Manuel de Brito Fontes
a091d3ede7
Remove lua and use fastcgi to render errors
2017-08-05 16:29:58 -04:00
Manuel Alejandro de Brito Fontes
1045e432c7
Merge pull request #1043 from antoineco/ep-targetref
...
Return reference to object providing Endpoint
2017-08-02 19:56:22 -04:00
Manuel de Brito Fontes
98a95282f9
Add field FileSHA in BasicDigest struct
2017-07-31 22:08:09 -04:00
Antoine Cotten
6035e55ec3
Return reference to object providing Endpoint
2017-07-29 15:27:56 +02:00
Manuel de Brito Fontes
fe1b913f21
Add function to allow custom values in Ingress status
2017-07-28 20:26:35 -04:00
Manuel de Brito Fontes
facf8f0f6f
Alternative syncSecret approach #1030
2017-07-27 22:17:22 -04:00
Joao Morais
4453a06caa
Change missing secret name log level to V(3)
2017-07-27 13:57:34 -03:00
Manuel Alejandro de Brito Fontes
ce5e3999ab
Merge pull request #1027 from aledbf/doc-equals
...
Lint code
2017-07-27 10:39:41 -04:00
Manuel de Brito Fontes
681ca36b1c
Lint code
2017-07-26 23:07:59 -04:00
Manuel de Brito Fontes
dbe1880f60
Fix random watch errors
2017-07-26 22:31:34 -04:00
Minhan Xia
ee3054dd52
adapt gce controller to godep updates
2017-07-25 17:09:27 -07:00
Manuel de Brito Fontes
4fb61c73d1
Update go dependencies
2017-07-20 10:43:09 -07:00
Manuel de Brito Fontes
7f2b68b7df
Update generic controller
2017-07-20 10:43:09 -07:00
Manuel Alejandro de Brito Fontes
fbb96f4c83
Merge pull request #981 from chrismoos/service_upstream
...
Add annotation to allow use of service ClusterIP for NGINX upstream.
2017-07-19 12:20:30 -04:00
Manuel Alejandro de Brito Fontes
e59ac13eba
Merge pull request #991 from aledbf/ssl-refactoring
...
Remove secret sync loop
2017-07-19 12:19:36 -04:00
Chris Moos
666bcca495
Add annotation to allow use of service ClusterIP for NGINX upstream.
2017-07-19 16:02:04 +02:00
Manuel de Brito Fontes
5a1f845593
Remove secret sync loop
2017-07-18 22:54:32 -04:00
Manuel de Brito Fontes
bd621359ac
Check errors generating pem files
2017-07-18 16:26:28 -04:00
Joao Morais
8c3bb17f56
Add sort-backends command line option
2017-07-16 11:00:02 -03:00
Manuel Alejandro de Brito Fontes
a6f7c93245
Merge pull request #973 from stibi/945-nginx-no-reload
...
check number of servers in configuration comparator
2017-07-15 13:43:58 -04:00
Martin Stiborsky
299d4c373c
check number of servers in configuration comparator
2017-07-15 17:40:28 +02:00
Manuel Alejandro de Brito Fontes
438a2fa70b
Merge pull request #967 from claytononeill/runningaddresses-typo
...
Fix runningAddresses typo
2017-07-14 11:01:29 -04:00
Clayton O'Neill
fb42b9979d
Fix runningAddresses typo
2017-07-14 10:33:33 -04:00
Clayton O'Neill
ad583c3acb
Fix error checking for pod name & NS
...
Previously it would just check if POD_NAME *or* POD_NAMESPACE was set, which
could lead to very bizarre failure modes.
2017-07-14 09:26:50 -04:00
Manuel de Brito Fontes
14a02d128c
Simplify handling of ssl certificates
2017-07-12 15:29:03 -04:00
Manuel de Brito Fontes
6a4679b028
Add support for proxy protocol in TCP services
2017-07-02 17:09:09 -04:00
Manuel Alejandro de Brito Fontes
9af4fb573e
Merge pull request #906 from aledbf/fix-race-condition
...
Fix race condition with closed channels
2017-06-28 14:47:57 -04:00
Gorka Lerchundi Osa
5503e8d0e9
nginx/proxy: allow specifying next upstream behaviour
2017-06-27 23:30:43 +02:00
Manuel de Brito Fontes
8e8277f1a4
Fix race condition with closed channels
2017-06-26 13:16:53 -04:00
Manuel de Brito Fontes
67e0e0b920
Fix nginx sticky sessions
2017-06-25 21:30:30 -04:00
Manuel de Brito Fontes
3b903c5913
Always reload after a change in the configuration
2017-06-25 18:12:07 -04:00
Manuel Alejandro de Brito Fontes
312c9ec7e2
Merge pull request #871 from aledbf/fix-sticky
...
Add feature to allow sticky sessions per location
2017-06-23 13:22:12 -04:00
Manuel de Brito Fontes
83d03a19a6
Add feature to allow sticky sessions per location
2017-06-22 14:12:57 -04:00
Manuel de Brito Fontes
4ee2bdc302
Add support for SubjectAltName in SSL certificates
2017-06-20 19:47:06 -04:00
Manuel de Brito Fontes
05a976f9e5
Add flag to skip the update of Ingress status on shutdown
2017-06-20 09:47:18 -04:00
Manuel de Brito Fontes
92eeb7828b
Implement Equaler
2017-06-15 00:17:54 -04:00
Manuel de Brito Fontes
75a4a61254
WIP: Avoid reloads implementing Equals in structs
2017-06-14 23:58:31 -04:00
Manuel de Brito Fontes
45c77a951d
Code linting
2017-06-14 19:49:35 -04:00
Manuel de Brito Fontes
aa8c66ec01
Remove dead code
2017-06-14 19:42:13 -04:00
Manuel Alejandro de Brito Fontes
bd1429ddac
Merge pull request #855 from aledbf/lint
...
Lint code
2017-06-13 11:31:32 -04:00
Giancarlo Rubio
b4c8a66b1f
Don't expose certificate metrics for default server
...
The default server has a self signed certificate so it's not important to monitor
2017-06-13 16:01:05 +02:00
Fabian Ruff
8304feb497
ensure private key and certificate match
...
Adding an ingress tls secret with a non matching certificate and private key break at least the nginx-controller permanently until the offending secret is deleted.
In that case nginx refuses to start/reload with an error like this:
```
Error: exit status 1
2017/06/13 12:16:53 [emerg] 51#51: SSL_CTX_use_PrivateKey_file("/ingress-controller/ssl/monsoon3-tls-baremetal-3-eu-de-1-cloud-sap.pem") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
nginx: [emerg] SSL_CTX_use_PrivateKey_file("/ingress-controller/ssl/tls-baremetal-3-example-com.pem") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
nginx: configuration file /tmp/nginx-cfg728491545 test failed
```
2017-06-13 15:16:24 +02:00
Manuel de Brito Fontes
aacb7a5abb
Lint
2017-06-13 09:07:14 -04:00
Giancarlo Rubio
d9cf043552
Instrument nginx to expose metric "ssl certficate expiration time "
...
Add a console warning message 10 days before the certificate expire
2017-06-13 13:44:00 +02:00
Justin Santa Barbara
cacc7bc21e
Match ServicePort to Endpoints by Name
...
We can never match on the EndpointPort.Port; that is the container port.
2017-06-12 23:02:28 -04:00
Manuel de Brito Fontes
dca6de883c
Simplify controller interface
2017-06-11 15:56:30 -04:00
Joao Morais
6b54ae58ac
Create or delete ingress based on class annotation
2017-06-07 13:16:34 -03:00
Manuel Alejandro de Brito Fontes
3f0307a96e
Merge pull request #792 from aledbf/refactor-has-synced
...
Avoid checking if the controllers are synced
2017-05-29 20:38:30 -04:00
Manuel Alejandro de Brito Fontes
5f71bde601
Merge pull request #753 from jcmoraisjr/jm-secret-tracker
...
Move secretTracker updating to GetAuthCertificate()
2017-05-29 17:01:40 -04:00
Manuel de Brito Fontes
5472555186
Avoid checking if the controllers are synced
2017-05-29 12:22:30 -04:00
