Commit graph

4977 commits

Author SHA1 Message Date
Bryan Hanner
9957d30048 warn when ConfigMap is missing or unparsable instead of erroring 2019-10-11 17:15:38 -07:00
Sergei Turchanov
0476715022 Need to quote expansion of $cfg.LogFormatStream in log_stream access log
format in nginx.tmpl otherwise individual variables are just glued together
without separating spaces so that you would get these in access logs:

[10/Oct/2019:05:03:30 +0000]TCP200000.003
[10/Oct/2019:05:03:30 +0000]TCP200000.000
[10/Oct/2019:05:05:04 +0000]TCP200000.000

which supposed to be someting like these:
[10/Oct/2019:05:03:30 +0000] TCP 200 0 0 0.003
[10/Oct/2019:05:03:30 +0000] TCP 200 0 0 0.000
[10/Oct/2019:05:05:04 +0000] TCP 200 0 0 0.000
2019-10-10 17:27:15 +10:00
Dave Thompson
8e926b21d1 Expose GeoIP2 Organization as variable $geoip2_org 2019-10-09 09:47:48 +01:00
Kubernetes Prow Robot
8fd17045e6
Merge pull request #4603 from membphis/code-style
optimize: local cache global variable and reduce string object creation.
2019-10-08 07:51:15 -07:00
Kubernetes Prow Robot
2c6fbdca30
Merge pull request #4623 from beautytiger/dev-191001-clean
remove duplicated line in docs
2019-10-01 05:03:34 -07:00
Guangming Wang
e7590ef727 remove duplicated line in docs
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-10-01 10:08:45 +08:00
Kubernetes Prow Robot
fb025ab501
Merge pull request #4087 from MRoci/master
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
Kubernetes Prow Robot
27df50a192
Merge pull request #4620 from aspacca/ISSUE-4244-e2e-test
ISSUE-4244 e2e test
2019-09-30 14:57:31 -07:00
Manuel Alejandro de Brito Fontes
7aca7bcc04
Terraform release (#4613)
* Add script to build the ingress controller image using terraform

* Update terraform to 0.12.9
2019-09-30 18:33:46 -03:00
Andrea Spacca
e84c8cd705 ISSUE-4244 e2e test 2019-09-29 23:28:44 +02:00
Manuel Alejandro de Brito Fontes
2de5a893aa
Release 0.26.1 (#4618) 2019-09-29 18:26:23 -03:00
Andrea Spacca
203a3ed455 ISSUE-4244 comply with --health-check-path (#4619) 2019-09-29 14:37:57 -03:00
Manuel Alejandro de Brito Fontes
d5d2b4037c
Fix ports collision when hostNetwork=true (#4617) 2019-09-28 17:30:57 -03:00
MRoci
1ee081ccc8
test modsecurity-snippet 2019-09-28 09:54:10 +02:00
MRoci
72c4ffa8b5
add modsecurity-snippet key 2019-09-28 09:54:07 +02:00
Kubernetes Prow Robot
9ecec0de63
Merge pull request #4607 from aledbf/0.26
Release 0.26.0
2019-09-27 10:57:37 -07:00
Manuel Alejandro de Brito Fontes
6715108d8a
Release 0.26.0 2019-09-27 10:23:12 -03:00
Manuel Alejandro de Brito Fontes
a9f332704a
Fix custom default backend switch to default (#4611) 2019-09-27 10:21:28 -03:00
Kubernetes Prow Robot
fd9acd412f
Merge pull request #4606 from aledbf/fix-dirs
Mount temporal directory volume for ingress controller
2019-09-25 09:38:03 -07:00
Manuel Alejandro de Brito Fontes
6100836375
Mount temporal directory volume for ingress controller 2019-09-25 13:03:17 -03:00
Kubernetes Prow Robot
50b6715f06
Merge pull request #4604 from aledbf/2353
Change default for proxy-add-original-uri-header
2019-09-25 07:28:00 -07:00
Manuel Alejandro de Brito Fontes
2bd8121338
Change default for proxy-add-original-uri-header 2019-09-25 10:57:31 -03:00
Yuansheng
e4571fdeef optimize: local cache global variable and reduce string object creation.
and some code style.
2019-09-25 09:43:11 -04:00
Kubernetes Prow Robot
ceddec4ea0
Merge pull request #4588 from multi-io/patch-1
tls user guide --default-ssl-certificate clarification
2019-09-25 06:14:00 -07:00
Kubernetes Prow Robot
182de47479
Merge pull request #4602 from ElvinEfendi/fix-clear-cert
fix bug with new and running configuration comparison
2019-09-25 05:44:00 -07:00
Elvin Efendi
fe2ea692a6 adjust tests to the new no-reload on cert update world 2019-09-25 06:59:47 -04:00
Elvin Efendi
d8a3d616b4 fix bug with new and running configuration comparison 2019-09-25 06:33:59 -04:00
Kubernetes Prow Robot
113f8d2931
Merge pull request #4601 from ElvinEfendi/hsts-refactoring
Hsts refactoring
2019-09-24 19:50:00 -07:00
Kubernetes Prow Robot
702faedaac
Merge pull request #4600 from aledbf/update-image
Update nginx image
2019-09-24 18:33:59 -07:00
Elvin Efendi
73e659f5fc improve certificate configuration detection per request 2019-09-24 21:17:22 -04:00
Elvin Efendi
c5a8357f1d handle hsts header injection in lua 2019-09-24 21:17:22 -04:00
Manuel Alejandro de Brito Fontes
361f3da4d5
Update nginx image 2019-09-24 21:19:48 -03:00
Kubernetes Prow Robot
daf8634acf
Merge pull request #4595 from aledbf/nginx-update
Rollback change of ModSecurity setting SecAuditLog
2019-09-24 17:05:59 -07:00
Kubernetes Prow Robot
a0a025ca8a
Merge pull request #4598 from ElvinEfendi/simplify-conf
delete redundant config
2019-09-24 16:39:59 -07:00
Elvin Efendi
159dfc5fc3 make a note for clarity 2019-09-24 19:16:36 -04:00
Elvin Efendi
c93d384fb1 delete redundant config 2019-09-24 18:51:35 -04:00
Kubernetes Prow Robot
75490fa309
Merge pull request #4597 from Shopify/improve-tls-hsts-test
more meaningful assertion for tls hsts test
2019-09-24 13:55:58 -07:00
Kubernetes Prow Robot
14f9b0d64e
Merge pull request #4596 from Shopify/fix-auth-proxy-header-order
sort auth proxy headers from configmap
2019-09-24 13:29:26 -07:00
Kubernetes Prow Robot
56edbb941c
Merge pull request #4592 from ElvinEfendi/force-ssl-redirect-refactoring
refactor force ssl redirect logic
2019-09-24 13:03:29 -07:00
Elvin Efendi
799f0ae76d more meaningful assertion for tls hsts test 2019-09-24 15:39:20 -04:00
Elvin Efendi
d124dd5eee sort auth proxy headers from configmap 2019-09-24 15:19:49 -04:00
Elvin Efendi
8c64b12a96 refactor force ssl redirect logic 2019-09-24 14:57:52 -04:00
Kubernetes Prow Robot
73bc2cfc48
Merge pull request #4594 from Shopify/cleanup-certs
cleanup unused certificates
2019-09-24 11:51:29 -07:00
Elvin Efendi
e392c8a8af cleanup unused certificates 2019-09-24 14:16:03 -04:00
Manuel Alejandro de Brito Fontes
ea5add6f5c
Rollback change of ModSecurity setting SecAuditLog 2019-09-24 14:53:44 -03:00
Kubernetes Prow Robot
1dc4d184a0
Merge pull request #4550 from Shopify/upstream-auth-proxy-set-headers
Add support for configmap of headers for auth-url per ingress
2019-09-24 09:33:27 -07:00
Kubernetes Prow Robot
0f378154a0
Merge pull request #4591 from membphis/change/lua-code-style
optimize: local cache global variable and avoid single lines over 80
2019-09-24 07:55:29 -07:00
A Gardner
786a3b6862 Add support for configmap of headers to be sent to external auth service 2019-09-24 10:53:23 -04:00
Kubernetes Prow Robot
cb2889b87b
Merge pull request #4586 from aledbf/fix-reload
Fix reload when a configmap changes
2019-09-24 07:23:28 -07:00
Yuansheng
1ce68c8723 optimize: local cache global variable and avoid single lines over 80
characters.
2019-09-24 10:08:45 -04:00