Commit graph

4456 commits

Author SHA1 Message Date
Kubernetes Prow Robot
50b6715f06
Merge pull request #4604 from aledbf/2353
Change default for proxy-add-original-uri-header
2019-09-25 07:28:00 -07:00
Manuel Alejandro de Brito Fontes
2bd8121338
Change default for proxy-add-original-uri-header 2019-09-25 10:57:31 -03:00
Kubernetes Prow Robot
ceddec4ea0
Merge pull request #4588 from multi-io/patch-1
tls user guide --default-ssl-certificate clarification
2019-09-25 06:14:00 -07:00
Kubernetes Prow Robot
182de47479
Merge pull request #4602 from ElvinEfendi/fix-clear-cert
fix bug with new and running configuration comparison
2019-09-25 05:44:00 -07:00
Elvin Efendi
fe2ea692a6 adjust tests to the new no-reload on cert update world 2019-09-25 06:59:47 -04:00
Elvin Efendi
d8a3d616b4 fix bug with new and running configuration comparison 2019-09-25 06:33:59 -04:00
Kubernetes Prow Robot
113f8d2931
Merge pull request #4601 from ElvinEfendi/hsts-refactoring
Hsts refactoring
2019-09-24 19:50:00 -07:00
Kubernetes Prow Robot
702faedaac
Merge pull request #4600 from aledbf/update-image
Update nginx image
2019-09-24 18:33:59 -07:00
Elvin Efendi
73e659f5fc improve certificate configuration detection per request 2019-09-24 21:17:22 -04:00
Elvin Efendi
c5a8357f1d handle hsts header injection in lua 2019-09-24 21:17:22 -04:00
Manuel Alejandro de Brito Fontes
361f3da4d5
Update nginx image 2019-09-24 21:19:48 -03:00
Kubernetes Prow Robot
daf8634acf
Merge pull request #4595 from aledbf/nginx-update
Rollback change of ModSecurity setting SecAuditLog
2019-09-24 17:05:59 -07:00
Kubernetes Prow Robot
a0a025ca8a
Merge pull request #4598 from ElvinEfendi/simplify-conf
delete redundant config
2019-09-24 16:39:59 -07:00
Elvin Efendi
159dfc5fc3 make a note for clarity 2019-09-24 19:16:36 -04:00
Elvin Efendi
c93d384fb1 delete redundant config 2019-09-24 18:51:35 -04:00
Kubernetes Prow Robot
75490fa309
Merge pull request #4597 from Shopify/improve-tls-hsts-test
more meaningful assertion for tls hsts test
2019-09-24 13:55:58 -07:00
Kubernetes Prow Robot
14f9b0d64e
Merge pull request #4596 from Shopify/fix-auth-proxy-header-order
sort auth proxy headers from configmap
2019-09-24 13:29:26 -07:00
Kubernetes Prow Robot
56edbb941c
Merge pull request #4592 from ElvinEfendi/force-ssl-redirect-refactoring
refactor force ssl redirect logic
2019-09-24 13:03:29 -07:00
Elvin Efendi
799f0ae76d more meaningful assertion for tls hsts test 2019-09-24 15:39:20 -04:00
Elvin Efendi
d124dd5eee sort auth proxy headers from configmap 2019-09-24 15:19:49 -04:00
Elvin Efendi
8c64b12a96 refactor force ssl redirect logic 2019-09-24 14:57:52 -04:00
Kubernetes Prow Robot
73bc2cfc48
Merge pull request #4594 from Shopify/cleanup-certs
cleanup unused certificates
2019-09-24 11:51:29 -07:00
Elvin Efendi
e392c8a8af cleanup unused certificates 2019-09-24 14:16:03 -04:00
Manuel Alejandro de Brito Fontes
ea5add6f5c
Rollback change of ModSecurity setting SecAuditLog 2019-09-24 14:53:44 -03:00
Kubernetes Prow Robot
1dc4d184a0
Merge pull request #4550 from Shopify/upstream-auth-proxy-set-headers
Add support for configmap of headers for auth-url per ingress
2019-09-24 09:33:27 -07:00
Kubernetes Prow Robot
0f378154a0
Merge pull request #4591 from membphis/change/lua-code-style
optimize: local cache global variable and avoid single lines over 80
2019-09-24 07:55:29 -07:00
A Gardner
786a3b6862 Add support for configmap of headers to be sent to external auth service 2019-09-24 10:53:23 -04:00
Kubernetes Prow Robot
cb2889b87b
Merge pull request #4586 from aledbf/fix-reload
Fix reload when a configmap changes
2019-09-24 07:23:28 -07:00
Yuansheng
1ce68c8723 optimize: local cache global variable and avoid single lines over 80
characters.
2019-09-24 10:08:45 -04:00
Manuel Alejandro de Brito Fontes
a40a4b0325
Fix reload when a configmap changes 2019-09-24 10:55:59 -03:00
Kubernetes Prow Robot
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
Alexander Maret-Huskinson
c26ab315b8 Fixed LUA lint findings. 2019-09-24 10:56:11 +02:00
Alexander Maret-Huskinson
f1839ddb42 Fixed review findings. 2019-09-24 10:46:02 +02:00
Kubernetes Prow Robot
9b66f2a828
Merge pull request #4587 from aledbf/order-directives
Avoid unnecessary reloads generating lua_shared_dict directives
2019-09-23 06:29:23 -07:00
Olaf Klischat
1a5e2d57a6
tls user guide --default-ssl-certificate clarification
Evidently the `--default-ssl-certificate` option is used not only for the catch-all server, but also for all ingress `tls:` sections that don't have a `secretName` option. This doesn't seem to be documented anywhere, hence this change.
2019-09-23 12:35:10 +02:00
Manuel Alejandro de Brito Fontes
1b8f6518cf
Avoid unnecessary reloads generating lua_shared_dict directives 2019-09-22 21:16:00 -03:00
Manuel Alejandro de Brito Fontes
624ce0857a
Remove retries to ExternalName (#4584) 2019-09-22 18:16:25 -03:00
Manuel Alejandro de Brito Fontes
189e742685
Disable go modules (#4583) 2019-09-22 17:18:50 -03:00
Manuel Alejandro de Brito Fontes
ba38153561
Update kubectl-plugin docs (#4582) 2019-09-22 16:39:19 -03:00
Manuel Alejandro de Brito Fontes
c1ed6db468
Fix spelling and remove local reference of 404 docker image (#4581) 2019-09-22 16:08:47 -03:00
Kubernetes Prow Robot
f96cc3c6bc
Merge pull request #4575 from aledbf/vendor
Update go dependencies for kubernetes 1.16.0
2019-09-19 07:53:01 -07:00
Manuel Alejandro de Brito Fontes
e888fcff7b
Update runc cgroup mount api 2019-09-19 11:01:31 -03:00
Manuel Alejandro de Brito Fontes
d7b530cb0a
Update go dependencies for kubernetes 1.16.0 2019-09-19 11:01:00 -03:00
Kubernetes Prow Robot
280920980d
Merge pull request #4572 from aledbf/fix-log
Fix log format after #4557
2019-09-18 09:49:30 -07:00
Manuel Alejandro de Brito Fontes
4b4176c830
Fix log format after #4557 2019-09-18 12:52:09 -03:00
Kubernetes Prow Robot
c481296610
Merge pull request #4571 from aledbf/log
Increase log level for identical CreationTimestamp warning
2019-09-18 08:21:32 -07:00
Manuel Alejandro de Brito Fontes
9f092a2c81
Increase log level for identical CreationTimestamp warning 2019-09-18 11:59:03 -03:00
Kubernetes Prow Robot
87ad033483
Merge pull request #4569 from mkabischev/jaeger-header-configuration
allow to configure jaeger header names
2019-09-17 20:29:29 -07:00
Manuel Alejandro de Brito Fontes
04a32f6f82
Update nginx image (#4570) 2019-09-18 00:02:29 -03:00
Mike Kabischev
d5563a7e47 allow to configure jaeger header names 2019-09-17 12:35:53 +03:00