Nathan Baulch
4f23049374
Fix minor typos ( #11935 )
2024-09-06 15:59:43 +01:00
Ricardo Katz
21cd966d1c
Remove global-rate-limit feature ( #11851 )
2024-08-25 21:03:29 +01:00
Ricardo Katz
3bec99ecfc
Remove 3rd party lua plugin support ( #11821 )
2024-08-21 14:54:29 +01:00
Dmitry Bashkatov
f85c3866d8
add new summary metric: ingress_header_seconds ( #8726 )
2022-06-22 12:59:43 -07:00
Ricardo Katz
3def835a6a
Jail/chroot nginx process inside controller container ( #8337 )
...
* Initial work on chrooting nginx process
* More improvements in chroot
* Fix charts and some file locations
* Fix symlink on non chrooted container
* fix psp test
* Add e2e tests to chroot image
* Fix logger
* Add internal logger in controller
* Fix overlay for chrooted tests
* Fix tests
* fix boilerplates
* Fix unittest to point to the right pid
* Fix PR review
2022-04-08 21:48:04 -07:00
Wei Wu
e625c2507a
Fix chashsubset backend with canary ( #7235 )
...
* Fix chashsubset backend with canary
* use floor for buckets calculation to remove hot spot
* Remove testing code
2021-12-29 16:14:50 -08:00
Yecheng Fu
5cff197bc5
add canary-weight-total annotation ( #6338 )
2021-12-07 08:40:00 -08:00
Ana Claudia Riekstin
6163231ef6
fix to really execute plugins in order ( #8018 )
2021-12-07 08:01:02 -08:00
Léopold Jacquot
ddbb0be0a0
add canary backend name for requests metrics ( #7696 )
2021-09-26 10:54:22 -07:00
Vincent LE GOFF
f2e743f561
feat: add session-cookie-secure annotation ( #7399 )
2021-09-01 15:23:40 -07:00
wasker
f222c752be
Enable session affinity for canaries ( #7371 )
2021-07-29 14:23:19 -07:00
Elvin Efendi
e0dece48f7
Add Global Rate Limiting support
2021-01-04 17:47:07 -05:00
Elvin Efendi
2cff9fa41d
generalize cidr parsing and improve lua tests
2021-01-04 15:01:55 -05:00
Kubernetes Prow Robot
b022ea8c40
Merge pull request #6639 from spacewander/use_last_for_ewma
...
Don't pick tried endpoint & count the latest in ewma balancer
2020-12-23 18:50:27 -08:00
spacewander
06b200fa4b
Update for review
2020-12-24 09:07:12 +08:00
Kubernetes Prow Robot
7732aec3c4
Merge pull request #6600 from nic-6443/backend-sync-503-fix
...
Bugfix: some requests fail with 503 when nginx reload
2020-12-23 09:02:26 -08:00
qianyong
8085304cb9
Separate the ExternalName backend from other backends in the process of synchronizing the backend, because the synchronization of the ExternalName backend requires dns resolution, so we should ensure that it does not affect the synchronization of the Non-ExternalName backend. After separation, in the init worker stage, we should immediately synchronize the Non-ExternalName backend, otherwise there will be some requests that fail with 503 because the balancer cannot be obtained in the rewrite stage.
2020-12-22 17:24:41 +08:00
spacewander
e118ebc08a
Don't pick tried endpoint & count the latest in ewma balancer
...
fixes https://github.com/kubernetes/ingress-nginx/issues/6632
2020-12-18 19:21:51 +08:00
Josh Soref
a8728f3d2c
Spelling
2020-12-15 16:10:48 -05:00
Elvin Efendi
cc94a51cba
make sure canary attributes are reset on ewma backend sync
2020-12-11 09:38:58 -05:00
Elvin Efendi
1e9650a0f9
fix flaky lua tests
2020-12-10 22:41:41 -05:00
wenzong
16f970d8bb
Use was_not_called without check args match
2020-09-19 00:15:42 +08:00
wenzong
724646bd73
Delete OCSP Response cache when certificate renewed
2020-09-18 14:30:18 +08:00
Frank Gadban
e9059eef01
fixed some typos
...
Signed-off-by: Frank Gadban <frankgad@outlook.de>
2020-07-21 22:02:23 +02:00
Bo0km4n
7ab0916c92
Resolve conflicts
2020-06-20 17:13:31 +09:00
Bo0km4n
53a6b0fd3b
Configurable metrics max batch size
2020-06-20 15:58:14 +09:00
agile6v
bafbd4cccf
Enable lj-releng tool to lint lua code.
2020-06-09 18:01:35 +08:00
agile6v
c035a144f8
Support the combination of nginx variables and text value for annotation upstream-hash-by.
2020-06-01 06:37:41 +08:00
Elvin Efendi
1dab12fb81
Lua OCSP stapling
2020-04-16 21:29:16 -04:00
Elvin Efendi
eb112ea06c
refactoring: use more specific var name
2020-03-21 21:23:24 -04:00
briankopp
b2beeeab25
Add case for when user agent is nil
...
Add test for nil user agent
2020-02-16 21:07:45 -06:00
BrianKopp
7c7a1b9c8b
Update samesite tests
2020-02-08 12:58:52 -07:00
Brian Kopp
1b523390bb
Add SameSite=None support and conditionally omit SameSite=None for backwards compatibility
2020-01-29 14:30:00 -07:00
Manuel Alejandro de Brito Fontes
a8c2c9c6bc
Remove todo from lua test ( #4894 )
2020-01-08 19:46:52 -03:00
Manuel Alejandro de Brito Fontes
5ce93d98c2
Fix lua test
2020-01-05 16:00:54 -03:00
Manuel Alejandro de Brito Fontes
6c92c80073
Fix sticky session for ingress without host
2020-01-02 16:52:49 -03:00
Laszlo Janosi
31227d61c2
Removing secure-verify-ca-secret support and writing an error log if that annotation is used in an Ingress definition
2019-10-18 10:58:57 +02:00
Thomas Jackson
7fc442c7f1
update test cases
2019-10-14 08:14:35 -07:00
Elvin Efendi
73e659f5fc
improve certificate configuration detection per request
2019-09-24 21:17:22 -04:00
Elvin Efendi
8c64b12a96
refactor force ssl redirect logic
2019-09-24 14:57:52 -04:00
Elvin Efendi
e392c8a8af
cleanup unused certificates
2019-09-24 14:16:03 -04:00
Kubernetes Prow Robot
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode
...
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
Elvin Efendi
bbcf3dc625
regression test for the issue fixed in #4543
2019-09-10 10:00:21 -04:00
Alexander Maret-Huskinson
880b3dc5f1
Fixed test findings.
2019-08-30 19:08:03 +02:00
Alexander Maret-Huskinson
881e352d68
Converted sticky session balancers into separate classes.
2019-08-30 18:07:24 +02:00
Alexander Maret-Huskinson
9170591185
Added new affinity mode for maximum session stickyness. Fixes kubernetes/ingress-nginx#4475
2019-08-30 11:40:29 +02:00
Zovin Khanmohammed
76c2063be8
Code Review changes. Remove duplicate tests.
2019-08-26 14:00:59 -05:00
Zovin Khanmohammed
1f8ab60e40
Adds Wilcard check for hostname. Adds wildcard hostname tests.
2019-08-26 14:00:44 -05:00
Elvin Efendi
57db904c92
fix lua certificate handling tests
2019-08-26 13:05:05 -04:00
Manuel Alejandro de Brito Fontes
8def5ef7ca
Add support for multiple alias and remove duplication of SSL certificates ( #4472 )
2019-08-26 10:58:44 -04:00