix helm-docs ordering

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>

---------

Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
2024-05-14 14:45:25 -07:00
Christian Groschupp
1f4ee0e235
feat: add annotation to allow to add custom response headers (#9742)
* add custom headers

Signed-off-by: Christian Groschupp <christian@groschupp.org>

* add tests

Signed-off-by: Christian Groschupp <christian@groschupp.org>

* add docs

* update copyright

* change comments

* add e2e test customheaders

* add custom headers validation

* remove escapeLiteralDollar filter

* validate value in custom headers

* add regex for header value

* fix annotation test

* Revert "remove escapeLiteralDollar filter"

This reverts commit ab48392b60dee4ce146a4c17e046849f9633c7fb.

* add annotationConfig

* fix test

* fix golangci-lint findings

* fix: add missung exp module

---------

Signed-off-by: Christian Groschupp <christian@groschupp.org>
2024-04-09 03:25:22 -07:00
Matheus Fidelis
7c8af4928b
Controller: Make Leader Election TTL configurable. (#11142)
* feature(leader_ttl): feature to customize ttl to leader be re-elected

* fix(review): docs
2024-03-28 06:36:23 -07:00
Marco Ebert
365d886c1d
Chores: Remove recently added whitespaces. (#11156) 2024-03-24 17:44:36 -07:00
Ramon Borges
c0b3294bf4
Add GRPC Buffer Size to the Configmap (#11155)
* feat: add grpc buffer size in the nginx template

* feat: add grpc buffer size in the configmap struct

* feat: add test for GRCP buffer size configuration in the configmap

* chore: add documentation for the grcp buffer size configuration

* fix: fix the copyright year of the test

* fix: fix import order

* fix: fix ignore for the linter - reason was missing

* chore: seems like we don't need to ignore the error handling
2024-03-24 15:07:28 -07:00
dVerhees
c25b80ca00
fix geoip2 configuration docs (#11150) 2024-03-22 01:28:24 -07:00
Matheus Fidelis
3c4e78e6b7
feature(geoip2_autoreload): Enable GeoIP2 auto_reload config (#11079)
* feature(geoip2_autoreload): GeoIP Autoreload

feature(geoip2_autoreload): fix lint

feature(geoip2_autoreload): changing flag interval

feature(geoip2_autoreload): tests - up and running

feature(geoip2_autoreload): tests - up and running

feature(geoip2): testing

feature(geoip2): remove typo

feature(geoip2_autoreload): fixing tests

* feature(geoip2_autoreload): working

* feature(geoip2_autoreload): including tests on geoip2 test file
2024-03-19 07:32:15 -07:00
Robert Ma
0bed0a4558
Fix typos in OTel doc (#11081) 2024-03-14 07:39:56 -07:00
Matheus Fidelis
9b63559cbb
feature(leader_election): flag to disable leader election feature on controller (#11064) 2024-03-06 05:59:22 -08:00
Khoo Hao Yit
b4ea953cce
add missing backend-protocol annotation option (#9545) 2024-02-27 09:41:09 -08:00
zengyuxing007
536c4e7e06
Update ingress-path-matching.md (#11008) 2024-02-21 22:07:07 -08:00
zengyuxing007
7edcdeefe5
Update ingress-path-matching.md (#11007) 2024-02-21 19:00:17 -08:00
Tore Stendal Lønøy
c295cd1c4b
docs: update annotations docs with missing session-cookie section (#10917) 2024-01-27 03:40:35 -08:00
James Strong
4e97379b4e
Release controller 1.9.6 and helm 4.9.1 (#10919)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-01-26 23:45:19 -08:00
Ray Huang
66cbd57755
Improve docs for multiple instances of controller on one cluster (#10882)
* Added note to include '--ingress-class-by-name=true' for Multiple Ingress controllers instruction.

* Add note to include '-ingress-class-by-name=true' for Multiple Controllers instruction.
2024-01-19 22:04:14 +01:00
Tobias Mühl
00db204d86
Fix OpenTelemetry docs typo (#10836) 2024-01-12 14:00:44 +01:00
Lucien Boix
5a72a42235
Update multiple-ingress.md (#10704)
Fixing a typo that can mislead people : it looks like the prefix k8s.io/ is automatically stripped from ingress-class parameter value (which is not the case)
2024-01-04 15:40:32 +01:00
Tore
7f723c5985
docs: add index for global-auth-always-set-cookie (#10670) 2023-11-22 11:59:09 +01:00
Tore
cd3e5d323d
docs: Update configmap docs for enable-global-auth option (#10667)
* docs: Include default annotation prefix is docs

Most docs includes the annotation prefix

* docs: Update annotations docs for global-auth

Correct documentation to reflect whats possible. It is not possible to use `enable-global-auth: false` in ConfigMap.
2023-11-21 14:43:36 +01:00
chriss-de
ad406b64d8
Add override for proxy_intercept_errors when using Custom HTTP Errors (#9497)
* added proxy-intercept-errors config option

* fixed error when comparing locations

* fixed missing location config from annotation
added e2e test

* reversed logic for proxy-intercept-errors to disable-proxy-intercept-errors

* reversed logic to disable-proxy-intercept-errors

* reversed logic

* default has to be false

* put comment in same line as return

* run gofmt

* fixing wrong Boilerplate header

* updated code to new IngressAnnotation interface

* fixes to satisfy PR comments

* synced with upstream; fixed typo

* gofumpt disableproxyintercepterrors.go

* gofumpt
2023-11-17 05:43:54 +01:00
Ricardo Katz
9ed0d7f7af
Separate third party NGINX configuration (#10470)
* Document container separation

* Separate configurations
2023-11-03 14:46:32 +01:00
Michael Dreher
8c3aeaae4a
Increase HSTS max-age to default to one year (#10564) 2023-10-27 12:50:37 +02:00