Commit graph

7953 commits

Author SHA1 Message Date
oilbeater
1be1f658b4 disable lua for arch s390x and ppc64le
LuaJIT is not available for s390x and ppc64le, disable the lua part in nginx.tmpl on these platform.
2018-04-12 08:30:56 +08:00
Oilbeater
17f6996941 fix nil pointer when ssl with ca.crt (#2331) 2018-04-11 09:30:16 -03:00
Manuel Alejandro de Brito Fontes
156bc7a177
Update nginx image (#2328)
* Update nginx image

* Update minikube start script
2018-04-10 19:52:58 -03:00
Manuel Alejandro de Brito Fontes
22a2e9b426
Update nginx to 1.13.12 (#2327) 2018-04-10 19:09:41 -03:00
Manuel Alejandro de Brito Fontes
4c2b3643c2
Fix survey link (#2321) 2018-04-09 14:33:30 -03:00
Manuel Alejandro de Brito Fontes
aced54cb40
Add ingress-nginx survey (#2319) 2018-04-09 14:24:27 -03:00
Elvin Efendi
d6eb44376d run lua-resty-waf in different modes (#2317)
* run lua-resty-waf in different modes

* update docs
2018-04-09 09:19:13 -03:00
Elvin Efendi
bad8295a42 extra waf rules per ingress (#2315)
* extra waf rules per ingress

* document annotation nginx.ingress.kubernetes.io/lua-resty-waf-extra-rules

* regenerate internal/file/bindata.go
2018-04-09 07:14:30 -03:00
Elvin Efendi
16faf309ca annotation to ignore given list of WAF rulesets (#2314) 2018-04-08 22:55:23 -03:00
Elvin Efendi
a6fe800a47 lua-resty-waf controller (#2304) 2018-04-08 17:37:13 -03:00
Manuel Alejandro de Brito Fontes
b17ed7b6fd
Configure upload limits for setup of lua load balancer (#2309) 2018-04-08 15:47:49 -03:00
Manuel Alejandro de Brito Fontes
1c65320618
Add verification of lua load balancer to health check (#2308) 2018-04-08 15:24:37 -03:00
Manuel Alejandro de Brito Fontes
888b74b336
Disable lua waf where luajit is not available (#2306) 2018-04-07 15:27:10 -03:00
Manuel Alejandro de Brito Fontes
fd458df0a6
Fix issues building nginx image in different platforms (#2305) 2018-04-07 10:02:16 -03:00
Elvin Efendi
6987b3f667 include the rest of lua-resty-waf dependencies (#2303) 2018-04-07 07:49:21 -03:00
Elvin Efendi
82a6d4c2f5 include lua-resty-waf and its dependencies in the base Nginx image (#2301)
* install lua-resty-waf

* bump version

* include Kubernetes header
2018-04-06 18:08:25 -03:00
Manuel Alejandro de Brito Fontes
2a02b7c35c
Fix race condition when Ingress does not contains a secret (#2300) 2018-04-06 17:44:41 -03:00
Manuel de Brito Fontes
82b6c33c25
Escape variables in add-base-url annotation 2018-04-05 20:45:49 -03:00
Manuel Alejandro de Brito Fontes
ab8349008a
Improve indentation of generated nginx.conf (#2296) 2018-04-05 18:19:30 -03:00
Manuel Alejandro de Brito Fontes
ee30c55dfc
Disable dynamic configuration in s390x and ppc64le (#2298) 2018-04-05 17:37:21 -03:00
Manuel Alejandro de Brito Fontes
dd2bc91018
Fix HSTS without preload (#2294) 2018-04-04 23:17:51 -03:00
Manuel Alejandro de Brito Fontes
13d390ebb0
Update nginx to 1.13.11 (#2290) 2018-04-04 12:18:17 -03:00
Manuel Alejandro de Brito Fontes
e2937cc8f6
Fix custom-error-pages image publication script (#2289) 2018-04-03 15:09:34 -03:00
Sergey Lanzman
83974c32ac Update controller.go (#2285) 2018-04-02 20:16:06 -03:00
Alvaro Aleman
e7aa74b5d4 Add NoAuthLocations and default it to "/.well-known/acme-challenge" (#2243)
* Add NoAuthLocations and default it to "/.well-known/acme-challenge"

* Add e2e tests for no-auth-location

* Improve wording of no-auth-location tests
2018-04-01 21:02:34 -03:00
Alvaro Aleman
9b4d7f28d0 Fix flaky e2e tests by always waiting after redeploying the ingress controller (#2283) 2018-04-01 20:37:27 -03:00
Elvin Efendi
ee46f486c7 e2e tests for dynamic configuration and Lua features and a bug fix (#2254)
* e2e tests for dynamic configuration and Lua features

* do not rely on force reload to dynamically configure when reload is needed

* fix misspelling

* skip dynamic configuration in the first template rendering

* dont error on first sync
2018-04-01 17:09:27 -03:00
Manuel Alejandro de Brito Fontes
e761191011
Fix nlb instructions (#2282) 2018-03-30 14:24:11 -03:00
Elvin Efendi
931e541fb7 Fix bug when auth req is enabled(external authentication) (#2280)
* set proxy_upstream_name correctly when auth_req module is used

* log a more meaningful message when backend is not found
2018-03-30 14:19:33 -03:00
AdamDang
bcb162ac0f Update README.md (#2276)
Small typo fix .
2018-03-30 08:00:43 -03:00
Manuel Alejandro de Brito Fontes
46a97a44c1
Update go to 1.10.1 (#2273) 2018-03-29 14:04:59 -03:00
AdamDang
660e67dc9e Typo fixes in modsecurity.md (#2274)
* Update modsecurity.md

Some typo fixes

* Update modsecurity.md
2018-03-29 13:48:16 -03:00
Manuel Alejandro de Brito Fontes
146db43794
Disable opentracing for nginx internal urls (#2272) 2018-03-29 13:47:13 -03:00
Oilbeater
c6c219a7d1 clean up tmpl (#2263)
The nginx.conf generated now is too messy remove some section only useful when dynamic configure enabled and headers only useful for https.
2018-03-29 09:36:00 -03:00
Antoine Cotten
b09ecf790b Use SharedIndexInformers in place of Informers (#2271) 2018-03-29 09:35:01 -03:00
Manuel Alejandro de Brito Fontes
5738ddbdb5
Revert deleted assignment in #2146 (#2270) 2018-03-28 20:33:03 -03:00
Sylvain Rabot
385368990c Managing a whitelist for _/nginx_status (#2187)
Signed-off-by: Sylvain Rabot <s.rabot@lectra.com>
2018-03-28 09:27:34 -03:00
AdamDang
6bc4dad38a Update README.md (#2267)
It should be "your Ingress targets" in line 7.
2018-03-27 12:50:26 -03:00
AdamDang
5c016bee87 Update annotations.md (#2255)
a typo fix
2018-03-25 12:55:30 -03:00
Manuel Alejandro de Brito Fontes
cd9624584d
Add deployment docs for AWS NLB (#1785) 2018-03-24 15:27:24 -03:00
Manuel Alejandro de Brito Fontes
93c72ef646
Update go dependencies (#2234) 2018-03-23 13:35:19 -03:00
Zenara Daley
6e099c5f57 Add EWMA as configurable load balancing algorithm (#2229) 2018-03-23 12:06:21 -03:00
Manuel Alejandro de Brito Fontes
b0a63fe3ff
Fix grpc json tag name (#2246) 2018-03-23 09:12:26 -03:00
Oilbeater
1f93a1ccad fix: empty ingress path (#2244)
If the origin ingress rule has no field `path`, the default value will be an empty string which will cause issues when rendering template as other place will use `/` as the default value.
Set the default value of path to `/` when retrieve ingress rules from api-server. Thie will fix https://github.com/kubernetes/ingress-nginx/issues/1980
2018-03-23 08:08:42 -03:00
k8s-ci-robot
935a5ef2c8
Merge pull request #2242 from agau4779/http2
add http/2
2018-03-22 10:26:04 -07:00
Ashley Gau
84a6e0c1ab add http/2 2018-03-22 10:25:35 -07:00
maxlaverse
39cb880f32 Revert "Get file max from fs/file-max. (#2050)" (#2241)
This reverts commit d8efd39694.
2018-03-22 13:03:04 -03:00
Oilbeater
0b0a274a9a fix: cannot set $service_name if use rewrite (#2220)
$path here is the regular expression formatted nginx location not the origin path in ingress rules. Fix https://github.com/kubernetes/ingress-nginx/issues/2131
2018-03-22 09:43:45 -03:00
yulng
e1c7892e4a to kubernetes (#2240)
to kubernetes
2018-03-22 09:20:09 -03:00
halfcrazy
b45ee8d85f Add missing configuration in #2235 (#2236) 2018-03-22 08:53:29 -03:00