DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
7549 commits 4 branches 217 tags 166 MiB
Commit graph

857 commits

Author SHA1 Message Date
Balazs Szekeres
c47aa3cac7 Added basic limit-rate configmap test. 2020-02-20 14:22:26 +01:00
Sandor Szombat
d149382743 Add upstream keep alive tests 2020-02-20 09:59:36 +01:00
Manuel Alejandro de Brito Fontes
57fcbdfb73
Lint go code (#5132) 2020-02-19 21:43:14 -03:00
Kubernetes Prow Robot
f6cbf3e735
Merge pull request #5117 from szombi/e2e-hash-size 
Hash size e2e check test case
 2020-02-19 15:44:30 -08:00
Manuel Alejandro de Brito Fontes
7f280512f1 Adjust ingress-nginx probes 2020-02-19 19:42:50 -03:00
Manuel Alejandro de Brito Fontes
f9624cbe46 Refactor e2e tests to use testify y httpexpect 2020-02-19 19:42:50 -03:00
Manuel Alejandro de Brito Fontes
046e2d959d Replace gomega with testify 2020-02-19 19:42:50 -03:00
Sandor Szombat
bd23b815bd Add hash size check tc 2020-02-19 09:27:53 +01:00
Sandor Szombat
0b1efdb549 Add reuse-port config check tc 2020-02-18 10:09:34 +01:00
Kubernetes Prow Robot
9a52f12b19
Merge pull request #5101 from szombi/e2e-keep-alive 
Add keep-alive config check test
 2020-02-17 11:27:29 -08:00
Kubernetes Prow Robot
24ce209af7
Merge pull request #5097 from szombi/e2e-log-format 
New e2e test: log-format-escape-json and log-format-upstream
 2020-02-17 08:17:31 -08:00
Sandor Szombat
2400febc48 Add keep-alive config check test 2020-02-17 15:04:43 +01:00
Sandor Szombat
8470a06174 Add log-format related tests 2020-02-17 14:52:35 +01:00
Manuel Alejandro de Brito Fontes
ca34f39ade
Remove comment from e2e_test.go (#5094) 2020-02-17 06:55:38 -03:00
Manuel Alejandro de Brito Fontes
cc318cdec1
Cleanup and standardization of e2e test definitions (#5090) 2020-02-16 15:27:58 -03:00
Manuel Alejandro de Brito Fontes
37c24b0df5
Migration e2e installation to helm (#5086) 2020-02-16 11:58:37 -03:00
Balazs Szekeres
6206adf188 Added 'Add headers' configmap parameter testcase. 2020-02-14 19:56:43 +01:00
Manuel Alejandro de Brito Fontes
71e35c9100
Make sure set-cookie is retained from external auth endpoint (#5067) 2020-02-14 01:41:11 -03:00
Manuel Alejandro de Brito Fontes
e179a24f97 Cleanup of e2e tests 2020-02-14 01:09:08 -03:00
Manuel Alejandro de Brito Fontes
2e3f128ed5 Enable grpc e2e tests 2020-02-14 01:09:08 -03:00
Manuel Alejandro de Brito Fontes
fa3642d01b
Update go to 1.13.8 (#5070) 2020-02-13 19:41:35 -03:00
Manuel Alejandro de Brito Fontes
1e42967d91 Adjust Suite time execution 2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
b4dba519fc Remove dependency of https://grpcb.in 2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
4a21dc17f4 Remove cleanup helper 2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
0197ea0dc4 Remove empty BeforeEach and AfterEach from e2e tests 2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
b37270bdde Cleanup framework package 2020-02-13 15:33:14 -03:00
Manuel Alejandro de Brito Fontes
28350f9876
Fix scripts to run in osx (#5061) 2020-02-12 21:17:26 -03:00
Manuel Alejandro de Brito Fontes
281139d1a7
Only set mirror source when a target is configured (#5055) 2020-02-11 13:48:42 -03:00
Ilya Nemakov
46a3e0a6fd Fix X-Forwarded-Proto based on proxy-protocol server port 2020-02-10 18:08:34 +03:00
Manuel Alejandro de Brito Fontes
8d4278bfd2
Update default kind k8s version (#5031) 2020-02-07 14:20:16 -03:00
Manuel Alejandro de Brito Fontes
ac2ce11739
Add echo image to avoid building and installing dependencies in each test (#5028) 2020-02-06 18:08:44 -03:00
Manuel Alejandro de Brito Fontes
b3146354d4 Refactor mirror feature 2020-02-05 10:39:55 -03:00
Manuel Alejandro de Brito Fontes
a16ed1b01f
Update nginx image, go to 1.13.7 and e2e image (#5011) 2020-02-04 14:02:10 -03:00
Manuel Alejandro de Brito Fontes
11192819ff
Dump kind logs after e2e tests (#4987) 2020-01-30 11:42:57 -03:00
Manuel Alejandro de Brito Fontes
02c99e9ccf Update e2e image 2020-01-27 00:01:13 -03:00
Manuel Alejandro de Brito Fontes
68bfbd939b Remove hard-coded timeout in e2e tests 2020-01-27 00:01:13 -03:00
Kubernetes Prow Robot
2f8cbeb8fa
Merge pull request #4956 from djboris9/proxy-protocol-port 
Fix proxy protocol support for X-Forwarded-Port
 2020-01-26 12:27:02 -08:00
Manuel Alejandro de Brito Fontes
5eddf1095d
Add verification of docker buildx support (#4966) 2020-01-26 10:07:55 -03:00
Manuel Alejandro de Brito Fontes
1443ebf5a8
Cleanup of e2e docker images (#4962) 2020-01-25 17:43:21 -03:00
HowJMay
ad8a01f945 fix: Fix typo 
Fix typo in comment
 2020-01-25 16:03:18 +08:00
Boris Djurdjevic
665f924e9e Add proxy protocol support for X-Forwarded-Port 
Fixes https://github.com/kubernetes/ingress-nginx/issues/4951
 2020-01-24 13:50:35 +01:00
Manuel Alejandro de Brito Fontes
c8015c7734
Update nginx image, use docker buildx and remove qemu (#4923) 
* Update nginx image, use docker buildx and remove qemu

* Update e2e image
 2020-01-14 20:52:57 -03:00
Manuel Alejandro de Brito Fontes
fcd3a580d9
Use docker to run makefile tasks (#4893) 2020-01-09 00:58:16 -03:00
Manuel Alejandro de Brito Fontes
2af6305a4f Fix flaking e2e tests 2020-01-05 14:08:56 -03:00
Manuel Alejandro de Brito Fontes
9c0061f482
Update e2e image (#4884) 2020-01-04 22:18:29 -03:00
Manuel Alejandro de Brito Fontes
8fb2695d54
Update e2e image (#4883) 2020-01-04 20:29:49 -03:00
Manuel Alejandro de Brito Fontes
1f2820a343 GeoIP test are temporarily disabled 2020-01-04 15:17:24 -03:00
Manuel Alejandro de Brito Fontes
f9e2b7c14b Fix status code 2020-01-04 13:23:16 -03:00
Manuel Alejandro de Brito Fontes
fbdd924a45 Update nginx image 2020-01-04 13:23:16 -03:00
Manuel Alejandro de Brito Fontes
6c92c80073 Fix sticky session for ingress without host 2020-01-02 16:52:49 -03:00
Manuel Alejandro de Brito Fontes
a0523c3c8a
Use a named location for authSignURL (#4859) 2019-12-24 22:50:25 -03:00
Manuel Alejandro de Brito Fontes
0ae5892935
Update nginx image (#4848) 2019-12-18 09:32:20 -03:00
Manuel Alejandro de Brito Fontes
5c30820d1f Remove hard-coded annotation and don't use map pointers 2019-12-13 03:05:20 -03:00
Manuel Alejandro de Brito Fontes
c2550930b1 Fix e2e test flakes 2019-12-13 01:34:52 -03:00
Manuel Alejandro de Brito Fontes
1800ffa30d Use deployments only from apps/v1 group 2019-12-12 21:25:01 -03:00
Manuel Alejandro de Brito Fontes
0dce5be743 Migrate ingress definitions from extensions to networking.k8s.io 2019-12-12 21:25:00 -03:00
Elvin Efendi
49ba53b7b6 regression test for duplicate hsts 2019-12-12 13:45:43 -05:00
Kamil Domański
16b5ad3c09 add e2e test for HTTP->HTTPS redirection 2019-12-09 15:56:21 +01:00
Manuel Alejandro de Brito Fontes
fd9e2b2214
Update nginx and e2e images (#4805) 2019-12-02 14:36:49 -03:00
Manuel Alejandro de Brito Fontes
46953ccb4d
Update nginx image and Go to 1.13.4 (#4785) 2019-11-29 15:20:18 -03:00
Manuel Alejandro de Brito Fontes
61d902db14 Remove Lua resty waf feature 2019-11-26 10:37:43 -03:00
Thomas Jackson
500b043f27 Don't use DNS resolution to "validate FQDN" 
As the controller stands today this "validation" is done once per config load, which means if the DNS query fails for any reason the endpoint will remain dead until both (1) a change happens to the ingress and (2) the DNS resolution works. If the user configured the name we should just pass it through, this way the lua dns can attempt to re-query it at its leisure.
 2019-10-13 13:16:47 -07:00
Kubernetes Prow Robot
fb025ab501
Merge pull request #4087 from MRoci/master 
Define Modsecurity Snippet via ConfigMap
 2019-09-30 15:19:32 -07:00
Andrea Spacca
e84c8cd705 ISSUE-4244 e2e test 2019-09-29 23:28:44 +02:00
MRoci
1ee081ccc8
test modsecurity-snippet 2019-09-28 09:54:10 +02:00
Manuel Alejandro de Brito Fontes
2bd8121338
Change default for proxy-add-original-uri-header 2019-09-25 10:57:31 -03:00
Elvin Efendi
fe2ea692a6 adjust tests to the new no-reload on cert update world 2019-09-25 06:59:47 -04:00
Elvin Efendi
799f0ae76d more meaningful assertion for tls hsts test 2019-09-24 15:39:20 -04:00
A Gardner
786a3b6862 Add support for configmap of headers to be sent to external auth service 2019-09-24 10:53:23 -04:00
Kubernetes Prow Robot
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode 
Added new affinity mode for maximum session stickyness.
 2019-09-24 05:09:27 -07:00
Kubernetes Prow Robot
846ff00363
Merge pull request #4560 from Shopify/basic-auth-map 
Support configuring basic auth credentials as a map of user/password hashes
 2019-09-16 07:52:39 -07:00
A Gardner
376b862c23 Add annotation to support map of user/pass pairs in basic auth 2019-09-13 11:33:33 -04:00
Manuel Alejandro de Brito Fontes
9af574a234
Remove the_real_ip variable 2019-09-12 20:01:33 -03:00
Manuel Alejandro de Brito Fontes
ce3e3d51c3
WIP Remove nginx unix sockets (#4531) 
* Remove nginx unix sockets
* Use an emptyDir volume for /tmp in PSP e2e tests
 2019-09-08 18:14:54 -03:00
Manuel Alejandro de Brito Fontes
1433cde9e6
Improve the time to run e2e tests 2019-09-05 11:46:53 -04:00
Manuel Alejandro de Brito Fontes
1304cb194f
Update nginx image to 0.92 2019-09-04 10:34:54 -04:00
Kubernetes Prow Robot
74031cc8b8
Merge pull request #4528 from aledbf/clean-docker 
Cleanup of docker images
 2019-09-03 18:04:58 -07:00
Manuel Alejandro de Brito Fontes
dc20551288
Cleanup of docker images 2019-09-03 19:10:40 -04:00
Manuel Alejandro de Brito Fontes
48c89cbe3c
Switch to official kind images (#4527) 2019-09-03 16:46:43 -04:00
Manuel Alejandro de Brito Fontes
c2935ca35c
Refactor health checks and wait until NGINX process ends 2019-09-01 15:31:27 -04:00
Manuel Alejandro de Brito Fontes
c85450c1e7
Remove hard-coded names from e2e test and use local docker dependencies (#4502) 2019-09-01 14:16:52 -04:00
Alexander Maret-Huskinson
9170591185 Added new affinity mode for maximum session stickyness. Fixes kubernetes/ingress-nginx#4475 2019-08-30 11:40:29 +02:00
Manuel Alejandro de Brito Fontes
fcd3054f13
Lint code using staticcheck (#4471) 2019-08-23 12:08:40 -04:00
Kubernetes Prow Robot
75d65bbd15
Merge pull request #4327 from leki75/proxyssl 
Add proxy_ssl_* directives
 2019-08-18 09:14:04 -07:00
Guangming Wang
3c05cc4225
cleanup: fix typos in framework.go 
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
 2019-08-17 23:16:15 +08:00
Guangming Wang
8cf384b212
cleanup logging message typos in rewrite.go 
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
 2019-08-16 23:36:24 +08:00
Gabor Lekeny
65b9e2c574 Merge branch 'master' of https://github.com/kubernetes/ingress-nginx into proxyssl 2019-08-16 06:21:53 +02:00
Manuel Alejandro de Brito Fontes
23ed3ba4c4
Fix file permissions to support volumes 2019-08-15 20:48:37 -04:00
Manuel Alejandro de Brito Fontes
816f4b0824
Fix service type external name using the name 2019-08-15 12:09:42 -04:00
Elvin Efendi
b21c721196 lua-shared-dicts improvements, fixes and documentation 2019-08-14 22:10:56 -04:00
Kubernetes Prow Robot
dd0fe4b458
Merge pull request #4422 from ElvinEfendi/lua-resolv-conf-search 
teach lua about search and ndots settings in resolv.conf
 2019-08-14 17:36:33 -07:00
Kubernetes Prow Robot
0d690fba1a
Merge pull request #4356 from aledbf/only-dynamic-mode 
Only support SSL dynamic mode
 2019-08-14 17:08:35 -07:00
Elvin Efendi
1be52afa8d e2e test for service with incomplete external name 2019-08-14 18:03:30 -04:00
Gabor Lekeny
8a2a0e915a Add e2e tests for proxyssl 2019-08-14 11:49:28 +02:00
Kubernetes Prow Robot
adef152db8
Merge pull request #4379 from diazjf/mirror 
Allow Requests to be Mirrored to different backends
 2019-08-13 17:52:24 -07:00
Elvin Efendi
d46b4148fa Lua /etc/resolv.conf parser and some refactoring 2019-08-13 18:34:54 -04:00
Manuel Alejandro de Brito Fontes
80bd481abb
Only support SSL dynamic mode 2019-08-13 17:33:34 -04:00
Manuel Alejandro de Brito Fontes
8a9298ae27
Add helper to extract prometheus metrics in e2e tests 2019-08-13 12:53:40 -04:00
Kubernetes Prow Robot
8c472190d1
Merge pull request #4086 from jeroen92/issue-4038 
Resolve #4038, move X-Forwarded-Port variable to the location context
 2019-08-09 08:07:25 -07:00
Manuel Alejandro de Brito Fontes
4a9b02bc03
Remove dynamic TLS records 2019-08-08 15:52:56 -04:00
tals
a2e667c082 lua shared dict from cm 
lua shared dict teml test and update func sign

lua shared dict cm test

lua shared dict integration test

lua shared dict add cm parsing

lua shared dict change test header
 2019-08-08 12:44:11 +03:00
Jeroen Schutrup
8dd912114e
Move X-Forwarded-Port variable to the location context 
Resolves issue #4038 where the X-Forwarded-Port header would be set to the value of the https listening port if all of the following settings were satisfied:
- The ingress controller was started with a non-default HTTPS port set with the `--https-port` argument
- An ingress is created having:
  - the `nginx.ingress.kubernetes.io/auth-url` annotation set
  - TLS enabled

This commit solves this issue by moving the setting of the `pass_server_port` variable from the server, one level down to the location context.
 2019-08-06 17:00:58 +02:00
Fernando Diaz
386486e969 Allow Requests to be Mirrored to different backends 
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.

See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
 2019-08-01 11:53:58 -05:00
Charle Demers
72271e9313
FastCGI backend support (#2982) 
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
 2019-07-31 10:39:21 -04:00
Kubernetes Prow Robot
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache 
feat: auth-req caching
 2019-07-17 12:06:12 -07:00
Moritz Johner
23504db770 feat: auth-req caching 
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.

[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
 2019-07-17 18:39:04 +02:00
Manuel Alejandro de Brito Fontes
d5c7fa8cfb
Fix scripts to be able to run tests in docker 2019-07-17 11:06:53 -04:00
E. Stuart Hicks
3b0c523e49 added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends 2019-07-08 14:32:00 -04:00
Elvin Efendi
08906ef8f2 add comment to the test 2019-07-04 18:39:29 -04:00
Elvin Efendi
e988217fdf e2e test for ewma 2019-07-03 16:25:53 -04:00
Elvin Efendi
964a484b2f GetLbAlgorithm helper func for e2e 2019-07-03 08:15:41 -04:00
Manuel Alejandro de Brito Fontes
004d0c8214
Fix go imports 2019-06-30 18:58:18 -04:00
Kubernetes Prow Robot
a2009484f7
Merge pull request #4249 from ElvinEfendi/trailing-dot 
test to make sure dynamic cert works trailing dot in domains
 2019-06-29 16:43:22 -07:00
Manuel Alejandro de Brito Fontes
975a63516d
Update kind to 0.4.0 2019-06-29 18:32:02 -04:00
Elvin Efendi
f771e7247a test to make sure dynamic cert works trailing dot in domains 2019-06-28 16:21:59 -04:00
Manuel Alejandro de Brito Fontes
591887089f
Add e2e test suite to detect memory leaks in lua 2019-06-27 22:05:52 -04:00
Manuel Alejandro de Brito Fontes
3268d79610
Update nginx image to 0.90 2019-06-26 18:46:56 -04:00
Manuel Alejandro de Brito Fontes
225f881ed0
Add e2e test for invalid secrets 2019-06-25 09:28:52 -04:00
Kubernetes Prow Robot
c8cbf0db29
Merge pull request #4227 from aledbf/lint 
Fix misspelled and e2e check
 2019-06-24 21:30:34 -07:00
Manuel Alejandro de Brito Fontes
85a848faaf
Fix misspelled and e2e check 2019-06-24 23:47:22 -04:00
Manuel Alejandro de Brito Fontes
d769c8a4d8
Update nginx image 2019-06-24 23:36:23 -04:00
Kubernetes Prow Robot
5dfc7e211f
Merge pull request #4221 from aledbf/upgrade-nginx-image 
Switch to openresty image
 2019-06-24 09:45:57 -07:00
Manuel Alejandro de Brito Fontes
dca5557c50
In case of errors running e2e tests, print the generated nginx.conf file 2019-06-23 22:51:39 -04:00
Manuel Alejandro de Brito Fontes
ca6b61f639
Update e2e tests for openresty 2019-06-23 22:51:39 -04:00
Manuel Alejandro de Brito Fontes
73be06960e
Update test image and binaries 2019-06-23 22:51:38 -04:00
Manuel Alejandro de Brito Fontes
5670e3d9de
Add e2e tests for grpc using https://grpcb.in 2019-06-18 23:44:10 -04:00
Manuel Alejandro de Brito Fontes
1ed6d89c7b
Add e2e test for service type=ExternalName 2019-06-17 23:12:24 -04:00
Manuel Alejandro de Brito Fontes
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package 2019-06-13 11:32:39 -04:00
Jorrit Salverda
f77eaaee50 Add opentracing-operation-name and opentracing-location-operation-name config settings 
With these settings custom span names can be used for the server span and location span

Signed-off-by: Jorrit Salverda <jsalverda@travix.com>
 2019-06-07 14:19:34 +02:00
Michael Stramel
686f2310e4 Add "text/javascript" to compressible MIME types 
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages, servers _should_ use `text/javascript`.
 2019-06-06 13:11:56 -05:00
Manuel Alejandro de Brito Fontes
14a394fc9e
Update nginx (#4150) 
* Update nginx image
* Fix IPV6 test issues in Prow
 2019-06-04 12:15:03 -04:00
Kubernetes Prow Robot
251f48b120
Merge pull request #4135 from nicknovitski/deployment-api-appsv1 
Use apps/v1 api group in e2e tests
 2019-05-29 16:50:18 -07:00
Nick Novitski
e1958b8272 Run PodSecurityPolicy E2E test in parallel 
Previously, this test modified a ClusterRole used by _every_ test.  It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.

Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
 2019-05-29 14:13:04 -07:00
Nick Novitski
d617e5abdc Use apps/v1 api group in e2e tests 2019-05-29 12:12:45 -07:00
Manuel Alejandro de Brito Fontes
c2227a058d
Refactor e2e test 2019-05-27 06:31:01 -04:00
Manuel Alejandro de Brito Fontes
c4597522bf
Refactor whitelist from map to standard allow directives 2019-05-27 04:55:38 -04:00
Manuel Alejandro de Brito Fontes
77f5e4decb
Update nginx image to 0.86 2019-05-26 11:28:35 -04:00
Kubernetes Prow Robot
dfa7f10fc9
Merge pull request #4055 from nicknovitski/kustomize 
Rearrange deployment files into kustomizations
 2019-05-25 14:43:50 -07:00
Manuel Alejandro de Brito Fontes
f63f0457be
Update e2e images (#4110) 2019-05-24 02:47:14 +02:00
Nick Novitski
51ad0bc54b Rearrange deployment files into kustomizations 2019-05-19 12:35:54 -07:00
Manuel Alejandro de Brito Fontes
d32079e69c
Allow to use a custom k8s version in e2e tests 2019-05-15 20:58:58 -04:00
Manuel Alejandro de Brito Fontes
87b730d5fe
Add binaries required by kubernetes-sigs/testing_frameworks 2019-05-15 17:17:32 -04:00
Manuel Alejandro de Brito Fontes
3dd1699637
Add dependencies for code generator 2019-05-14 20:15:49 -04:00
Manuel Alejandro de Brito Fontes
be2792c5f9
Refactor scripts to run e2e tests 2019-05-14 20:15:43 -04:00
Manuel Alejandro de Brito Fontes
7be1dccea7
Add option to run scripts in debug mode 2019-05-13 22:31:06 -04:00
Manuel Alejandro de Brito Fontes
16540a1dba
Run tests with only one worker 2019-05-13 22:30:21 -04:00
Manuel Alejandro de Brito Fontes
ebc50b5c68
Add image for prow jobs 2019-05-13 22:29:44 -04:00
Nick Novitski
5c26a72256 Don't try to create e2e runner rbac resources twice 2019-05-07 18:07:18 -07:00
Nick Novitski
8ea40bbcb9 fix typo: deployement->deployment 2019-05-07 16:16:06 -07:00
Kubernetes Prow Robot
b06e114177
Merge pull request #3506 from KoerberDigitalDevTeam/feature/extrenal-auth-security-opt-out 
Improve the external authorization concept from opt-in to secure-by-default
 2019-05-07 09:15:53 -07:00
Manuel Alejandro de Brito Fontes
b8fb09d7b3
Update go to 1.12.5, kubectl to 1.14.1 and kind to 0.2.1 (#4064) 2019-05-06 23:28:15 -04:00
okryvoshapka-connyun
8cc9afe8ee Added Global External Authentication settings to configmap parameters incl. addons 2019-05-03 12:08:16 +02:00
Anthony Ho
bd694bf3de add e2e coverage for multi auth 2019-04-18 10:32:15 -04:00
Manuel Alejandro de Brito Fontes
7283a01b9f
Update nginx image and Go to 1.12.4 (#4010) 2019-04-17 22:45:51 -04:00
Kubernetes Prow Robot
34734edc6e
Merge pull request #4005 from Shopify/proxy-next-upstream-timeout 
Support proxy_next_upstream_timeout
 2019-04-15 09:10:09 -07:00
Alex Kursell
ffeb1fe348 Support proxy_next_upstream_timeout 2019-04-15 11:08:57 -04:00
Elvin Efendi
b13432dbe0 adjust default ssl cert e2e test 2019-04-13 15:00:44 -04:00
Elvin Efendi
1ddf5d2752 regression test for dynamic cert related default-certificate issue 2019-04-09 22:11:21 -04:00
Elvin Efendi
107bec676a fix custom default backend test title 2019-04-09 20:24:45 -04:00
Manuel Alejandro de Brito Fontes
c9d069e64d
Update nginx image to 0.84 (#3969) 2019-04-06 12:30:35 -03:00
Kubernetes Prow Robot
39ecab8d5a
Merge pull request #3954 from Shopify/lb-configmap 
Fix load-balance configmap value
 2019-04-02 05:10:34 -07:00
Alex Kursell
4f819b6256 Fix load-balance configmap value 2019-04-01 15:55:36 -04:00
Kubernetes Prow Robot
b87cc5a1a6
Merge pull request #3786 from Shopify/rewrite-x-forwarded-prefix 
Fix x-forwarded-prefix annotation
 2019-03-31 16:18:32 -07:00
Elvin Efendi
87e962682f properly parse x-forwarded-host 2019-03-31 15:10:45 -04:00
Elvin Efendi
496ff07bf1 replace some of the Nginx configuration to Lua code 2019-03-31 12:04:52 -04:00
Alex Kursell
fdd445cb2a Fix e2e-tests 2019-03-29 16:25:25 -04:00
Alex Kursell
188295550c Simplify x-forwarded-prefix annotation 2019-03-29 16:25:25 -04:00
Manuel Alejandro de Brito Fontes
14a9e9f3fa
Update dependencies client-go to release-11.0 and kubernetes-1.14.0 2019-03-28 20:43:18 -03:00
Manuel Alejandro de Brito Fontes
3ec1028d0b
Fix dynamic SSL certificate for aliases and redirect-from-to-www 2019-03-28 16:29:11 -03:00
Kubernetes Prow Robot
e624fe171d
Merge pull request #3839 from perprogramming/bugfix/panic-on-multiple-non-matching-canary 
Fix panic on multiple non-matching canary
 2019-03-27 16:46:48 -07:00
Manuel Alejandro de Brito Fontes
f38f1d9d0e
Update nginx image 2019-03-26 17:28:44 -03:00
Gregor Noczinski
1bef3e75b2 Set X-Request-ID for the default-backend, too. 2019-03-22 11:33:11 +01:00
Kubernetes Prow Robot
ec81605cae
Merge pull request #3908 from aledbf/update-nginx 
Update nginx image
 2019-03-21 11:45:41 -07:00
Manuel Alejandro de Brito Fontes
3339db2cb5
Migrate e2e cluster to kind 2019-03-20 18:36:29 -03:00
Manuel Alejandro de Brito Fontes
0bd5f5e9a0
Update nginx image 2019-03-19 10:18:19 -03:00
Elvin Efendi
1d59e4f1fe enable dynamic SSL mode by default 2019-03-17 14:58:06 -04:00
Per Bernhardt
c995e13249 Improve text, error level, tests... 2019-03-12 15:57:36 +01:00
Alex Kursell
d3ac73be79 Remove session-cookie-hash annotation 2019-03-04 10:34:48 -05:00
Per Bernhardt
8a40e82ffb Fix panic on multiple non-matching canary 2019-03-04 12:30:59 +01:00
Manuel Alejandro de Brito Fontes
fbed06fd3c
Update nginx image 2019-03-01 09:18:45 -03:00
Alex Kursell
28d99c6d7d Set default for satisfy annotation to nothing 2019-02-26 15:05:45 -05:00
Manuel Alejandro de Brito Fontes
f899506b2b Update nginx image 2019-02-26 14:38:09 -03:00
Manuel Alejandro de Brito Fontes
51c6e950a3
Fix e2e test in osx 2019-02-26 12:46:38 -03:00
Mikhail Marchenko
8b3702c829 Enable access log for default backend 
disable log on default_server
 2019-02-26 11:14:31 +03:00
Kubernetes Prow Robot
bb7a3f3527
Merge pull request #3812 from ecosia/jg-customerrors-e2e-removeunused 
Removes unused const from customhttperrors e2e test
 2019-02-25 11:40:57 -08:00
jasongwartz
164b8590a3 Removes unused const from customhttperrors e2e test 2019-02-25 17:27:05 +01:00
Manuel Alejandro de Brito Fontes
11177c95ec Fix e2e tests 2019-02-25 12:37:20 -03:00
Kubernetes Prow Robot
d8ec96ca7d
Merge pull request #3730 from ecosia/jg-customerrors-defaultbackend 
Changes CustomHTTPErrors annotation to use custom default backend
 2019-02-25 07:22:07 -08:00
Kubernetes Prow Robot
8f5e7de623
Merge pull request #3800 from aledbf/refactor-e2e 
Refactor e2e
 2019-02-24 16:33:54 -08:00
Manuel Alejandro de Brito Fontes
5e249d3366
Refactor e2e tests to use the service ClusterIP 2019-02-24 20:04:07 -03:00
jasongwartz
3865e30a00 Changes CustomHTTPErrors annotation to use custom default backend 
Updates e2e test

Removes focus from e2e test

Fixes renamed function

Adds tests for new template funcs

Addresses gofmt

Updates e2e test, fixes custom-default-backend test by creating service

Updates docs
 2019-02-24 22:48:56 +01:00
Kubernetes Prow Robot
7b2495047f
Merge pull request #3781 from zoumo/proxy-buffer-number 
feat: configurable proxy buffers number
 2019-02-22 12:11:46 -08:00
Jim Zhang
dc63e5d185 fix: rename proxy-buffer-number to proxy-buffers-number 2019-02-22 10:21:17 +08:00
Manuel Alejandro de Brito Fontes
8b6e4d4697
Use UsePortInRedirects only if enabled 2019-02-21 17:48:45 -03:00
Jim Zhang
c92d29d462 feat: configurable proxy buffer number 2019-02-20 18:05:09 +08:00
Kubernetes Prow Robot
15d5ef95ef
Merge pull request #3740 from Shopify/session-annotation-reload 
Fix ingress updating for session-cookie-* annotation changes
 2019-02-19 15:14:21 -08:00
Alex Kursell
c180a0998b Fix session-cookie-* annotation reloading 2019-02-19 17:27:08 -05:00
Anthony Ho
ec04852526 Create custom annotation for satisfy "value" 2019-02-19 15:58:35 -05:00
Kubernetes Prow Robot
201718ec0f
Merge pull request #3775 from kppullin/fix-l4-dns-resolve-failures 
Fix DNS lookup failures in L4 services
 2019-02-19 11:11:48 -08:00
Kevin Pullin
3ac57097f6 Add 'waitForLuaSync' sleep in external name TCP test 2019-02-17 20:32:27 -08:00
Kevin Pullin
f6aded2c51 Fix DNS failures in L4 services 2019-02-17 14:12:10 -08:00
Kubernetes Prow Robot
b72dfa99d8
Merge pull request #3765 from ElvinEfendi/custom-http-error-bug-fix 
simplify customhttperrors e2e test and add regression test and fix a bug
 2019-02-14 06:51:33 -08:00
Elvin Efendi
1959191cf3 simplify customhttperrors e2e test and add regression test 2019-02-14 08:11:18 -05:00
Alex Kursell
7e3304d4f9 Apply annotations to default location 2019-02-11 14:32:49 -05:00
Alex Kursell
9534f8bc43 Add debug tool to image 2019-02-08 11:25:04 -05:00
Kubernetes Prow Robot
17e788b8e1
Merge pull request #3684 from aledbf/health 
Replace Status port using a socket
 2019-02-06 13:49:08 -08:00
Manuel Alejandro de Brito Fontes
34b0580225
Replace Status port using a socket 2019-02-06 18:00:10 -03:00
Tim Reddehase
16dcace669 do not wait for endpoints that shouldn't exist 
If there are no replicas defined, do not wait
around for the respective endpoints, since none
are expected.
 2019-02-03 16:53:38 +01:00
Tim Reddehase
018a1e4d94 respond with 503 when there are no endpoints 
* related to:
  * https://github.com/kubernetes/ingress-nginx/issues/3070
  * https://github.com/kubernetes/ingress-nginx/issues/3335
* add a 503 test
  * test a service that starts out empty
    (a.k.a. ingress-nginx controller (re-)start)
  * test scaling up (should route traffic accordingly)
  * test scaling down to empty service
  * use custom deployments for scaling test.
* provide a fix by updating the lua table (cache) of the configured backends
  to unset the backend if there are no endpoints available.
 2019-02-03 11:43:47 +01:00
minherz
de2a1ece6d add header-value annotation 
add new annotation (header-value)
parse it and propogate to lua script
alter balancer rule to include it into the canary routing logic
add e2e test to validate fallback for canary-by-header-value
add description of canary-by-header-value to documentation
 2019-01-30 23:23:44 +02:00
Alex Kursell
ca74960905 Fix --disable-catch-all 2019-01-25 14:53:55 -05:00
Kubernetes Prow Robot
1db9c91af4
Merge pull request #3363 from skeeey/master 
Document for cookie expires annotation
 2019-01-14 07:52:28 -08:00
liuwei
7aa5834948 add cookie expires document and fix a flaw for session-cookie-expires 2019-01-11 15:35:39 +08:00
Manuel Alejandro de Brito Fontes
0db09f425d
Refactor e2e tls helper 2019-01-10 20:59:49 -03:00
Manuel Alejandro de Brito Fontes
a3bcbeb3d2
Add support for redirect https to https when from-to-www-redirect is defined 2019-01-10 20:59:49 -03:00
Kubernetes Prow Robot
b433108ead
Merge pull request #3634 from Shopify/hyphen-in-canary-by-cookie 
canary by cookie should support hypen in cookie name
 2019-01-08 11:00:49 -08:00
Elvin Efendi
ba7b542d78 canary by cookie should support hypen in cookie name 2019-01-08 13:15:02 -05:00
Maxime Ginters
3fa8395f7f Fix a bug in Ingress update handler 2019-01-08 09:28:42 -05:00
Kubernetes Prow Robot
8f57f9578d
Merge pull request #3586 from Shopify/disable-catch-all 
Add --disable-catch-all option to disable catch-all server
 2019-01-07 07:16:26 -08:00
Diego Woitasen
60b983503b Consistent hashing to a subset of nodes. It works like consistent hash, 
but instead of mapping to a single node, we map to a subset of nodes.
 2019-01-03 01:32:52 -03:00
Kubernetes Prow Robot
29118750be
Merge pull request #3342 from aledbf/allowPrivilegeEscalation 
Allow privilege escalation
 2019-01-02 17:49:39 -08:00
Kubernetes Prow Robot
71cc6df74f
Merge pull request #3174 from Shopify/rewrite-regex 
Generalize Rewrite Block Creation and Deprecate AddBaseUrl (not backwards compatible)
 2019-01-02 12:30:18 -08:00
Manuel Alejandro de Brito Fontes
09e2466671
Add support to run e2e tests serially 2019-01-02 15:47:26 -03:00
Manuel Alejandro de Brito Fontes
a73dac2c0b
Fix proxy_host variable configuration 2019-01-02 15:31:27 -03:00
Anish Ramasekar
382049a0bf Adds support for HTTP2 Push Preload annotation 
update test for backendprotocols

Adds support for HTTP2 Push Preload annotation

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>

Adds support for HTTP2 Push Preload annotation

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>

Adds support for HTTP2 Push Preload annotation

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>

Adds support for HTTP2 Push Preload annotation

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>

Adds support for HTTP2 Push Preload annotation

Adds support for HTTP2 Push Preload annotation
 2018-12-24 17:13:25 -02:00
Manuel Alejandro de Brito Fontes
1109db2d09 Add e2e test 2018-12-21 19:30:34 -03:00
Manuel Alejandro de Brito Fontes
9be174738d Add allowPrivilegeEscalation 2018-12-21 19:30:19 -03:00
Maxime Ginters
1678d99a03 Add --disable-catch-all option to disable catch-all server 2018-12-21 13:22:26 -05:00
Kubernetes Prow Robot
63b01370e4
Merge pull request #3548 from breunigs/integration-test-graceful-shutdown-clean 
e2e test to ensure graceful shutdown does not lose requests
 2018-12-21 06:33:27 -08:00
Elvin Efendi
17d4b2c64c fix dind-cluster executable path 2018-12-20 16:27:42 +04:00
Kubernetes Prow Robot
ee3a8fe581
Merge pull request #3505 from Shopify/watch-pod-lua 
Update lua configuration_data when number of controller pod change
 2018-12-17 00:10:30 -08:00
Maxime Ginters
f90881b367 Update lua configuration_data when number of controller pod change 2018-12-14 13:34:54 -05:00
Zenara Daley
67654a6fd5 Generalize Rewrite Block Creation 2018-12-13 13:02:05 -05:00
Stefan Breunig
571bcfc433 e2e test to ensure graceful shutdown does not lose requests (see #3533 #3536) 2018-12-11 11:37:19 +01:00
Conor Landry
d5840a4071 make canary ingresses independent of the order they were applied 2018-12-10 13:17:05 -05:00
Maxime Ginters
af460f7e15 Fix a bug with Canary becoming main server 2018-12-06 11:04:32 -05:00
Joshua Mervine
5de991bb5b
{tcp,udp}-services cm appear twice 2018-12-05 09:15:51 -08:00
Manuel Alejandro de Brito Fontes
68f344233b Fix lint issues 2018-12-05 13:28:28 -03:00
Manuel Alejandro de Brito Fontes
2fa55eabf6 Replace glog with klog 2018-12-05 13:27:55 -03:00
Manuel Alejandro de Brito Fontes
fdeeac3606
Wait for the right number of endpoints (#3497) 2018-11-30 20:17:18 -03:00
Manuel Alejandro de Brito Fontes
c3ff68e9ca
Adjust default timeout for e2e tests (#3495) 2018-11-30 18:55:53 -03:00
Manuel Alejandro de Brito Fontes
334c38255d Fix flaky auth test 2018-11-30 10:18:52 -03:00
Manuel Alejandro de Brito Fontes
2f71c12add Since dynamic mode only checking for 'return 503' is not valid anymore 2018-11-30 09:37:48 -03:00
Manuel Alejandro de Brito Fontes
430045d249
Fix error in e2e test proxy setting check 2018-11-29 13:06:16 -03:00
Manuel Alejandro de Brito Fontes
e192bbaf14
Wait for endpoints instead of pods 2018-11-29 13:06:10 -03:00
Manuel Alejandro de Brito Fontes
8a0dec9dd1 Add probes to deployments used in e2e tests 2018-11-29 10:53:48 -03:00
k8s-ci-robot
710ea8c76f
Merge pull request #3333 from Shopify/dont-trust-by-default 
breaking change: by default do not trust any client
 2018-11-27 05:12:48 -08:00
Zenara Daley
2b109b360b Only set cookies on paths that enable session affinity 2018-11-19 11:42:12 -05:00
k8s-ci-robot
82721e575d
Merge pull request #3372 from Shopify/session-cookie-path 
Add annotation for session affinity path
 2018-11-19 07:25:32 -08:00
Zenara Daley
50b29feb4a Add annotation for session affinity path 2018-11-19 09:15:24 -05:00
k8s-ci-robot
bf7ad0daca
Merge pull request #3374 from aledbf/restore-tcp-udp 
Revert removal of support for TCP and UDP services
 2018-11-18 08:33:29 -08:00
Manuel Alejandro de Brito Fontes
a51136b863 Refactor assertions 2018-11-18 10:53:05 -03:00
Manuel Alejandro de Brito Fontes
af2dce901d
Fix tests 2018-11-18 08:17:18 -03:00
Manuel Alejandro de Brito Fontes
654eceda46
Add tcp e2e test 2018-11-16 21:07:52 -03:00
Manuel Alejandro de Brito Fontes
168f30d1ec Revert removal of support for TCP and UDP services 2018-11-16 13:48:47 -03:00
Fernando Diaz
95b3042b6e Add a Snippet for ModSecurity 
Allows for the configuration of Mod Security rules via
a Snippet.
 2018-11-14 23:31:27 -06:00
Elvin Efendi
5f3b48e16d breaking change: do not trust x-forwarded-* headers by default 2018-11-13 10:35:59 +04:00
Zenara Daley
8b32c4c326 Restructure load balance e2e tests and update round robin test 2018-11-12 10:19:52 -05:00
Zenara Daley
95db733c12 add e2e test for round robin load balancing 2018-11-09 13:20:33 -05:00
Fernando Diaz
5195600841 Allows ModSecurity to be configured per location 
The following annotations will be added:

- enable-modsecurity
- enable-owasp-core-rules
- modsecurity-transaction-id

Fixes #3167
 2018-11-06 22:24:31 -06:00
k8s-ci-robot
17cad51e47
Merge pull request #3341 from Shopify/canary_upstream 
Add canary annotation and alternative backends for traffic shaping
 2018-11-06 12:22:16 -08:00
Conor Landry
412cd70d3a implement canary annotation and alternative backends 
Adds the ability to create alternative backends. Alternative backends enable
traffic shaping by sharing a single location but routing to different
backends depending on the TrafficShapingPolicy defined by AlternativeBackends.

When the list of upstreams and servers are retrieved, we then call
mergeAlternativeBackends which iterates through the paths of every ingress
and checks if the backend supporting the path is a AlternativeBackend. If
so, we then iterate through the map of servers and find the real backend
that the AlternativeBackend should fall under. Once found, the
AlternativeBackend is embedded in the list of VirtualBackends for the real
backend.

If no matching real backend for a AlternativeBackend is found, then the
AlternativeBackend is deleted as it cannot be backed by any server.
 2018-11-06 13:13:14 -05:00
k8s-ci-robot
265f96bf14
Merge pull request #3344 from ecosia/jg-customerrors-per-ingress 
Adds CustomHTTPErrors ingress annotation and test
 2018-11-06 09:21:49 -08:00
jasongwartz
0ebf0354cb Adds CustomHTTPErrors ingress annotation and test 
Adds per-server/location error-catch functionality to nginx template

Adds documentation

Reduces template duplication with helper function for CUSTOM_ERRORS data

Updates documentation

Adds e2e test for customerrors

Removes AllCustomHTTPErrors, replaces with template function with deduplication and adds e2e test of deduplication

Fixes copy-paste error in test, adds additional test cases

Reverts noop change in controller.go (unused now)
 2018-11-06 16:47:52 +01:00
Adnan Baruni
b511333130 add support for auth-snippet annotation 
add test for new auth-snippet annotation

document auth-snippet annotation

add e2e test for auth-snippet annotation

add log warning and update documentation
 2018-11-05 16:02:29 -06:00
Fernando Diaz
290488a505 Add e2e test for ssl-redirect 
Adds the e2e test for the ssl-redirect annotation.
Part of the #3124 effort.
 2018-11-04 03:16:03 -06:00
liuwei
5febef5e69 Use second as cookie expires unit 2018-11-02 20:07:23 +08:00
liuwei
25a839c9df Use second as cookie expires unit 2018-11-02 19:02:32 +08:00
liuwei
e22e7e6e95 Merge remote-tracking branch 'upstream/master' 2018-11-02 18:35:41 +08:00
liuwei
f48e0162a3 Use second as cookie expires unit 2018-11-02 18:13:54 +08:00
liuwei
c74e59fa4c Use second as cookie expires unit 2018-11-02 17:05:38 +08:00
liuwei
ce6e564f82 merge from master 2018-11-02 13:13:24 +08:00
Fernando Diaz
71f97c400a Add e2e test for session-cookie-hash 
Adds the e2e test for the session-cookie-hash annotation.
Part of the #3124 effort.
 2018-11-01 23:44:22 -05:00
Manuel Alejandro de Brito Fontes
36aceded32
Avoid reloads when endpoints are not available 2018-11-01 10:00:49 -03:00
Manuel Alejandro de Brito Fontes
c9668dd40b
Fix e2e tests 2018-10-30 13:35:31 -03:00
k8s-ci-robot
5671c1718f
Merge pull request #3322 from aledbf/tests-cleanup 
Remove e2e boilerplate
 2018-10-30 08:40:23 -07:00
Elvin Efendi
91a12ffd52 sticky session e2e test 2018-10-30 16:12:54 +04:00
k8s-ci-robot
bec97b36c7
Merge pull request #3321 from mbode/geoip2 
Add configuration for geoip2 module
 2018-10-30 05:09:38 -07:00
liuwei
6d2d42ee0b remove some useless comments 2018-10-30 19:31:17 +08:00
liuwei
38279366a5 add e2e test for cookie annotations 2018-10-30 19:27:21 +08:00
Manuel Alejandro de Brito Fontes
83dc4607c5
Remove e2e boilerplate 2018-10-29 22:38:15 -03:00
Maximilian Bode
c27c57dc8b Add configuration for geoip2 module 
Based on closed PRs #2551, #2755
 2018-10-29 21:25:23 +01:00
Manuel Alejandro de Brito Fontes
fed013ab6f Fix status update in case of connection errors 2018-10-29 13:01:41 -03:00
k8s-ci-robot
0e2ac454cb
Merge pull request #3301 from diazjf/e2e-whitelist 
Add e2e tests for IP Whitelist
 2018-10-26 13:28:00 -07:00
Fernando Diaz
49ac77e01b Add e2e tests for IP Whitelist 
Adds e2e test for the whitelist-source-range annotation.
Part of the #3124 effort.
 2018-10-26 14:56:11 -05:00
k8s-ci-robot
a2062cbdac
Merge pull request #3305 from aramase/approot-e2e-test 
Add e2e test for app-root
 2018-10-26 10:53:49 -07:00
k8s-ci-robot
e48a1aaa59
Merge pull request #3302 from diazjf/e2e-server-snippet 
Add e2e test for server snippet
 2018-10-26 10:51:47 -07:00
Fernando Diaz
213be6103f Add e2e test for server snippet 
Adds the e2e test for server snippet. Similar test to the
configuration snippet. Part of the #3124 effort.
 2018-10-26 11:56:33 -05:00
Anish Ramasekar
d3a82f7b04
enhance test logic 2018-10-26 11:21:44 -05:00
Anish Ramasekar
519c30ea70
Add e2e test for app-root 2018-10-26 11:12:44 -05:00
Anish Ramasekar
04e6f7bd82
Add e2e test for force-ssl-redirect 2018-10-26 10:02:09 -05:00
Manuel Alejandro de Brito Fontes
abeb176198
Update kubeadm-dind-cluster (#3304) 2018-10-26 08:52:36 -03:00
k8s-ci-robot
063f652711
Merge pull request #3187 from DesmondHoLLM/feature/annotations-resty-lua 
UPT: annotation enhancement for resty-lua-waf
 2018-10-25 00:06:03 -07:00
Desmond Ho
bf03046a80 UPT: updated e2e test and default true for process-multipart-body annotation 2018-10-25 14:17:38 +08:00
Elvin Efendi
5cc116fa10 fix bug with balancer.lua configuration 2018-10-24 22:42:40 +04:00
Desmond Ho
3c2c0d0858 UPT: updated e2e testing title for lua test 2018-10-24 18:30:43 +08:00
k8s-ci-robot
01854c9113
Merge pull request #3281 from aramase/log-e2e-test 
Add e2e test for log
 2018-10-23 19:37:51 -07:00
Anish Ramasekar
a0b76569b7
Add e2e test for log 2018-10-23 13:11:01 -05:00
Anish Ramasekar
80ca063801
Add e2e test for from-to-www-redirect 2018-10-23 12:48:23 -05:00
Anish Ramasekar
e0ea0671a7
Add e2e test for configuration snippet 2018-10-22 16:36:35 -05:00
Desmond Ho
bab521e81a UPT: align waf options 2018-10-20 12:46:39 +08:00
Desmond Ho
04a89ce234 UPT: annotation enhancement for resty-lua-waf 2018-10-20 12:09:38 +08:00
Fernando Diaz
b503c6bdeb Add e2e Tests for AuthTLS 
Adds E2E tests for the following annotations:

- auth-tls-secret
- auth-tls-verify-depth
- auth-tls-verify-client
- auth-tls-error-page
- auth-tls-pass-certificate-to-upstream
 2018-10-18 20:09:21 -05:00
Manuel Alejandro de Brito Fontes
85424d4af3
Update kubeadm-dind-cluster (#3265) 2018-10-18 22:00:24 -03:00
Anish Ramasekar
441cd3dcb5
Add e2e test for connection 2018-10-17 16:37:27 -05:00
Anish Ramasekar
6d312d12d2
Add e2e tests for upstream vhost 
update test

update test
 2018-10-17 15:51:18 -05:00
Anish Ramasekar
48da443e67
Added e2e tests for backend protocols 
update test for backendprotocols
 2018-10-12 15:55:56 -05:00
k8s-ci-robot
3edf11b85f
Merge pull request #3198 from aledbf/only-dynamic 
Only support dynamic configuration
 2018-10-10 05:07:34 -07:00
Manuel Alejandro de Brito Fontes
74c2f93de6
Only support dynamic configuration 2018-10-09 22:05:45 -03:00
Fernando Diaz
44a11898d8 Refactor e2e Tests to use common helper function 
Each e2e test is creating the same(or similar) Ingress Resource in
different ways. This makes common ingress resource creation be
performed by a framework  method, reducing code duplication
 2018-10-09 11:12:11 -05:00
Elvin Efendi
78f12c25c5 delete upstream healthcheck annotation 2018-10-09 09:14:13 -04:00
k8s-ci-robot
f3a2e50744
Merge pull request #3193 from diazjf/healthcheck-e2e 
Add E2E tests for HealthCheck
 2018-10-08 16:24:58 -07:00
Fernando Diaz
527805f296 Add E2E tests for HealthCheck 
Adds e2e tests for:

- upstream-max-fails
- upstream-fail-timeout
 2018-10-08 13:17:19 -05:00
Manuel Alejandro de Brito Fontes
f3625e24f3 Remove flags 2018-10-07 11:27:44 -03:00
Manuel Alejandro de Brito Fontes
e8d81034b8
Release 0.20.0 (#3189) 
* Release 0.20.0

* Fix dind cluster issues
 2018-10-07 10:22:38 -03:00
k8s-ci-robot
b46523a1f4
Merge pull request #3149 from diazjf/proxy-e2e-tests 
Add e2e Tests for Proxy Annotations
 2018-10-05 05:15:09 -07:00
Zenara Daley
bd3f56eaa0 allow curly braces to be used in regex paths 2018-10-04 10:58:38 -04:00
Fernando Diaz
c981a65058 Add e2e Tests for Proxy Annotations 
Adds e2e tests for the following annotations:

- proxy-body-size
- proxy-connect-timeout
- proxy-send-timeout
- proxy-read-timeout
- proxy-buffering
- proxy-buffer-size
- proxy-request-buffering
- proxy-next-upstream
- proxy-next-upstream-tries
- proxy-cookie-domain
- proxy-cookie-path

and also updates some documentation.
 2018-10-01 16:10:09 -05:00
k8s-ci-robot
d9f58144eb
Merge pull request #3145 from Shopify/regex-modifier 
Add "use-regex" Annotation to Toggle Regular Expression Location Modifier
 2018-10-01 11:31:43 -07:00
Zenara Daley
f29bdc3e8d Add 'use regex' annotation to toggle nginx regex location modifier 2018-10-01 13:54:11 -04:00
Fernando Diaz
75975d74fb Add e2e test for SSL-Ciphers 
Adds tests to make sure SSL-Ciphers are configurable via annotation
 2018-09-27 14:23:02 -05:00
Elvin Efendi
b3a22f7fc0 do not require --default-backend-service 2018-09-25 21:14:28 -04:00
k8s-ci-robot
6393ca6aaf
Merge pull request #2997 from StarOfService/global-block-ip-ua-ref 
Provide possibility to block IPs, User-Agents and Referers globally
 2018-09-25 05:51:56 -07:00
Pavel Sinkevych
7212d0081b Provide possibility to block CIDRs, User-Agents and Referers globally 2018-09-25 14:16:20 +03:00
Manuel de Brito Fontes
91ae204f6c Replace standard json encoding with jsoniter 2018-09-22 14:25:01 -03:00
Zenara Daley
0de19c8062 Fix/add unit tests; Styling changes 2018-09-14 15:07:57 -04:00
Zenara Daley
aff61dc2dc Add e2e test for rewrite-target annotation kube-lego failure 2018-09-12 10:26:28 -04:00
Manuel de Brito Fontes
361f06b791 Join host/port with go helper (supports ipv6) 2018-09-09 16:34:18 -03:00
Wong Hoi Sing Edison
6d3e9ea7d0 Fixup #2970: Add Missing Label app.kubernetes.io/part-of: ingress-nginx 
-    Add missing label `app.kubernetes.io/part-of: ingress-nginx` for deploy example
-    Update new labels for docs/deploy and docs/examples
-    Update new labels for test/e2e and test/manifests
-    Update new labels for images/nginx

Also close #3001
 2018-09-05 11:48:29 +08:00
Fernando Diaz
2a990d2d2c Add e2e tests for CORS and more 
Adds the missing e2e tests for Cross-Origin Resource Sharing(CORS).
This will include all the CORS annotations. Also adds more unit tests.
 2018-09-01 16:14:52 -05:00
Elvin Efendi
c073bfc8b3 cleanup dynamic cert e2e tests 2018-08-24 20:26:17 -04:00
k8s-ci-robot
b0b575db33
Merge pull request #2965 from Shopify/dynamic-certificates-nginx 
Add Lua module to serve SSL Certificates dynamically
 2018-08-23 20:27:55 -07:00
Elvin Efendi
71f6d00b66 clear dynamic configuration e2e tests 2018-08-23 22:28:54 -04:00
Henry Tran
cbf041fc3e Add Lua module to serve SSL Certificates dynamically 2018-08-23 22:15:54 -04:00
Elvin Efendi
702fb9bf81 adjust tls settings test 2018-08-22 21:28:03 -04:00
Elvin Efendi
aa3e06b189 fix flaky luarestywaf test 2018-08-22 21:27:24 -04:00
Elvin Efendi
dc952dc462 consistently fallback to default certificate when TLS is configured 2018-08-22 20:53:25 -04:00
k8s-ci-robot
c083599a4b
Merge pull request #2899 from jeroenvand/jvd-fix-rewrite 
fixed rewrites for paths not ending in /
 2018-08-19 02:49:22 -07:00
Dario Nieuwenhuis
b5bcb93a4b
Merge branch 'master' into xff 2018-08-16 18:15:14 +02:00
Jeroen van Dongen
e428095e3c fixed rewrites for paths not ending in / 2018-08-15 21:15:40 +02:00
Manuel Alejandro de Brito Fontes
77b922aa00
Remove echoheaders image from the repository (#2921) 2018-08-10 07:08:46 -04:00
Manuel de Brito Fontes
7af93e03c7
Add annotation backend-protocol 2018-08-07 08:59:38 -04:00
k8s-ci-robot
7f7f59df79
Merge pull request #2894 from aledbf/authbind 
Use authbind to bind privileged ports
 2018-08-05 08:43:43 -07:00
Manuel de Brito Fontes
b148f113ae
Use authbind to bind privileged ports 2018-08-05 11:18:50 -04:00
Tom Reznik
b7bcf92480 support configuring multi_accept directive via configmap 2018-08-04 19:20:01 +03:00
Tom Reznik
1bacf1655e support custom configuration to main context of nginx config 2018-08-04 00:53:06 +03:00
k8s-ci-robot
23ce9b5db1
Merge pull request #2808 from dongqi1990/bugfix-2799 
fix the bug #2799, add prefix (?i) in rewrite statement.
 2018-08-02 20:58:06 -07:00
Manuel de Brito Fontes
d8b3c2e759
Remove dashboard an improve sync-frequency 2018-07-30 11:52:17 -04:00
dongqi1990
72a2aa171a fix the bug #2799, add prefix (?i) in rewrite statement and add new e2e 
test.
 2018-07-30 17:34:28 +08:00
k8s-ci-robot
5e4137c6e7
Merge pull request #2834 from Stono/master 
Added permanent-redirect-code
 2018-07-29 14:33:57 -07:00
Antoine Cotten
39966f48cd
Add e2e test for redirect annotations 
Minor refactoring of parser and unit tests
 2018-07-29 22:53:03 +02:00
Elvin Efendi
fa74877256 fix bug with lua e2e test suite 2018-07-28 13:56:41 -04:00
Manuel de Brito Fontes
7032fb7d68
Replace minikube for e2e tests 2018-07-28 11:05:35 -04:00
k8s-ci-robot
18cc2be826
Merge pull request #2794 from ElvinEfendi/enable-dynamic-confoguration 
enable dynamic backend configuration by default
 2018-07-27 00:46:56 -07:00
Elvin Efendi
576baa8d90 improve annotations/default_backend e2e test 2018-07-26 23:04:31 -04:00
Elvin Efendi
6641aa58e2 use static mode for affinity e2e test 2018-07-26 22:34:49 -04:00
Elvin Efendi
925be40943 no need to redundantly enable dynamic mode 2018-07-26 16:42:13 -04:00
Elvin Efendi
7d927a3f41 test to assert nameservers are passed to lua 2018-07-25 09:33:21 -04:00
Manuel de Brito Fontes
7210518f80
Remove setcap and use authbind instead 2018-07-21 18:56:28 -04:00
k8s-ci-robot
237dcd7aa7
Merge pull request #2811 from takonomura/escape-request-uri 
Escape $request_uri for external auth
 2018-07-21 02:23:38 -07:00
takonomura
3ce0ad988f Add e2e test for external auth 2018-07-21 16:22:48 +09:00
Antoine Cotten
0c7b948317
Multiple optimizations to build targets 
* Clean up e2e test on interruption
* Leverage GOCACHE for faster builds
* Forward container STDIN in make targets
 2018-07-20 20:08:32 +02:00
Manuel de Brito Fontes
2f70c351cb Catch errors waiting for controller deployment 2018-07-19 21:06:35 -04:00
Manuel de Brito Fontes
1542a12764
Refactor controller metrics interface 2018-07-12 12:46:34 -04:00
Manuel de Brito Fontes
479a519630
Use docker to build go binaries 2018-07-06 23:48:40 -04:00
Fernando Diaz
6b5e383123 Add e2e tests for Client-Body-Buffer-Size 
Adds test cases for the client-body-buffer-size annotation.
 2018-07-01 17:48:37 -05:00
Antoine Cotten
130866b51c
Proofreading 2018-06-25 00:04:43 +02:00
AdamDang
616b94e584
Correct grammar mistakes 2018-06-24 23:44:42 +02:00
Brian Findlay
d59e3ee9dd Update server-tokens tests 2018-06-23 10:08:39 -04:00
Manuel de Brito Fontes
1d6e2dfd5c Add e2e test for configmap change and reload 2018-06-21 10:52:56 -04:00
k8s-ci-robot
3cbd2d66bf
Merge pull request #2643 from aledbf/remove-vts 
Remove VTS from the ingress controller
 2018-06-14 23:59:29 -07:00
k8s-ci-robot
dfca2a0d8d
Merge pull request #2451 from nusx/set-sticky-path-for-backend 
fix for #1930, make sessions sticky, for ingress with multiple rules …
 2018-06-14 20:47:28 -07:00
chenqz1987
0e424bf5a4 add service backend e2e test 2018-06-15 08:10:03 +08:00
Manuel de Brito Fontes
63b38e1c21
Remove VTS from the ingress controller 2018-06-14 11:11:29 -04:00
Manuel Alejandro de Brito Fontes
764bcd5a1b
Wait the result of the controller deployment before running any test (#2638) 2018-06-13 16:27:17 -04:00
Antoine Cotten
47bea35492
Clarify log messages in controller pkg 2018-06-13 21:27:43 +02:00
Dario Nieuwenhuis
04d24e1ff7 Switch forwarded-headers e2e to use gorequest. 2018-06-13 21:10:33 +02:00
Dario Nieuwenhuis
fa626a605f Add use-forwarded-headers e2e test. 2018-06-12 21:33:53 +02:00
Manuel de Brito Fontes
79199dd84c
Run as user dropping privileges 2018-06-12 10:18:36 -04:00
Stefan Schwärzler
1a320ae289 fix for #1930, make sessions sticky, for ingress with multiple rules and backends 
* for an ingress with session affinity cookie, set the location as path on the cookie when unique
* the previous behaviour ( cookie path=/ ) is preserved for ingresses with multiple rules for the same backend (locations not unique)

added e2e tests for session affinity, setting path on sticky config

added tests:
* it should set the path to /something on the generated cookie
* it should set the path to / on the generated cookie if there's more than one rule referring to the same backend
 2018-06-11 10:43:13 +02:00
Elvin Efendi
d4e6c0dfd8 access_log should be off for internal /configuration endpoint 2018-05-31 16:01:54 -04:00
Elvin Efendi
2c4e41c905 make sure ingress-nginx instances are watching their namespace only during test runs 2018-05-28 17:00:36 -04:00
k8s-ci-robot
1b5db4b3b0
Merge pull request #2574 from aledbf/default-backend 
Fix default-backend annotation
 2018-05-27 23:16:30 -07:00
Manuel de Brito Fontes
2023e56115
Fix default-backend annotation 2018-05-26 19:09:24 -04:00
Manuel de Brito Fontes
2c226ef0fb Fix influxdb test flake 2018-05-26 17:11:15 -04:00
Manuel de Brito Fontes
564f2a9fe4
Add retries to auth test checks 2018-05-26 16:27:45 -04:00
Manuel de Brito Fontes
5dd1b1319c
Fix ClusterRoleBinding for e2e tests 2018-05-26 16:27:45 -04:00
Manuel Alejandro de Brito Fontes
15ffb51394
Enable core dumps during tests (#2570) 2018-05-26 11:08:38 -04:00
Lorenzo Fontana
c3b896dfbc
InfluxDB annotations e2e tests 
Signed-off-by: Lorenzo Fontana <lo@linux.com>
 2018-05-19 19:07:16 +02:00
k8s-ci-robot
aa256ac887
Merge pull request #2423 from diazjf/fix-2074 
Resolves issue with proxy-redirect nginx configuration
 2018-05-18 12:42:51 -07:00
Manuel Alejandro de Brito Fontes
f92f5f80e4
Simplify installation and e2e manifests (#2515) 2018-05-17 17:50:21 -04:00
Fernando Diaz
e224259e38 Resolves issue with proxy-redirect nginx configuration 
Resolves an issue where the proxy-redirect annotations were not generating the
correct configuration possibly because of user error. This is done by only
setting the proxy_redirect if both proxy-redirect-from and proxy-redirect-to
have valid values. Also adds the e2e tests.

Fixes #2074
 2018-05-17 11:22:31 -05:00
Manuel de Brito Fontes
ff3e182350 Add support for grpc_set_header 2018-05-17 08:35:11 -04:00
Elvin Efendi
7ac4e1db30 fix bug with lua sticky session implementation and refactor balancer 2018-05-16 21:00:39 -04:00
k8s-ci-robot
94198fce83
Merge pull request #2526 from ElvinEfendi/fix-upstreah-hash-lua-test 
Fix upstream hash lua test
 2018-05-16 17:57:52 -07:00
Elvin Efendi
c7de5a5bf6 do not assert on random behaviour 2018-05-16 19:19:38 -04:00
Elvin Efendi
2eb0286c8a fix flaky test 2018-05-16 19:05:49 -04:00
Manuel de Brito Fontes
a085808d2d
Add tests for bind-address 2018-05-16 14:53:29 -04:00
Manuel de Brito Fontes
d4f2b5d060
Fix and simplify local dev workflow and execution of e2e tests 2018-05-15 12:13:41 -04:00
Mark Janssen
cbb0f96f74 Add basic security context to deployment YAMLs 2018-04-28 23:32:37 +02:00
Antoine Cotten
ca423e1567
Add tests for global TLS settings 2018-04-27 23:24:23 +02:00
Antoine Cotten
553df8a0cc
Refactor e2e framework for TLS tests 2018-04-27 23:24:22 +02:00
Antoine Cotten
c93f39f019
Bump echoserver version used in e2e test (1.10) 2018-04-27 23:24:22 +02:00
Antoine Cotten
7c246ec313
Use local image name for e2e tests 2018-04-27 23:24:22 +02:00
Manuel de Brito Fontes
acaf3d8c04 Release nginx ingress controller 0.14.0 2018-04-27 16:09:28 -03:00
Elvin Efendi
2ce9196ecf upstream-hash-by annotation support for dynamic configuraton mode 2018-04-27 14:28:43 -04:00
JordanP
c995031ffd Add annotation to enable rewrite logs in a location 2018-04-27 17:50:14 +02:00
Manuel de Brito Fontes
c6728aa8fa
Clean JSON before post request to update configuration 2018-04-26 15:27:27 -03:00
Manuel de Brito Fontes
9bf553559c Apply gometalinter suggestions 2018-04-25 18:53:49 -03:00
Andrew Louis
d3d383d1cc Endpoint Awareness: Read backends data from tmp file as well 
Actually read from the file

Logs probably shouldn't assume knowledge of implementation detail

Typos

Added integration test, and dynamic update config refactor

Don't force the 8k default

Minimal test case to make the configuration/backends request body write to temp file

Leverage new safe config updating methods, and use 2 replicas instead of 4

Small refactor

Better integration test, addresses other feedback

Update bindata
 2018-04-24 15:07:59 -04:00
Elvin Efendi
0837e81c7f cleanup redundant code 2018-04-20 23:41:21 -04:00
Elvin Efendi
84385a01bb shave off some more seconds 2018-04-20 22:58:41 -04:00
Elvin Efendi
b2084c057d fix flaky dynamic configuration test 2018-04-20 22:32:38 -04:00
Manuel de Brito Fontes
42e0c0abf7
Improve speed of e2e tests 2018-04-20 00:04:34 -03:00
Manuel de Brito Fontes
62a80a39ad
Remove most of the time.Sleep from the e2e tests 2018-04-19 17:48:50 -03:00
Andrew Louis
882a99c1ec Fix leaky test 2018-04-18 11:48:24 -04:00
Andrew Louis
444914b764 Move the resetting logic into framework 
Stylistic fixes based on feedback
 2018-04-18 11:48:22 -04:00
Andrew Louis
19337f05fb Introduce ConfigMap updating helpers into e2e/framework and retain default nginx-configuration state between tests 
Group sublogic
 2018-04-17 15:08:26 -04:00
AdamDang
e519edc76f
Correct some returned messages in server_tokens.go 
should not exists->should not exist
should exists->should exist
 2018-04-15 23:42:38 +08:00
Zenara Daley
32ea682629 Fixed tests 2018-04-12 19:44:09 -04:00
Zenara Daley
6ed256dde6 Add session affinity to custom load balancing 2018-04-12 14:21:42 -04:00
Manuel Alejandro de Brito Fontes
156bc7a177
Update nginx image (#2328) 
* Update nginx image

* Update minikube start script
 2018-04-10 19:52:58 -03:00
Elvin Efendi
d6eb44376d run lua-resty-waf in different modes (#2317) 
* run lua-resty-waf in different modes

* update docs
 2018-04-09 09:19:13 -03:00
Elvin Efendi
bad8295a42 extra waf rules per ingress (#2315) 
* extra waf rules per ingress

* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules

* regenerate internal/file/bindata.go
 2018-04-09 07:14:30 -03:00
Elvin Efendi
16faf309ca annotation to ignore given list of WAF rulesets (#2314) 2018-04-08 22:55:23 -03:00
Elvin Efendi
a6fe800a47 lua-resty-waf controller (#2304) 2018-04-08 17:37:13 -03:00
Alvaro Aleman
e7aa74b5d4 Add NoAuthLocations and default it to "/.well-known/acme-challenge" (#2243) 
* Add NoAuthLocations and default it to "/.well-known/acme-challenge"

* Add e2e tests for no-auth-location

* Improve wording of no-auth-location tests
 2018-04-01 21:02:34 -03:00
Alvaro Aleman
9b4d7f28d0 Fix flaky e2e tests by always waiting after redeploying the ingress controller (#2283) 2018-04-01 20:37:27 -03:00
Elvin Efendi
ee46f486c7 e2e tests for dynamic configuration and Lua features and a bug fix (#2254) 
* e2e tests for dynamic configuration and Lua features

* do not rely on force reload to dynamically configure when reload is needed

* fix misspelling

* skip dynamic configuration in the first template rendering

* dont error on first sync
 2018-04-01 17:09:27 -03:00
Sylvain Rabot
385368990c Managing a whitelist for _/nginx_status (#2187) 
Signed-off-by: Sylvain Rabot <s.rabot@lectra.com>
 2018-03-28 09:27:34 -03:00
Antoine Cotten
86a3a63488 Include tests in golint checks, fix warnings (#2180) 2018-03-07 08:37:30 -08:00
Manuel de Brito Fontes
62622f6516 Clenup tests 2018-01-23 21:11:56 -03:00
Manuel de Brito Fontes
12ec0475c0 Fix SSL passthrough 2018-01-23 19:34:33 -03:00
Manuel de Brito Fontes
1ec0a60746 Add container flag where is required to run the command 2018-01-23 19:34:33 -03:00
Manuel Alejandro de Brito Fontes
2853ba564d
Adjust sysctl values to improve nginx performance (#1960) 
* Adjust sysctl values to improve nginx performance

* Increase wait timeout for nginx controller pod
 2018-01-23 19:19:32 -03:00
Manuel de Brito Fontes
c5df325c98 Add missing test framework helper 2018-01-18 16:32:09 -03:00
Manuel Alejandro de Brito Fontes
807932259e
If server_tokens is disabled remove the Server header (#1903) 
* If server_tokens is disabled remove the Server header

* Add server-tokens tests

* Fix tests
 2018-01-17 10:26:53 -02:00
Manuel Alejandro de Brito Fontes
f732b4ea2f
Improve speed of tests execution (#1861) 2017-12-27 08:16:59 -03:00
Manuel Alejandro de Brito Fontes
49238d0e67
Merge pull request #1786 from oilbeater/fix/type 
fix: some typo.
 2017-12-04 10:09:50 -03:00
Manuel de Brito Fontes
a4f67c0853 Fix verification of boilerplate, style and file headers 2017-12-03 13:58:23 -03:00
Mengxin Liu
9cf0b11fc7 fix: some typo. 2017-12-02 13:47:04 +08:00
Manuel Alejandro de Brito Fontes
82b4d2a0af
Merge pull request #1231 from canhnt/sticky-path-rewriter 
Add tests to cover sticky cookie and rewrite-target annotations
 2017-11-23 20:08:04 -03:00
Canh Ngo
d37722b0c7 Added e2e test for sticky cookie and redirection 2017-11-23 22:30:46 +01:00
Manuel de Brito Fontes
12f118992f Cleanup of e2e helpers 2017-11-23 16:53:00 -03:00
Manuel de Brito Fontes
f055022e58 Simplify annotations 2017-11-23 14:11:31 -03:00
Manuel de Brito Fontes
18d6573981 Add fake filesystem for test to avoid temporal files on the local filesystem 2017-11-22 19:52:30 -03:00
Manuel de Brito Fontes
b6dfe3d54d Improve e2e checks 2017-11-22 14:19:15 -03:00
Manuel de Brito Fontes
c768be622c Enable all e2e tests 2017-11-18 07:22:42 -03:00
Manuel de Brito Fontes
a36cd10041 Do not update a secret not referenced by ingress rules 2017-11-14 17:50:08 -03:00
Manuel de Brito Fontes
57f43989fd Add e2e tests to verify the correct source IP address 2017-11-13 17:26:13 -03:00