Fernando Diaz
073241e341
Add more descriptive logging in certificate loading
...
Currently a log "secret %v has no private key" is provided for
cert and "secret %v has no cert" is provided for key. They are in
the wrong place. This PR corrects the ordering and adds a
description as to what is actually missing.
2017-09-22 15:21:16 -05:00
Bob Van Zant
045cceacac
Use nginx default value for SSLECDHCurve
...
This configuration setting permits nginx to auto discover supported curves based on what openssl was compiled with. With the old default of secp384r1 if you attempted to use a key from a different curve, for example prime256v1, the SSL handshake would fail in an awful way without any helpful errors logged anywhere.
The default setting in nginx has been "auto" since 1.11.0
2017-09-21 11:56:52 -07:00
Max Laverse
7a1f604120
Fix ConfigMap link in doc
2017-09-21 10:22:46 +02:00
decker
407d8535da
Surpport snippet for server section by the annotation of the ingess
2017-09-20 17:35:16 +08:00
Daniel Hunter
0d46fa4d03
Add missing whitespace line between items
...
Add a whitespace line for improved readability.
2017-09-19 13:25:07 -07:00
Manuel de Brito Fontes
cd288b9993
Improve resource usage in nginx controller
2017-09-19 14:05:18 -03:00
Manuel de Brito Fontes
d38106f9c3
Add support for opentracing
2017-09-17 21:19:34 -03:00
Manuel de Brito Fontes
df57b8bab6
1
2017-09-17 17:01:28 -03:00
Manuel de Brito Fontes
669428e2a8
Merge remote-tracking branch 'master/master' into refactor-template-headers
2017-09-17 16:48:31 -03:00
Manuel de Brito Fontes
f38f49e770
Refactor X-Forwarded-* headers
2017-09-17 16:17:12 -03:00
Manuel de Brito Fontes
0661eaa08c
Cleanup
2017-09-17 16:12:58 -03:00
Noah Huppert
f04ac5e29c
default backend service quota now 5
2017-09-15 15:08:30 -04:00
Manuel Alejandro de Brito Fontes
4d6b10a741
Merge pull request #1362 from gianrubio/customize-vts-filter-key
...
Customize VTS/Prometheus metrics
2017-09-15 04:19:06 -07:00
Giancarlo Rubio
e37ea14e7e
Set default value for vtsDefaultFilterKey
2017-09-15 10:15:21 +02:00
Mike Rostermund
4ea94ebf67
Fix typos
2017-09-14 21:35:52 +02:00
Giancarlo Rubio
72b0259151
support apdex metrics
2017-09-14 14:27:03 +02:00
Tony Li
62a480f007
consolidate disabling information in beta limitations
2017-09-13 21:38:20 -04:00
Nick Sardo
b2ad9e7078
Merge pull request #1033 from nikhiljindal/reportIGName
...
Adding logic to GCE ingress controller to handle multi cluster ingresses
2017-09-13 17:34:29 -07:00
nikhiljindal
937cde666e
Remove multiple calls to CreateInstanceGroups by reusing results from a single call
2017-09-13 11:30:19 -07:00
Manuel Alejandro de Brito Fontes
981967b05e
Merge pull request #1323 from sethpollack/white_list_real_ip
...
use $the_real_ip for rate limit whitelist
2017-09-13 09:51:34 -07:00
Manuel Alejandro de Brito Fontes
587a3440c5
Merge pull request #1335 from auhlig/requestbuffering
...
Configurable proxy_request_buffering per location..
2017-09-12 16:03:15 -07:00
Arno Uhlig
aa191c8c9b
configurable proxy-request-buffering per location and fix conectTimeout -> connectTimeout
2017-09-12 19:54:28 +02:00
Rodrigo Queiro
01ad215d01
Fix typos
2017-09-12 18:33:47 +02:00
Manuel Alejandro de Brito Fontes
0a96924fc5
Merge pull request #1322 from sethpollack/realip
...
parse real ip
2017-09-12 06:40:39 -07:00
Manuel de Brito Fontes
e08e5c20e6
Enable status port listening in all interfaces
2017-09-12 10:27:51 -03:00
nikhiljindal
0f4f5c97d4
Refactor code to merge multi cluster ingress sync with single cluster ingress sync
2017-09-11 14:44:52 -07:00
Manuel Alejandro de Brito Fontes
18ea2f7527
Merge pull request #1329 from hzxuzhonghu/example
...
add example for nginx-ingress
2017-09-10 18:39:49 -07:00
hzxuzhonghu
4481b2ee11
add example
2017-09-11 09:17:36 +08:00
Manuel Alejandro de Brito Fontes
1e943c0fc0
Merge pull request #1330 from diazjf/template-unit-tests
...
Increase coverage in template.go for nginx controller
2017-09-10 12:48:52 -07:00
Fernando Diaz
c4293bcc38
Increase coverage in template.go for nginx controller
...
Adds some of the missing unit tests to template.go for the nginx
controller.
2017-09-10 11:57:14 -05:00
Milosz Tanski
2120aab66c
POC: Setting upstream vhost for nginx.
...
In the current k8 ingress there's no way to control "Host" header sent
to upstream server; it's always the configured vhost.
It's desirable to support custom Host header when proxying for a number
of cases. One such case is forwarding to an Service that points to an
external host that expect a host paramater (like AWS S3 buckets).
There's a number of others.
By default nginx set Host to the upstreams domain name (and not the one
passed in) like K8 always forces. This provided an escape hatch to this
behavior.
2017-09-10 11:38:53 -04:00
Manuel de Brito Fontes
13f47ad56b
Pass headers from the custom error backend
2017-09-09 14:38:48 -03:00
Seth Pollack
693a588175
use $the_real_ip for rate limit whitelist
2017-09-08 17:00:52 -04:00
Seth Pollack
c6d5c5557d
parse real ip
2017-09-08 16:54:06 -04:00
Manuel de Brito Fontes
3e4542e595
Enable keepalive in upstreams
2017-09-08 16:53:31 -03:00
Manuel de Brito Fontes
109ee27013
Release nginx ingress controller 0.9.0-beta.13
2017-09-08 11:56:25 -03:00
Manuel de Brito Fontes
0c8f81301f
Fix custom error pages
2017-09-07 20:39:58 -03:00
Manuel Alejandro de Brito Fontes
d8c7166891
Merge pull request #1312 from aledbf/custom-header
...
Allow custom forwarded for header
2017-09-07 14:27:15 -07:00
Manuel Alejandro de Brito Fontes
e05ac9b4bd
Merge pull request #1313 from aledbf/fix-template
...
Fix eol in nginx template
2017-09-07 14:26:21 -07:00
Manuel de Brito Fontes
c24e212aac
Allow custom forwarded for header
2017-09-07 18:11:23 -03:00
Manuel Alejandro de Brito Fontes
7a31952892
Merge pull request #1308 from mindw/patch-1
...
A trivial typo in config
2017-09-07 11:58:17 -07:00
Manuel de Brito Fontes
87e8b7255a
Fix eol in nginx template
2017-09-07 13:48:36 -03:00
Manuel Alejandro de Brito Fontes
6146bc4dc2
Merge pull request #1310 from aledbf/fix-config
...
Refactoring nginx configuration configmap
2017-09-07 09:45:32 -07:00
Manuel de Brito Fontes
5050307ea9
Enable nginx async writes
2017-09-07 13:40:10 -03:00
Manuel de Brito Fontes
e57b90636b
Refactoring nginx configuration configmap
2017-09-07 13:15:36 -03:00
Gabi Davar
1f61dc9229
A trivial typo in config
2017-09-07 17:46:41 +03:00
nikhiljindal
7d87f02b1f
Adding logic to GCE ingress controller to handle multi cluster ingresses
2017-09-06 23:37:56 -07:00
du
f6946738f8
[nginx/README] fix broken link on how to generate secrets containing SSL certificates
2017-09-05 14:28:07 +08:00
du
712a8421df
[nginx/README] fix unusable deployment guide
2017-09-05 14:17:29 +08:00
du
710eaffc69
fix README of nginx-ingress-controller
2017-09-04 16:57:44 +08:00
Ricardo Pchevuzinske Katz
d33b748716
Adds support for error page in Client Certificate Authentication
2017-09-03 17:12:03 -03:00
Manuel Alejandro de Brito Fontes
528cb8b040
Merge pull request #1288 from dwelch2344/master
...
Allow PATCH in enable-cors
2017-09-02 17:42:33 -03:00
Chance Zibolski
d793d53636
Update nginx readme with latest nginx --help usage
2017-09-01 15:29:03 -07:00
David Welch
8abbd1ae8c
Allow PATCH in enable-cors
2017-09-01 10:54:41 -06:00
Manuel de Brito Fontes
a5432bf3a0
Fix listen error in aws
2017-08-31 14:28:20 -03:00
Manuel de Brito Fontes
57a18d11bd
Fix nginx stats
2017-08-31 14:19:32 -03:00
danielqsj
e9a14cbe97
Add indent for nginx.conf
2017-08-31 17:10:12 +08:00
Manuel Alejandro de Brito Fontes
58c94d40e4
Merge pull request #1272 from danielqsj/delete-useless-statement
...
Delete useless statement
2017-08-30 18:04:35 -04:00
Nick Sardo
eca88e4f24
Merge pull request #1266 from aledbf/b12-a3
...
Release nginx ingress controller 0.9.0-beta.12
2017-08-30 12:56:11 -07:00
danielqsj
493aede7fe
Delete useless statement
2017-08-30 17:03:50 +08:00
harryge00
6dd1b0b129
add missing yamls in controllers/nginx
2017-08-30 16:21:20 +08:00
Manuel de Brito Fontes
9807b691b7
Release nginx ingress controller 0.9.0-beta.12
2017-08-29 17:28:50 -03:00
Manuel de Brito Fontes
e65d3c7571
Improve logs
2017-08-29 16:40:03 -03:00
Max Laverse
73d8ddd3d1
Graceful shutdown for Nginx
2017-08-29 20:47:55 +02:00
Max Laverse
d9e7d1eabc
Add support for 'worker-shutdown-timeout'
2017-08-29 11:55:59 +02:00
Nick Sardo
3e8bc53443
Merge pull request #1181 from freehan/shared-informer
...
switch to use shared informer
2017-08-28 16:50:05 -07:00
Manuel Alejandro de Brito Fontes
9e7c542519
Merge pull request #1248 from aledbf/pprof
...
Improve nginx controller performance
2017-08-26 08:56:06 -04:00
Manuel de Brito Fontes
fabe37bfe5
Improve nginx controller performance
2017-08-26 00:49:57 -03:00
Manuel de Brito Fontes
edcc3dfc81
Make Ingress annotations available in template
2017-08-25 22:39:30 -03:00
Manuel de Brito Fontes
a85cfd10b5
Add additional headers when custom default backend is used
2017-08-25 20:56:08 -03:00
Manuel Alejandro de Brito Fontes
b791460206
Merge pull request #1244 from aledbf/add-custom-backend-annotation
...
Add custom default backend annotation
2017-08-25 15:15:17 -04:00
Manuel de Brito Fontes
bf12e793f6
Add custom backend annotation
2017-08-25 15:49:52 -03:00
Manuel Alejandro de Brito Fontes
d2546d0291
Merge pull request #1212 from danielqsj/bind-address
...
Add option to specify addresses on which the server will accept
2017-08-25 12:05:52 -04:00
Max Laverse
dd00b6d7b3
Add support for access-log-path and error-log-path
2017-08-25 14:03:09 +02:00
danielqsj
06f237c66d
Add options to bind address
2017-08-25 10:24:32 +08:00
Minhan Xia
aa333708f2
move gce cloud provider initialization to main
2017-08-24 17:10:58 -07:00
Minhan Xia
3839faf536
switch to use shared informer
2017-08-24 17:10:51 -07:00
Manuel Alejandro de Brito Fontes
e7d2ff6fac
Merge pull request #1239 from aledbf/pc
...
Add flags to customize listen ports and detect port collisions
2017-08-24 10:23:59 -04:00
Manuel de Brito Fontes
0459674931
Add flags to customize listen ports and detect port collisions
2017-08-24 10:56:08 -03:00
Daniel Fernandes Martins
d57bc292c3
Add support for 'client_body_timeout' and 'client_header_timeout'
2017-08-24 09:33:35 -03:00
Fernando Diaz
86357332e3
Add Validation for Client Body Buffer Size
...
Adds validation so that if a bad value is input into the client
body buffer size annotation then client_body_buffer_size is not set.
That way a log error is thrown and it fails gracefully rather than
killing the ingress controller.
2017-08-23 20:04:51 -05:00
Manuel de Brito Fontes
210ddb797a
Fix Equal comparison
2017-08-23 17:52:17 -03:00
Manuel de Brito Fontes
b7b41248cb
Lint code
2017-08-23 15:40:57 -03:00
Manuel Alejandro de Brito Fontes
f593cb8e2f
Merge pull request #1226 from danielqsj/useless-variable
...
Remove useless variable in nginx.tmpl
2017-08-23 13:01:34 -04:00
danielqsj
77c9556dde
Remove useless variable in nginx.tmpl
2017-08-23 15:06:13 +08:00
Manuel de Brito Fontes
806144421e
Move certificate authentication from location to server
2017-08-23 00:39:38 -03:00
Seth Pollack
f045fa6d88
refactor rate limit whitelist
2017-08-22 20:47:29 -04:00
Manuel de Brito Fontes
97b10b05ae
Add doc for non-www to www annotation
2017-08-22 18:33:48 -03:00
Seth Pollack
a3594f6c4c
keep zones unique per ingress resource
2017-08-22 14:54:08 -04:00
Manuel de Brito Fontes
a392f29956
Replace base64 encoding with random uuid
2017-08-22 10:53:13 -03:00
Manuel Alejandro de Brito Fontes
def5155aa6
Merge pull request #1210 from sethpollack/whitelist
...
add rate limit whitelist
2017-08-22 08:23:45 -04:00
Manuel Alejandro de Brito Fontes
31d45d8a5d
Merge pull request #1207 from Lion-Wei/patch-12
...
delete broken link
2017-08-22 08:05:51 -04:00
Manuel Alejandro de Brito Fontes
76056c10b0
Merge pull request #1208 from Lion-Wei/patch-13
...
fix some typo
2017-08-22 08:05:18 -04:00
Manuel Alejandro de Brito Fontes
0a14b4dd3c
Merge pull request #1209 from Lion-Wei/patch-14
...
Update README.md
2017-08-22 08:04:29 -04:00
Manuel Alejandro de Brito Fontes
9863140b8c
Merge pull request #1186 from diazjf/client-body-buffer-size
...
Add annotation for client-body-buffer-size per location
2017-08-22 08:02:35 -04:00
Seth Pollack
6253c34266
add rate limit whitelist
2017-08-22 07:53:52 -04:00
Fernando Diaz
e9ffbf0f87
Add annotation for client-body-buffer-size per location
...
Adds an annotation which allows for client-body-buffer-size to
be configured per specific locations specified in the ingress
resource yaml.
2017-08-21 23:12:30 -05:00
Lion-Wei
088e9ccae1
Update README.md
2017-08-22 10:55:57 +08:00
Lion-Wei
47d8e53198
Update README.md
2017-08-22 10:17:44 +08:00
Lion-Wei
3975b05ce6
Update BETA_LIMITATIONS.md
2017-08-22 09:58:20 +08:00