Jack Lindamood
a90452774a
ingress-path-matching: doc typo
...
A small typo in the README describing the path matching.
2020-02-18 10:19:53 -08:00
Daniel Arifin
d48d5a61ae
Add gzip-min-length as a configurable
2020-02-14 13:29:51 +07:00
Manuel Alejandro de Brito Fontes
0365a7c172
Remove minikube and only use kind ( #5059 )
2020-02-12 20:19:57 -03:00
Manuel Alejandro de Brito Fontes
2c5819e1b3
Add flag to allow custom ingress status update intervals ( #5050 )
2020-02-10 16:52:50 -03:00
Kubernetes Prow Robot
5e54f66ab2
Merge pull request #5040 from BrianKopp/samesite-followup
...
Update documentation and remove hack fixed by upstream cookie library
2020-02-10 10:25:53 -08:00
Manuel Alejandro de Brito Fontes
34b6d083b8
Cleanup docs ( #5043 )
2020-02-09 20:50:27 -03:00
BrianKopp
34b194c770
Update documentation and remove hack fixed by upstream cookie library
2020-02-08 11:54:52 -07:00
Manuel Alejandro de Brito Fontes
b3146354d4
Refactor mirror feature
2020-02-05 10:39:55 -03:00
Kubernetes Prow Robot
beef9fae2d
Merge pull request #4949 from BrianKopp/same-site
...
Add SameSite support - omit None for old browsers
2020-01-31 03:50:21 -08:00
Herr-Sepp
3f4da0fa0f
added hint why regular expressions might not be accepted
...
Kubernetes validates all regular expressions using RE2 which does not support the full syntax of PCRE which uses NGINX.
see: #4989
2020-01-30 19:22:41 +01:00
Brian Kopp
1b523390bb
Add SameSite=None support and conditionally omit SameSite=None for backwards compatibility
2020-01-29 14:30:00 -07:00
Manuel Alejandro de Brito Fontes
74944b99e9
Enable download of GeoLite2 databases ( #4896 )
2020-01-08 19:46:43 -03:00
Sungmin Lee
d7be5db7de
Support sample rate and global sampling configuration for Datadog in ConfigMap
2020-01-07 16:59:59 -08:00
Denis Boulas
8bf155d0d7
Fixed documentation for FCGI annotation.
2019-12-19 03:48:55 +03:00
Manuel Alejandro de Brito Fontes
0dce5be743
Migrate ingress definitions from extensions to networking.k8s.io
2019-12-12 21:25:00 -03:00
Sablu Miah
010ec6f159
Remove extra annotation when Enabling ModSecurity
...
Since version 0.25, if you try to use both annotations of:
nginx.ingress.kubernetes.io/modsecurity-snippet: |
Include /etc/nginx/owasp-modsecurity-crs/nginx-modsecurity.conf
Include /etc/nginx/modsecurity/modsecurity.conf
and
nginx.ingress.kubernetes.io/enable-modsecurity: "true"
it breaks nginx config and you will not catch it unless you have nginx admission controller enabled.
You do not need the annotation of `Include /etc/nginx/modsecurity/modsecurity.conf` from version 0.25
2019-11-28 15:16:09 +00:00
Kubernetes Prow Robot
b286c2a336
Merge pull request #4732 from willthames/enable-opentracing-annotation
...
Allow enabling/disabling opentracing for ingresses
2019-11-26 17:31:21 -08:00
Will Thames
0ae463a5f3
Provide annotation to control opentracing
...
By default you might want opentracing off, but on for a particular
ingress.
Similarly, you might want opentracing globally on, but disabled for
a specific endpoint. To achieve this, `opentracing_propagate_context`
cannot be set when combined with `opentracing off`
A new annotation, `enable-opentracing` allows more fine grained control
of opentracing for specific ingresses.
2019-11-27 11:07:26 +10:00
Matt Busche
6b0a6ec8b3
Fix extra word
2019-11-20 19:01:56 -06:00
Syunsuke Komma
73aaf0ff28
Update annotations.md
...
Add links to proxy-buffering section
2019-11-13 12:54:42 +09:00
Syunsuke Komma
0b38a48ac9
Update annotations.md
...
Add notes of limit-rate/limit-rate-after
2019-11-13 12:49:59 +09:00
Manuel Alejandro de Brito Fontes
d1eea794e9
Fix broken links in documentation ( #4746 )
2019-11-08 16:22:52 -03:00
Kubernetes Prow Robot
2771095b8c
Merge pull request #4727 from nothinux/master
...
update docs, remove output in prometheus deploy command
2019-11-08 09:02:14 -08:00
Kubernetes Prow Robot
0d244e1c41
Merge pull request #4730 from stamm/master
...
add configuration for http2_max_concurrent_streams
2019-11-08 07:12:29 -08:00
Kubernetes Prow Robot
a0dc3a9a51
Merge pull request #4695 from janosi/secure-verify-ca-secret
...
Removing secure-verify-ca-secret support
2019-11-08 07:12:21 -08:00
Rustam Zagirov
d9cfad1894
add configuration for http2_max_concurrent_streams
2019-10-31 15:13:38 +03:00
nothinux
d8c2d38a39
remove output in prometheus deploy command
2019-10-31 10:29:14 +07:00
Carlos Panato
40e0e5bef8
add proxy-max-temp-file-size doc
2019-10-23 09:55:46 +02:00
Kubernetes Prow Robot
bd4b62029d
Merge pull request #4694 from panpan0000/add-remote-addr-into-l4-logs
...
Enhancement : add remote_addr in TCP access log
2019-10-20 19:39:37 -07:00
Peter Pan
ee24bf1bbc
Doc: Add remote_addr
into default values in configmap for TCP logging format
2019-10-21 10:18:17 +08:00
Laszlo Janosi
31227d61c2
Removing secure-verify-ca-secret support and writing an error log if that annotation is used in an Ingress definition
2019-10-18 10:58:57 +02:00
Matthew Wickman
ad17d71387
Adding some documentation about the use of metrics-per-host and enable-metrics cmd line flags
2019-10-17 17:22:49 -06:00
Kubernetes Prow Robot
fb025ab501
Merge pull request #4087 from MRoci/master
...
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
Manuel Alejandro de Brito Fontes
d5d2b4037c
Fix ports collision when hostNetwork=true ( #4617 )
2019-09-28 17:30:57 -03:00
MRoci
72c4ffa8b5
add modsecurity-snippet key
2019-09-28 09:54:07 +02:00
Manuel Alejandro de Brito Fontes
6715108d8a
Release 0.26.0
2019-09-27 10:23:12 -03:00
Kubernetes Prow Robot
50b6715f06
Merge pull request #4604 from aledbf/2353
...
Change default for proxy-add-original-uri-header
2019-09-25 07:28:00 -07:00
Manuel Alejandro de Brito Fontes
2bd8121338
Change default for proxy-add-original-uri-header
2019-09-25 10:57:31 -03:00
Kubernetes Prow Robot
ceddec4ea0
Merge pull request #4588 from multi-io/patch-1
...
tls user guide --default-ssl-certificate clarification
2019-09-25 06:14:00 -07:00
Manuel Alejandro de Brito Fontes
ea5add6f5c
Rollback change of ModSecurity setting SecAuditLog
2019-09-24 14:53:44 -03:00
A Gardner
786a3b6862
Add support for configmap of headers to be sent to external auth service
2019-09-24 10:53:23 -04:00
Kubernetes Prow Robot
f6c2f5fb97
Merge pull request #4514 from alexmaret/4475-stickyness-mode
...
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
Olaf Klischat
1a5e2d57a6
tls user guide --default-ssl-certificate clarification
...
Evidently the `--default-ssl-certificate` option is used not only for the catch-all server, but also for all ingress `tls:` sections that don't have a `secretName` option. This doesn't seem to be documented anywhere, hence this change.
2019-09-23 12:35:10 +02:00
Manuel Alejandro de Brito Fontes
c1ed6db468
Fix spelling and remove local reference of 404 docker image ( #4581 )
2019-09-22 16:08:47 -03:00
Manuel Alejandro de Brito Fontes
4b4176c830
Fix log format after #4557
2019-09-18 12:52:09 -03:00
Kubernetes Prow Robot
87ad033483
Merge pull request #4569 from mkabischev/jaeger-header-configuration
...
allow to configure jaeger header names
2019-09-17 20:29:29 -07:00
Mike Kabischev
d5563a7e47
allow to configure jaeger header names
2019-09-17 12:35:53 +03:00
Kubernetes Prow Robot
846ff00363
Merge pull request #4560 from Shopify/basic-auth-map
...
Support configuring basic auth credentials as a map of user/password hashes
2019-09-16 07:52:39 -07:00
A Gardner
376b862c23
Add annotation to support map of user/pass pairs in basic auth
2019-09-13 11:33:33 -04:00
Manuel Alejandro de Brito Fontes
9af574a234
Remove the_real_ip variable
2019-09-12 20:01:33 -03:00