Commit graph

4213 commits

Author SHA1 Message Date
Kubernetes Prow Robot
a59451e5d1 Merge pull request #4160 from aledbf/fix-expire-metric
SSL expiration metrics cannot be tied to dynamic updates
2019-06-06 06:24:13 -07:00
Manuel Alejandro de Brito Fontes
f93670c2b2 SSL expiration metrics cannot be tied to dynamic updates 2019-06-05 11:04:27 -04:00
Manuel Alejandro de Brito Fontes
1dd5493404 Partially revert usage of kustomize for installation (#4159) 2019-06-05 10:59:38 -04:00
Kubernetes Prow Robot
185aa01505 Merge pull request #4153 from Niksko/use-regex-annotation
Add clarification on how to enable path matching
2019-06-04 19:05:53 -07:00
Nikolas Skoufis
d9e629d4da Add clarification on how to enable path matching
The fact that you need to explicitly add the annotation is easy to miss.
This makes this more explicit, while leaving the finer details to the
linked annotations document.
2019-06-05 11:14:50 +10:00
Manuel Alejandro de Brito Fontes
1962f02dae Update nginx (#4150)
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
Ionut Craciunescu
941863c26a update modsecurity to latest, libmodsecurity to v3.0.3 and owasp-scrs to v3.1.0 (#4140) 2019-06-04 12:13:40 -04:00
Kubernetes Prow Robot
6ba422aa46 Merge pull request #4135 from nicknovitski/deployment-api-appsv1
Use apps/v1 api group in e2e tests
2019-05-29 16:50:18 -07:00
Kubernetes Prow Robot
67aea883f5 Merge pull request #4133 from nicknovitski/parallel-psp-e2e-test
Run PodSecurityPolicy E2E test in parallel
2019-05-29 16:18:20 -07:00
Kubernetes Prow Robot
cc92e915d3 Merge pull request #4132 from zhucebuliaolongchuan/patch-1
Update README.md for external-auth Test 4
2019-05-29 14:40:22 -07:00
Nick Novitski
b0139b0b63 Run PodSecurityPolicy E2E test in parallel
Previously, this test modified a ClusterRole used by _every_ test.  It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.

Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
2019-05-29 14:13:04 -07:00
Nick Novitski
f186437cc1 Use apps/v1 api group in e2e tests 2019-05-29 12:12:45 -07:00
Chuan Long
782b56a5e6 Update README.md for external-auth Test 4
Title for Test 4 should be `secure service with valid auth header`. The current one is the same as Test 3.
2019-05-29 13:23:20 -05:00
Sergio Morales
d545251835 feature(collectors): Added services to collectorLabels and requests Countervec to capture the name of the kubernetes service used to serve the client request. 2019-05-27 11:19:42 -04:00
Kubernetes Prow Robot
a41710f201 Merge pull request #4101 from aledbf/reftactor-whitelist
Refactor whitelist from map to standard allow directives
2019-05-27 05:33:51 -07:00
Manuel Alejandro de Brito Fontes
1a6ea8c813 Refactor e2e test 2019-05-27 06:31:01 -04:00
Eugene Fedunin
4bb44f42a8 Added support for annotation session-cookie-change-on-failure
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.

Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
Manuel Alejandro de Brito Fontes
7d91eafcca Refactor whitelist from map to standard allow directives 2019-05-27 04:55:38 -04:00
Kubernetes Prow Robot
c13b8f39b8 Merge pull request #3803 from ElvinEfendi/use-table-nkeys
use nkeys for counting lua table elements
2019-05-27 01:41:51 -07:00
Elvin Efendi
6980708356 use nkeys for counting lua table elements 2019-05-26 18:15:15 -04:00
Kubernetes Prow Robot
921d294900 Merge pull request #4123 from aledbf/update-nginx
Update nginx image to 0.86
2019-05-26 10:07:49 -07:00
Kubernetes Prow Robot
94654e77ec Merge pull request #4122 from ElvinEfendi/update-nginx-and-dependencies
Update Nginx to 1.17.0 and upgrade some other modules
2019-05-26 09:03:48 -07:00
Manuel Alejandro de Brito Fontes
7af952c5f2 Update nginx image to 0.86 2019-05-26 11:28:35 -04:00
Elvin Efendi
95d5b04148 updated nginx and some other modules 2019-05-26 09:09:57 -04:00
Kubernetes Prow Robot
a18118c88b Merge pull request #4109 from aledbf/use-real-server
Use real apiserver
2019-05-26 04:47:50 -07:00
Kubernetes Prow Robot
1534c8196a Merge pull request #4120 from ElvinEfendi/lua-balancer-logging
log info when endpoints change for a balancer
2019-05-26 01:17:50 -07:00
Elvin Efendi
dbfc659b11 log info when endpoints change for a balancer 2019-05-25 23:50:18 -04:00
Kubernetes Prow Robot
c98cd52ad5 Merge pull request #4055 from nicknovitski/kustomize
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
Kubernetes Prow Robot
0fceaa87f8 Merge pull request #4113 from Shopify/goos-linux
Force GOOS to linux
2019-05-24 09:00:22 -07:00
Maxime Ginters
96a069a093 Force GOOS to linux 2019-05-24 10:33:16 -04:00
Manuel Alejandro de Brito Fontes
229d747a37 Update e2e images (#4110) 2019-05-24 02:47:14 +02:00
Kubernetes Prow Robot
8c50396e86 Merge pull request #4108 from aledbf/fix-flake
Add retry to  LookupHost used to check the content of ExternalName
2019-05-23 06:34:28 -07:00
Manuel Alejandro de Brito Fontes
5870e6ccbf Add retry to LookupHost used to check the content of ExternalName 2019-05-23 05:07:25 -04:00
Manuel Alejandro de Brito Fontes
572bcc4256 Update go dependencies 2019-05-23 04:58:14 -04:00
Manuel Alejandro de Brito Fontes
f05d90917a Use a real apiserver to test the store 2019-05-23 04:58:14 -04:00
Kubernetes Prow Robot
a911e82856 Merge pull request #4102 from aledbf/listingresses
Refactor ListIngresses to add filters
2019-05-22 06:48:14 -07:00
Kubernetes Prow Robot
6b4889f31f Merge pull request #4100 from aledbf/remove-stop
Remove stop controller endpoint
2019-05-22 06:10:13 -07:00
Manuel Alejandro de Brito Fontes
03ce697c53 Refactor ListIngresses to add filters 2019-05-22 05:37:44 -04:00
Kubernetes Prow Robot
cee53c1c3f Merge pull request #4107 from MMeent/patch-1
Clear up some inconsistent / unclear wording
2019-05-21 07:00:54 -07:00
MMeent
21b6dac15c Clear up some inconsistent / unclear wording
IPv6 enabled/disabled working was confusing or contradicting itself. This updates the wording to what is expected, based on the default values in the table above, and the behaviour that I could find in code.
2019-05-21 15:27:58 +02:00
Kubernetes Prow Robot
da937a8dc6 Merge pull request #4105 from reynaldiwijaya/master
UPT: Add variable to define custom sampler host and port
2019-05-21 05:56:45 -07:00
reynaldi.wijaya
7bb649f99a UPT: Opentracing configmap documentation 2019-05-21 18:14:33 +08:00
reynaldi.wijaya
b5154699fd UPT: Modify configmap to include jaeger sampler host and jaeger sampler port 2019-05-21 17:54:29 +08:00
reynaldi.wijaya
e6b3ee1c8c UPT: Add variable to define custom sampler host and port, add commituser 2019-05-21 12:34:38 +08:00
Nick Novitski
702101098c Rearrange deployment files into kustomizations 2019-05-19 12:35:54 -07:00
Kubernetes Prow Robot
644b09ca26 Merge pull request #4091 from weltschraet/modsecurity-memory
reduce memory footprint and cpu usage when modsecurity and owasp rule…
2019-05-19 06:27:11 -07:00
weltschraet
41e8402d8d reduce memory footprint and cpu usage when modsecurity and owasp rules are enabled globally 2019-05-18 19:08:30 +02:00
Kubernetes Prow Robot
8a67e669a7 Merge pull request #4089 from alanjcastonguay/docs/use-gzip-configmap-defaults
Docs: configmap: use-gzip
2019-05-18 04:09:14 -07:00
Kubernetes Prow Robot
3761c12fd3 Merge pull request #4098 from kevinsimper/patch-1
Update configmap about adding custom locations
2019-05-18 03:39:12 -07:00
Kubernetes Prow Robot
c3ed96243b Merge pull request #4099 from kppullin/patch-1
Docs - Update capture group `placeholder`
2019-05-18 03:09:13 -07:00