Commit graph

6242 commits

Author SHA1 Message Date
gi mbu
a13305185a
generating SHA for CA only certs in backend_ssl.go + comparision of ProxySSL structures in types_equals.go (#8098) 2022-01-09 14:06:00 -03:00
Carlos Tadeu Panato Junior
4dda149ed0
chart/ghaction: set the correct permission to have access to push a release (#8115)
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2022-01-08 09:18:19 -08:00
Ricardo Katz
17b6c99a05
Fix helm releaser GH Token 2022-01-08 11:17:44 -03:00
Scott Crooks
71de8e1a23
docs(charts): using helm-docs for chart (#8061)
This enables the use of the `helm-docs` tool on the Helm chart located in `charts/ingress-nginx`. This will make it possible to automatically document new variables in the `values.yaml` file.

Signed-off-by: Scott Crooks <scott.crooks@gmail.com>
2022-01-08 02:53:04 -08:00
Wei Wu
e625c2507a
Fix chashsubset backend with canary (#7235)
* Fix chashsubset backend with canary

* use floor for buckets calculation to remove hot spot

* Remove testing code
2021-12-29 16:14:50 -08:00
Tomáš Mózes
a14edba8d5
Expose GeoIP2 Continent code as variable (#8072) 2021-12-29 16:02:50 -08:00
nasa9084
1bd083276d
set edit_uri value with main branch (#8088) 2021-12-29 09:21:36 -08:00
agile6v
452515ca2f
doc: improvement (#7996) 2021-12-23 13:54:30 -08:00
Bhumij Gupta
6d4c51c31f
Added docs for --ingress-class-by-name flag in the cli arguments page (#7624)
* Added docs for --ingress-class-by-name flag in the cli arguments page

Signed-off-by: bhumijgupta <bhumijgupta@gmail.com>

* Updated docs to match the flag description in code

Signed-off-by: bhumijgupta <bhumijgupta@gmail.com>
2021-12-23 13:32:30 -08:00
learn0208
8e9bf7f62c
fix custom-error-pages file not exist (#7728) 2021-12-23 13:28:29 -08:00
dependabot[bot]
66c5793af3
Bump google.golang.org/grpc from 1.41.0 to 1.43.0 (#8054)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.41.0 to 1.43.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.41.0...v1.43.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-23 13:20:29 -08:00
ZxYuan
362c97bd09
Remove force sync / 30s for non-external backends (#7958) 2021-12-23 12:08:30 -08:00
Josh Soref
079d0cd415
Report expired certificates (#8045) (#8046)
Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
2021-12-23 12:02:29 -08:00
Noelle Leigh
d6284d1672
docs: fix typo'd executible name (#8041)
In "Checking ingress controller version", the paragraph cites the incorrect name for the executable (the one in the code block is correct).
This commit fixes that inconsistency.
2021-12-23 16:50:10 -03:00
dependabot[bot]
d5fd674313
Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#8058)
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/spf13/cobra/compare/v1.2.1...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-23 11:48:29 -08:00
Tobias Salzmann
ce9deaa332
Add stream-snippet as a ConfigMap and Annotation option (#8029)
* stream snippet

* gofmt -s
2021-12-23 11:46:30 -08:00
Noah Ispas
cf6ea08739
align bug report with feature request regarding kind documentation (#8051) 2021-12-23 11:40:30 -08:00
Moh Basher
fea7fed6da
Disable default modsecurity_rules_file if modsecurity-snippet is specified (#8021)
* Disabled default modsecurity_rules_file if modsecurity-snippet is specifed

The default modsecurity_rules_file overwrites the ModSecurity-snippet if it is specified with custom config settings like "SecRuleEngine On". This will not let Modsecurity be in blocking mode even if "SecRuleEngine On" is specified in the ModSecurity-snippet configuration

* Remove unnecessary comments

Only have the default Modsecurity conf settings in case Modsecurity configuration snippet is not present and remove unnecessary comments

* Fixed modsecurity default file only if Modsecurity snippet present

Fixed if condition  Modsecurity snippet present have modsecurity default config file

* Added e2e test to disabling modsecurity conf

Added e2e in case modsecurity-snippet enabled to disable settings in default modsecurity.conf

* Validate writing to a different location

Validate also modsecurity to write to a different location instead of the default directory

* Fixed the formatting

* Fixed if empty ModsecuritySnippet

* Fixed ModsecuritySnippet condition

* Fixed the condition also in ingress controller template

* Removed the default config condition  in ingress controller template

* Fixed the default config condition in ingress controller template

* Fixed pull-ingress-nginx-test

* Revert "Fixed the default config condition in ingress controller template"

This reverts commit 9d38eca40f.

* Revert template_test

* Adjusted the formating %v
2021-12-23 03:34:38 -08:00
Mani Kanth
2ff5af08d4
docs_multiple_instances_one_cluster_ticket_7543 (#8042) 2021-12-22 02:53:35 -08:00
James Strong
13e711bddd
remove 109 check till gosec resolves issues (#8044) 2021-12-15 09:51:51 -08:00
Ricardo Katz
7bae2e7321
Comment busy owners (#8035)
* Cleanup owners files

* Cleanup owners files
2021-12-15 11:38:27 -03:00
dmitry-j-mikhin
8ccec84496
fix nginx compilation flags (#8023)
* use '-O2' instead of '-Og'
  '-O2' produce production optimized binary while '-Og' is used mostly
  for debugging
* use '-mtune=generic' instead of '-mtune=native'
  '-mtune=native' produce optimal code for builder host system, but it
  can be sub-optimal for execution host system
2021-12-12 05:25:58 -08:00
Tim Bannister
ec21629b81
Revise main documentation page (#8019)
- Revise to be more in line with the style guide for Kubernetes official docs
- Avoid recommending that readers use `k8s.io` namespaced controller names
  for their own custom controller configuration.

Co-authored-by: James Strong <strong.james.e@gmail.com>

Co-authored-by: James Strong <strong.james.e@gmail.com>
2021-12-12 05:21:58 -08:00
Aaron Crickenberger
a9029d2bc7
images: use k8s-staging-test-infra/gcb-docker-gcloud (#7999) 2021-12-12 05:19:59 -08:00
Alex Sears
84db822a94
Add newline indenting to admission webhook annotations (#8015)
Signed-off-by: Alex Sears <me@alexsears.com>
2021-12-07 11:26:37 -08:00
Yecheng Fu
5cff197bc5
add canary-weight-total annotation (#6338) 2021-12-07 08:40:00 -08:00
Ana Claudia Riekstin
6163231ef6
fix to really execute plugins in order (#8018) 2021-12-07 08:01:02 -08:00
Jennifer Kirsch
3f9d443b1e
Add link to example error page manifest (#8014)
Without this change it was a bit difficult to find the manifest so users might not know that there is one.
2021-12-06 12:01:33 -08:00
Daniel Sim
f7a5704be8
Add relabelings in controller-servicemonitor.yaml (#8008)
* Add relabelings above metricRelabelings in controller-servicemonitor.yaml

* Bump chart version to 4.0.13, Add to CHANGELOG

* Rename PR/CHANGELOG
2021-12-06 05:50:32 -08:00
Jedidiah Park
2b499d9c86
Fix spelling in documentation and top-level files (#8009)
* fix typos in docs

* fix typos in top-level files
2021-12-06 05:46:33 -08:00
Jérôme Petazzoni
bc4c86a791
Minor improvements (formatting, consistency) in install guide (#8003)
Small changes, mostly:
- formatting (especially in lists, since mkdocs doesn't seem
  to support nested lists)
- use the same level of warning when it makes sense
  (intead of "danger", "failure", etc)
- improve wording in a few places
- re-order a few operations
- move a few sentences that were out of place
2021-12-03 20:28:31 -08:00
Jintao Zhang
e621c6e973
fix: go-grpc Dockerfile (#8001)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2021-11-30 17:35:18 -08:00
Ansil H
a03895d91e
Add ssl_reject_handshake to defaul server (#7977)
* Add ssl_reject_handshake to defaul server

* Added SSLRejectHandshake to NewDefault

* Added documentation
2021-11-29 08:33:23 -08:00
Alex Co
ea1099abc9
allow set annotations for admission Jobs (#7979)
* allow set annotations for admission Jobs

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Bump chart version & update CHANGELOG

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Bump chart version again

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Add example

Signed-off-by: Alex Co <tuanclq@gmail.com>
2021-11-29 03:33:22 -08:00
Masa
27037a1919
Fix command in index.md (#7935)
* Fix command in index.md

* Fix command in index.md

* Update index.md
2021-11-28 18:39:22 -08:00
Kamil Hristov
042e426b01
Improve admission e2e-tests (#7953)
Check if the message equals an expected value for checks without errors.
2021-11-28 18:33:22 -08:00
Reinhard Nägele
e9c297e74d
Fix names in documentation (#7940)
* Fix names in documentation

This fixes the documentation to reflect the name change from
`nginx-ingress` to `ingress-nginx`.

Signed-off-by: Reinhard Nägele <unguiculus@gmail.com>

* Revert accidental changelog update

Signed-off-by: Reinhard Nägele <unguiculus@gmail.com>
2021-11-28 13:11:22 -08:00
TJ Saunders
b615a6808d
Fix a couple of misspellings in the annotations documentation. (#7983) 2021-11-27 16:31:21 -08:00
Anton Holovin
5a5bff1fb9
Making Kube service appProtocol field optional (#7873) 2021-11-26 02:36:52 -08:00
James Strong
cabc6ec144
Merge pull request #7975 from kubernetes/strongjz-patch-3
add legacy version update v0.50.0 to main changelog
2021-11-24 15:28:57 -05:00
James Strong
51bc8725a4
add legacy version update v0.50.0
add legacy version update v0.50.0
2021-11-24 15:27:56 -05:00
Kundan Kumar
77a63c6855
updated service upstream definition (#7972) 2021-11-24 10:20:21 -08:00
Yang Li
0122aba44d
admission: improved log messages for ingress name (#7944) 2021-11-23 15:35:45 -08:00
Sven Schliesing
dbf3689c5e
add documentation for "force-ssl-redirect" (#7957)
See #4628
2021-11-23 15:27:45 -08:00
James Strong
843a16a8f8
Release updates for v1.1.0 (#7964) 2021-11-23 15:07:46 -08:00
James Strong
cacbee86b6
Merge pull request #7962 from kubernetes/strongjz-patch-2
Start Release process for v1.1.0
2021-11-23 16:31:12 -05:00
Ricardo Katz
c0814c6f78
Change sanitization message from error to warning (#7963)
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-11-23 18:25:20 -03:00
James Strong
46e044af07
Start Release process for v1.1.0
Start Release process for v1.1.0
2021-11-23 16:11:43 -05:00
James Strong
d4a6ade65f
update default block list,docs, tests (#7942)
* update default block list,docs, tests

* fix config for admin test

* gofmt

* remove the err return
2021-11-23 09:06:17 -08:00
Steve Griffith
e57d2f63fa
applied allowPrivilegeEscalation=false (#7948) 2021-11-20 12:52:59 -08:00