Commit graph

2521 commits

Author SHA1 Message Date
AdamDang
97ca2b8502 Correct some info in flags.go
Correct some info in flags.go
2018-04-15 23:49:00 +08:00
k8s-ci-robot
087d93d1fa Merge pull request #2348 from FGRibreau/patch-1
Use same convention, curl + kubectl for GKE
2018-04-14 06:44:59 -07:00
Francois-Guillaume Ribreau
ddc2bc0a33 Use same convention, curl + kubectl for GKE 2018-04-14 10:45:31 +02:00
k8s-ci-robot
6aa0929226 Merge pull request #2347 from aledbf/update-owners
Update owners
2018-04-13 16:43:59 -07:00
Manuel de Brito Fontes
4b499dfe60 Update owners 2018-04-13 20:08:13 -03:00
k8s-ci-robot
b7484f3f2e Merge pull request #2344 from aledbf/xss-base-tag
Escape variables in add-base-url annotation
2018-04-13 10:11:00 -07:00
k8s-ci-robot
bbf9471ec7 Merge pull request #2342 from antoineco/object-ref-map
Sync SSL certificates on events
2018-04-13 08:32:00 -07:00
Antoine Cotten
f64ad17035 Add test for channel events with referenced secret 2018-04-13 16:36:52 +02:00
Antoine Cotten
3d57778fa2 Include missing secrets in secretIngressMap
Update secretIngressMap independently from stored annotations, which may
miss some secret references.
2018-04-13 16:14:36 +02:00
Antoine Cotten
be03ccee6b Sync secrets (SSL certificates) on events
Remove scheduled check for missing secrets.
2018-04-13 16:14:29 +02:00
k8s-ci-robot
7f55391050 Merge pull request #2341 from Shopify/custom-sticky
Add session affinity to custom load balancing
2018-04-12 17:22:59 -07:00
Zenara Daley
81de91f537 Fixed tests 2018-04-12 19:44:09 -04:00
k8s-ci-robot
9012554ec6 Merge pull request #2340 from Shopify/sticky-upstream-name
Fix buildupstream name to work with dynamic session affinity
2018-04-12 13:09:54 -07:00
Zenara Daley
4e47f889c9 Fix nginx template 2018-04-12 15:43:13 -04:00
Zenara Daley
c5fb73972c Add session affinity to custom load balancing 2018-04-12 14:21:42 -04:00
Zenara Daley
abb55e1105 fix make verify-all failures 2018-04-12 14:14:43 -04:00
Zenara Daley
5f3e34e552 Fix buildupstream name to work with dynamic session affinity 2018-04-12 14:01:46 -04:00
k8s-ci-robot
425b4b777b Merge pull request #2333 from oilbeater/fix/disable-lua
disable lua for arch s390x and ppc64le
2018-04-12 05:46:58 -07:00
oilbeater
27c177a694 disable lua for arch s390x and ppc64le
LuaJIT is not available for s390x and ppc64le, disable the lua part in nginx.tmpl on these platform.
2018-04-12 08:30:56 +08:00
Oilbeater
1b851087cf fix nil pointer when ssl with ca.crt (#2331) 2018-04-11 09:30:16 -03:00
Manuel Alejandro de Brito Fontes
3f79f27b65 Update nginx image (#2328)
* Update nginx image

* Update minikube start script
2018-04-10 19:52:58 -03:00
Manuel Alejandro de Brito Fontes
aaa01e5761 Update nginx to 1.13.12 (#2327) 2018-04-10 19:09:41 -03:00
Manuel Alejandro de Brito Fontes
732ae126fd Fix survey link (#2321) 2018-04-09 14:33:30 -03:00
Manuel Alejandro de Brito Fontes
45f61771ee Add ingress-nginx survey (#2319) 2018-04-09 14:24:27 -03:00
Elvin Efendi
8b8ba2e42e run lua-resty-waf in different modes (#2317)
* run lua-resty-waf in different modes

* update docs
2018-04-09 09:19:13 -03:00
Elvin Efendi
e6c6952629 extra waf rules per ingress (#2315)
* extra waf rules per ingress

* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules

* regenerate internal/file/bindata.go
2018-04-09 07:14:30 -03:00
Elvin Efendi
389cc50e6b annotation to ignore given list of WAF rulesets (#2314) 2018-04-08 22:55:23 -03:00
Elvin Efendi
d7c5873232 lua-resty-waf controller (#2304) 2018-04-08 17:37:13 -03:00
Manuel Alejandro de Brito Fontes
307f478662 Configure upload limits for setup of lua load balancer (#2309) 2018-04-08 15:47:49 -03:00
Manuel Alejandro de Brito Fontes
c9d4ebb9d2 Add verification of lua load balancer to health check (#2308) 2018-04-08 15:24:37 -03:00
Manuel Alejandro de Brito Fontes
937659f031 Disable lua waf where luajit is not available (#2306) 2018-04-07 15:27:10 -03:00
Manuel Alejandro de Brito Fontes
1c3c0cd4ae Fix issues building nginx image in different platforms (#2305) 2018-04-07 10:02:16 -03:00
Elvin Efendi
ca33465041 include the rest of lua-resty-waf dependencies (#2303) 2018-04-07 07:49:21 -03:00
Elvin Efendi
155dcf4cab include lua-resty-waf and its dependencies in the base Nginx image (#2301)
* install lua-resty-waf

* bump version

* include Kubernetes header
2018-04-06 18:08:25 -03:00
Manuel Alejandro de Brito Fontes
3754f09ac8 Fix race condition when Ingress does not contains a secret (#2300) 2018-04-06 17:44:41 -03:00
Manuel de Brito Fontes
188240d1b7 Escape variables in add-base-url annotation 2018-04-05 20:45:49 -03:00
Manuel Alejandro de Brito Fontes
d20c63d09a Improve indentation of generated nginx.conf (#2296) 2018-04-05 18:19:30 -03:00
Manuel Alejandro de Brito Fontes
19c6b3bdc4 Disable dynamic configuration in s390x and ppc64le (#2298) 2018-04-05 17:37:21 -03:00
Manuel Alejandro de Brito Fontes
cfb1e45729 Fix HSTS without preload (#2294) 2018-04-04 23:17:51 -03:00
Manuel Alejandro de Brito Fontes
f13cfe6152 Update nginx to 1.13.11 (#2290) 2018-04-04 12:18:17 -03:00
Manuel Alejandro de Brito Fontes
8a4f93dca2 Fix custom-error-pages image publication script (#2289) 2018-04-03 15:09:34 -03:00
Sergey Lanzman
35a1abfbb0 Update controller.go (#2285) 2018-04-02 20:16:06 -03:00
Alvaro Aleman
a93ffd2618 Add NoAuthLocations and default it to "/.well-known/acme-challenge" (#2243)
* Add NoAuthLocations and default it to "/.well-known/acme-challenge"

* Add e2e tests for no-auth-location

* Improve wording of no-auth-location tests
2018-04-01 21:02:34 -03:00
Alvaro Aleman
a3a6f48ccd Fix flaky e2e tests by always waiting after redeploying the ingress controller (#2283) 2018-04-01 20:37:27 -03:00
Elvin Efendi
49a77f157e e2e tests for dynamic configuration and Lua features and a bug fix (#2254)
* e2e tests for dynamic configuration and Lua features

* do not rely on force reload to dynamically configure when reload is needed

* fix misspelling

* skip dynamic configuration in the first template rendering

* dont error on first sync
2018-04-01 17:09:27 -03:00
Manuel Alejandro de Brito Fontes
b3f29c62e7 Fix nlb instructions (#2282) 2018-03-30 14:24:11 -03:00
Elvin Efendi
7cee1d3f3a Fix bug when auth req is enabled(external authentication) (#2280)
* set proxy_upstream_name correctly when auth_req module is used

* log a more meaningful message when backend is not found
2018-03-30 14:19:33 -03:00
AdamDang
6cd482d9dc Update README.md (#2276)
Small typo fix .
2018-03-30 08:00:43 -03:00
Manuel Alejandro de Brito Fontes
937abe6d30 Update go to 1.10.1 (#2273) 2018-03-29 14:04:59 -03:00
AdamDang
1cf69b0337 Typo fixes in modsecurity.md (#2274)
* Update modsecurity.md

Some typo fixes

* Update modsecurity.md
2018-03-29 13:48:16 -03:00