Manuel Alejandro de Brito Fontes
aec40c171f
Improve configuration change detection ( #2656 )
...
* Use information about the configuration configmap to determine changes
* Add hashstructure dependency
* Rename queue functions
* Add test for configmap checksum
2018-06-21 10:50:57 -04:00
k8s-ci-robot
fe9a5aec44
Merge pull request #2660 from aledbf/fix-modesecurity
...
Change modsecurity directories
2018-06-20 11:15:05 -07:00
Manuel de Brito Fontes
8107e0f659
Change modsecurity directories
2018-06-20 12:04:30 -04:00
Elvin Efendi
cb4755835e
refactor some lua code
2018-06-19 12:46:49 +04:00
Manuel Alejandro de Brito Fontes
c4ec773966
Use a unix socket instead udp for reception of metrics ( #2652 )
2018-06-17 11:04:03 -04:00
Manuel Alejandro de Brito Fontes
fee8704b53
Add support for IPV6 in stream upstream servers ( #2649 )
2018-06-15 10:26:33 -04:00
k8s-ci-robot
3cbd2d66bf
Merge pull request #2643 from aledbf/remove-vts
...
Remove VTS from the ingress controller
2018-06-14 23:59:29 -07:00
k8s-ci-robot
dfca2a0d8d
Merge pull request #2451 from nusx/set-sticky-path-for-backend
...
fix for #1930 , make sessions sticky, for ingress with multiple rules …
2018-06-14 20:47:28 -07:00
Manuel de Brito Fontes
63b38e1c21
Remove VTS from the ingress controller
2018-06-14 11:11:29 -04:00
Francisco Mejia
966e9f5e25
Add monitor lua module
2018-06-13 22:54:31 -04:00
Manuel de Brito Fontes
79199dd84c
Run as user dropping privileges
2018-06-12 10:18:36 -04:00
Stefan Schwärzler
1a320ae289
fix for #1930 , make sessions sticky, for ingress with multiple rules and backends
...
* for an ingress with session affinity cookie, set the location as path on the cookie when unique
* the previous behaviour ( cookie path=/ ) is preserved for ingresses with multiple rules for the same backend (locations not unique)
added e2e tests for session affinity, setting path on sticky config
added tests:
* it should set the path to /something on the generated cookie
* it should set the path to / on the generated cookie if there's more than one rule referring to the same backend
2018-06-11 10:43:13 +02:00
Dmitry Stolyarov
02ff8244a2
Add $location_path variable
...
When you define rules in ingress resource, you use path. So it would be
very useful to be able to use the same path in logs.
2018-06-07 13:43:29 +03:00
Dmitry Stolyarov
59aac73785
Add $service_port variable
...
According to TCP/IP (and common sense), $service_name is not enough to
uniquely identify service, we need $service_port for that.
2018-06-07 13:43:20 +03:00
Dmitry Stolyarov
eafb1890d6
Move vars to the very beginning of the location
...
To make it more clear, that you could use $namespace, $ingress_name and
$service_name variables anywhere in location (especialy in lua), move
their definition to the very begining of the location.
2018-06-07 13:43:09 +03:00
Paul DeCarlo
3159384480
Use lua-platform-path symlink for all platforms
2018-06-04 18:15:59 -05:00
Elvin Efendi
d4e6c0dfd8
access_log should be off for internal /configuration endpoint
2018-05-31 16:01:54 -04:00
Elvin Efendi
b4e6513fc8
make sure after_balance
is actually otional
...
add inline comment to make LB algorithm change detection logic clearer
also require port in addition to host
2018-05-28 16:08:53 -04:00
Elvin Efendi
04b7356190
fix ewma.balance and add unit tests for it
2018-05-28 15:51:58 -04:00
Elvin Efendi
da3a87646a
make sure balancer gets deleted when ther is no backend
2018-05-28 15:51:58 -04:00
Elvin Efendi
e9dc275b81
refactor balancer into more testable and extensible interface
2018-05-28 15:51:58 -04:00
k8s-ci-robot
b8b5e5bc51
Merge pull request #2548 from Stono/master
...
Implement generate-request-id
2018-05-21 13:55:12 -07:00
Karl Stoney
206d32a2cd
Implement generate-request-id
...
Fixes https://github.com/kubernetes/ingress-nginx/issues/2546
2018-05-21 08:32:50 +01:00
Lorenzo Fontana
d434583b53
InfluxDB configuration string template builder helper
...
Signed-off-by: Lorenzo Fontana <lo@linux.com>
2018-05-19 09:22:49 +02:00
Lorenzo Fontana
93be8db612
Annotations for the InfluxDB Module
...
Signed-off-by: Lorenzo Fontana <lo@linux.com>
2018-05-19 09:22:46 +02:00
Fernando Diaz
e224259e38
Resolves issue with proxy-redirect nginx configuration
...
Resolves an issue where the proxy-redirect annotations were not generating the
correct configuration possibly because of user error. This is done by only
setting the proxy_redirect if both proxy-redirect-from and proxy-redirect-to
have valid values. Also adds the e2e tests.
Fixes #2074
2018-05-17 11:22:31 -05:00
Manuel de Brito Fontes
ff3e182350
Add support for grpc_set_header
2018-05-17 08:35:11 -04:00
Manuel de Brito Fontes
692ab5e53c
Remove go-bindata
2018-05-17 07:58:50 -04:00
Elvin Efendi
7ac4e1db30
fix bug with lua sticky session implementation and refactor balancer
2018-05-16 21:00:39 -04:00
Elvin Efendi
44ddd8abba
force backend sync when worker starts
2018-05-14 17:08:23 -04:00
Elvin Efendi
992a68de23
upstream-hash-by should override load-balance annotation
2018-05-10 13:47:19 -04:00
Elvin Efendi
6cb28e059c
use roundrobin from lua-resty-balancer library and refactor balancer.lua
2018-05-10 13:47:19 -04:00
Elvin Efendi
51cf184c51
always use x-request-id
2018-04-28 00:31:23 -04:00
Elvin Efendi
2ce9196ecf
upstream-hash-by annotation support for dynamic configuraton mode
2018-04-27 14:28:43 -04:00
JordanP
c995031ffd
Add annotation to enable rewrite logs in a location
2018-04-27 17:50:14 +02:00
Adam Netočný
8b6f043fd8
Add buffer configuration to external auth location config
2018-04-26 16:04:12 +02:00
k8s-ci-robot
9533aa45cc
Merge pull request #2408 from Shopify/updated-buffered-backends
...
Read backends data even if buffered to temp file
2018-04-24 14:09:02 -07:00
Andrew Louis
d3d383d1cc
Endpoint Awareness: Read backends data from tmp file as well
...
Actually read from the file
Logs probably shouldn't assume knowledge of implementation detail
Typos
Added integration test, and dynamic update config refactor
Don't force the 8k default
Minimal test case to make the configuration/backends request body write to temp file
Leverage new safe config updating methods, and use 2 replicas instead of 4
Small refactor
Better integration test, addresses other feedback
Update bindata
2018-04-24 15:07:59 -04:00
Zenara Daley
0d0d33aec9
add balancer unit tests
2018-04-24 12:10:57 -04:00
Zenara Daley
4f9865529a
Add busted unit testing framework for lua code
2018-04-23 10:46:28 -04:00
Nick Novitski
8886b8a50e
Add vts-sum-key config flag
2018-04-17 11:39:32 -07:00
Giancarlo Rubio
c60ed24f4b
Detect if header injected request_id before creating one
2018-04-17 15:49:35 +02:00
Bastian Hofmann
1c17962ba0
Add proxy-add-original-uri-header config flag
...
This makes it configurable if a location adds an X-Original-Uri header to the backend request. Default is "true", the current behaviour.
2018-04-16 12:34:26 +02:00
k8s-ci-robot
8855460817
Merge pull request #2341 from Shopify/custom-sticky
...
Add session affinity to custom load balancing
2018-04-12 17:22:59 -07:00
Zenara Daley
4b11fe4d25
Fix nginx template
2018-04-12 15:43:13 -04:00
Zenara Daley
6ed256dde6
Add session affinity to custom load balancing
2018-04-12 14:21:42 -04:00
Zenara Daley
4b76ad14bb
Fix buildupstream name to work with dynamic session affinity
2018-04-12 14:01:46 -04:00
oilbeater
1be1f658b4
disable lua for arch s390x and ppc64le
...
LuaJIT is not available for s390x and ppc64le, disable the lua part in nginx.tmpl on these platform.
2018-04-12 08:30:56 +08:00
Elvin Efendi
d6eb44376d
run lua-resty-waf in different modes ( #2317 )
...
* run lua-resty-waf in different modes
* update docs
2018-04-09 09:19:13 -03:00
Elvin Efendi
bad8295a42
extra waf rules per ingress ( #2315 )
...
* extra waf rules per ingress
* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules
* regenerate internal/file/bindata.go
2018-04-09 07:14:30 -03:00