Manuel Alejandro de Brito Fontes
d781d99797
Fixes for gosec
2020-12-04 20:29:07 -03:00
Manuel Alejandro de Brito Fontes
108637bb1c
Migrate to structured logging (klog)
2020-09-27 18:59:57 -03:00
Manuel Alejandro de Brito Fontes
cb86c5698c
Migrate to klog v2
2020-08-08 21:01:03 -04:00
Manuel Alejandro de Brito Fontes
23ed3ba4c4
Fix file permissions to support volumes
2019-08-15 20:48:37 -04:00
Manuel Alejandro de Brito Fontes
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
Manuel Alejandro de Brito Fontes
004d0c8214
Fix go imports
2019-06-30 18:58:18 -04:00
Manuel Alejandro de Brito Fontes
68f344233b
Fix lint issues
2018-12-05 13:28:28 -03:00
Manuel Alejandro de Brito Fontes
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
Fernando Diaz
10de8cac56
Log Errors Missing in Internal
...
Adds a few missing errors and fix formatting for others.
Fixes #3013
2018-08-30 15:02:42 -05:00
Manuel de Brito Fontes
7ded31d7a8
Create file permission constants
2018-06-12 11:06:14 -04:00
Manuel de Brito Fontes
79199dd84c
Run as user dropping privileges
2018-06-12 10:18:36 -04:00
Manuel de Brito Fontes
692ab5e53c
Remove go-bindata
2018-05-17 07:58:50 -04:00
Elvin Efendi
7ac4e1db30
fix bug with lua sticky session implementation and refactor balancer
2018-05-16 21:00:39 -04:00
Elvin Efendi
44ddd8abba
force backend sync when worker starts
2018-05-14 17:08:23 -04:00
Elvin Efendi
992a68de23
upstream-hash-by should override load-balance annotation
2018-05-10 13:47:19 -04:00
Elvin Efendi
6cb28e059c
use roundrobin from lua-resty-balancer library and refactor balancer.lua
2018-05-10 13:47:19 -04:00
Elvin Efendi
51cf184c51
always use x-request-id
2018-04-28 00:31:23 -04:00
Elvin Efendi
2ce9196ecf
upstream-hash-by annotation support for dynamic configuraton mode
2018-04-27 14:28:43 -04:00
JordanP
c995031ffd
Add annotation to enable rewrite logs in a location
2018-04-27 17:50:14 +02:00
Adam Netočný
89af4d68d2
make code-generator
2018-04-26 20:23:39 +02:00
Manuel de Brito Fontes
9bf553559c
Apply gometalinter suggestions
2018-04-25 18:53:49 -03:00
k8s-ci-robot
9533aa45cc
Merge pull request #2408 from Shopify/updated-buffered-backends
...
Read backends data even if buffered to temp file
2018-04-24 14:09:02 -07:00
Andrew Louis
d3d383d1cc
Endpoint Awareness: Read backends data from tmp file as well
...
Actually read from the file
Logs probably shouldn't assume knowledge of implementation detail
Typos
Added integration test, and dynamic update config refactor
Don't force the 8k default
Minimal test case to make the configuration/backends request body write to temp file
Leverage new safe config updating methods, and use 2 replicas instead of 4
Small refactor
Better integration test, addresses other feedback
Update bindata
2018-04-24 15:07:59 -04:00
Zenara Daley
0d0d33aec9
add balancer unit tests
2018-04-24 12:10:57 -04:00
Zenara Daley
4f9865529a
Add busted unit testing framework for lua code
2018-04-23 10:46:28 -04:00
Nick Novitski
8886b8a50e
Add vts-sum-key config flag
2018-04-17 11:39:32 -07:00
Giancarlo Rubio
c60ed24f4b
Detect if header injected request_id before creating one
2018-04-17 15:49:35 +02:00
Bastian Hofmann
1c17962ba0
Add proxy-add-original-uri-header config flag
...
This makes it configurable if a location adds an X-Original-Uri header to the backend request. Default is "true", the current behaviour.
2018-04-16 12:34:26 +02:00
k8s-ci-robot
8855460817
Merge pull request #2341 from Shopify/custom-sticky
...
Add session affinity to custom load balancing
2018-04-12 17:22:59 -07:00
Zenara Daley
4b11fe4d25
Fix nginx template
2018-04-12 15:43:13 -04:00
Zenara Daley
6ed256dde6
Add session affinity to custom load balancing
2018-04-12 14:21:42 -04:00
Zenara Daley
9198e2c14b
fix make verify-all failures
2018-04-12 14:14:43 -04:00
oilbeater
1be1f658b4
disable lua for arch s390x and ppc64le
...
LuaJIT is not available for s390x and ppc64le, disable the lua part in nginx.tmpl on these platform.
2018-04-12 08:30:56 +08:00
Elvin Efendi
d6eb44376d
run lua-resty-waf in different modes ( #2317 )
...
* run lua-resty-waf in different modes
* update docs
2018-04-09 09:19:13 -03:00
Elvin Efendi
bad8295a42
extra waf rules per ingress ( #2315 )
...
* extra waf rules per ingress
* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules
* regenerate internal/file/bindata.go
2018-04-09 07:14:30 -03:00
Elvin Efendi
16faf309ca
annotation to ignore given list of WAF rulesets ( #2314 )
2018-04-08 22:55:23 -03:00
Elvin Efendi
a6fe800a47
lua-resty-waf controller ( #2304 )
2018-04-08 17:37:13 -03:00
Manuel Alejandro de Brito Fontes
b17ed7b6fd
Configure upload limits for setup of lua load balancer ( #2309 )
2018-04-08 15:47:49 -03:00
Manuel Alejandro de Brito Fontes
1c65320618
Add verification of lua load balancer to health check ( #2308 )
2018-04-08 15:24:37 -03:00
Manuel Alejandro de Brito Fontes
ab8349008a
Improve indentation of generated nginx.conf ( #2296 )
2018-04-05 18:19:30 -03:00
Manuel Alejandro de Brito Fontes
dd2bc91018
Fix HSTS without preload ( #2294 )
2018-04-04 23:17:51 -03:00
Alvaro Aleman
e7aa74b5d4
Add NoAuthLocations and default it to "/.well-known/acme-challenge" ( #2243 )
...
* Add NoAuthLocations and default it to "/.well-known/acme-challenge"
* Add e2e tests for no-auth-location
* Improve wording of no-auth-location tests
2018-04-01 21:02:34 -03:00
Elvin Efendi
931e541fb7
Fix bug when auth req is enabled(external authentication) ( #2280 )
...
* set proxy_upstream_name correctly when auth_req module is used
* log a more meaningful message when backend is not found
2018-03-30 14:19:33 -03:00
Manuel Alejandro de Brito Fontes
146db43794
Disable opentracing for nginx internal urls ( #2272 )
2018-03-29 13:47:13 -03:00
Oilbeater
c6c219a7d1
clean up tmpl ( #2263 )
...
The nginx.conf generated now is too messy remove some section only useful when dynamic configure enabled and headers only useful for https.
2018-03-29 09:36:00 -03:00
Sylvain Rabot
385368990c
Managing a whitelist for _/nginx_status ( #2187 )
...
Signed-off-by: Sylvain Rabot <s.rabot@lectra.com>
2018-03-28 09:27:34 -03:00
Zenara Daley
6e099c5f57
Add EWMA as configurable load balancing algorithm ( #2229 )
2018-03-23 12:06:21 -03:00
Oilbeater
0b0a274a9a
fix: cannot set $service_name if use rewrite ( #2220 )
...
$path here is the regular expression formatted nginx location not the origin path in ingress rules. Fix https://github.com/kubernetes/ingress-nginx/issues/2131
2018-03-22 09:43:45 -03:00
halfcrazy
b45ee8d85f
Add missing configuration in #2235 ( #2236 )
2018-03-22 08:53:29 -03:00
maxlaverse
8575769781
Make proxy_next_upstream_tries configurable ( #2232 )
...
* Make proxy_next_upstream_tries configurable
* Code generation
2018-03-22 08:12:36 -03:00