Commit graph

7712 commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
dd7090b969 Merge pull request #827 from stp-ip/nginx-rbac
Introduce working example of nginx controller with rbac
2017-06-09 14:36:42 -04:00
Manuel Alejandro de Brito Fontes
dbb12afbb9 Merge pull request #829 from rlguarino/ross/2017-06-08T18-48-35-07-00
feat(template): wrap IPv6 addresses in []
2017-06-09 13:21:30 -04:00
Ross Guarino
54f6729dc8 feat(template): wrap IPv6 addresses in []
Add formatIP helper function which will wrap IPv6 addresses
in [] and print IPv4 addresses as is.

Closes #828
2017-06-08 20:11:00 -07:00
Michael Grosser
ec6efbd9d3 Introduce working example of nginx controller with rbac 2017-06-08 06:34:47 +00:00
Manuel Alejandro de Brito Fontes
d556cc07b6 Merge pull request #825 from jcmoraisjr/jm-edit-ingclass
Create or delete ingress based on class annotation
2017-06-07 17:43:35 -04:00
Joao Morais
6b54ae58ac Create or delete ingress based on class annotation 2017-06-07 13:16:34 -03:00
Manuel de Brito Fontes
a4793eda8c Update nginx-slim to 0.18 2017-06-07 11:33:13 -04:00
Manuel de Brito Fontes
98454a0aa2 Release nginx-slim 0.18 2017-06-07 11:07:12 -04:00
Manuel de Brito Fontes
1ea89a6112 Release ubuntu-slim 0.11 2017-06-07 10:38:03 -04:00
Nick Sardo
8cd9a5a98a Merge pull request #786 from aledbf/update-echoheaders
Update echoserver image version in examples
2017-06-06 16:38:48 -07:00
Nick Sardo
82bc0059aa Merge pull request #818 from nicksardo/gce-fix-backendStatus
[GLBC] Fix backend status out of bounds error
2017-06-06 13:06:26 -07:00
Nick Sardo
851c9d0d41 Fix backend status out of bounds 2017-06-06 13:02:57 -07:00
Nick Sardo
8ce0ea914c Merge pull request #817 from nicksardo/gce-fix-mapsEqual
[GCLB] Fix mapsEqual out of bounds error
2017-06-06 12:50:46 -07:00
Nick Sardo
95114f9a75 Fix mapsEqual out of bounds error 2017-06-06 12:40:37 -07:00
Manuel Alejandro de Brito Fontes
dd354bf2a0 Merge pull request #813 from olvesh/externalauth_client_max_body_size_811
Added client_max_body_size to authPath location
2017-06-06 11:11:46 -04:00
Manuel Alejandro de Brito Fontes
2829997b5f Merge pull request #814 from arno01/nginx-ingress-controller-rbac-fix1
rbac-nginx: resourceNames cannot filter create verb
2017-06-04 12:41:31 -04:00
Andrey Arapov
4618fd2f64
rbac-nginx: resourceNames cannot filter create verb 2017-06-03 11:28:28 +02:00
Olve Sæther Hansen
d4600a87b5 Added client_max_body_size to authPath location
Seems like nginx denies the request because it would be over the max body size,
event if `proxy_pass_request_body` is `off`.

This fixes 811
2017-06-02 22:40:29 +02:00
Manuel Alejandro de Brito Fontes
4c868cf62a Merge pull request #806 from puja108/patch-1
fix ingress rbac roles
2017-06-02 12:02:14 -04:00
Manuel Alejandro de Brito Fontes
66b4c2606b Merge pull request #809 from aledbf/fix-variables-map
Fix dynamic variable name
2017-06-02 11:59:32 -04:00
Jan Weitz
cf4ad26d3c Fix #798 - RBAC for leader election
Using gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.7
the nginx-controller needs to handle leader-election via configmaps.

To perform the leader-election the nginx-controller needs to have the
appropiate RBAC permissions.

Previously to this fix, the following errors occured:

-  cannot get configmaps in the namespace "NAMESPACE_PLACEHOLDER". (get configmaps ingress-controller-leader-nginx)
- initially creating leader election record: User "system:serviceaccount:NAMESPACE_PLACEHOLDER" cannot create configmaps in the namespace "NAMESPACE_PLACEHOLDER". (post configmaps)

fix ingress rbac roles

There was 2 things that the current IC (0.9 beta7) needs.

The ClusterRole was missing `get nodes`:

```
RBAC DENY: user "system:serviceaccount:kube-system:nginx-ingress-controller" groups [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] cannot "get" resource "nodes" named "xxx" cluster-wide
```

The Role was missing `update configmaps`:

```RBAC DENY: user "system:serviceaccount:kube-system:nginx-ingress-controller" groups [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] cannot "update" resource "configmaps" named "ingress-controller-leader-nginx" in namespace "kube-system"```

removed update configmap because of #798

rebased on master, moved get nodes to own rule

added get nodes to cluster permissions
2017-06-02 17:57:15 +02:00
Manuel de Brito Fontes
b70e9ca078 Fix dynamic variable name 2017-06-02 11:12:02 -04:00
Manuel Alejandro de Brito Fontes
f1484650d3 Merge pull request #804 from weitzj/fix/798
Fix #798 - RBAC for leader election
2017-06-01 20:18:36 -04:00
Jan Weitz
3ad6fa80d4 Fix #798 - RBAC for leader election
Using gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.7
the nginx-controller needs to handle leader-election via configmaps.

To perform the leader-election the nginx-controller needs to have the
appropiate RBAC permissions.

Previously to this fix, the following errors occured:

-  cannot get configmaps in the namespace "NAMESPACE_PLACEHOLDER". (get configmaps ingress-controller-leader-nginx)
- initially creating leader election record: User "system:serviceaccount:NAMESPACE_PLACEHOLDER" cannot create configmaps in the namespace "NAMESPACE_PLACEHOLDER". (post configmaps)
2017-06-01 21:30:21 +02:00
Nick Sardo
a6bba68233 Merge pull request #785 from aledbf/echoheaders
Publish echoheader image
2017-05-30 11:01:43 -07:00
Manuel de Brito Fontes
c18c8f76ba Publish echoheader image 2017-05-30 13:51:32 -04:00
Manuel Alejandro de Brito Fontes
3f0307a96e Merge pull request #792 from aledbf/refactor-has-synced
Avoid checking if the controllers are synced
2017-05-29 20:38:30 -04:00
Manuel Alejandro de Brito Fontes
5f71bde601 Merge pull request #753 from jcmoraisjr/jm-secret-tracker
Move secretTracker updating to GetAuthCertificate()
2017-05-29 17:01:40 -04:00
Manuel de Brito Fontes
5472555186 Avoid checking if the controllers are synced 2017-05-29 12:22:30 -04:00
Manuel Alejandro de Brito Fontes
592f3c0736 Merge pull request #791 from mingyang91/patch-1
typo
2017-05-29 10:56:49 -04:00
明扬
721b228cef typo 2017-05-29 22:32:48 +08:00
Manuel Alejandro de Brito Fontes
d13b293619 Merge pull request #790 from arjanschaaf/duplicate-real-ip
#789 removing duplicate X-Real-IP header
2017-05-29 08:06:21 -04:00
Arjan Schaaf
a854dc71b2 #789 removing duplicate X-Real-IP header introduced 4bd4bf3be6 2017-05-29 11:43:05 +02:00
Manuel Alejandro de Brito Fontes
32f24380ec Merge pull request #787 from aledbf/pass-server-header
Add setting to allow returning the Server header from the backend
2017-05-28 19:16:58 -04:00
Manuel de Brito Fontes
2f20c6bfcb Add setting to allow returning the Server header from the backend 2017-05-28 17:40:25 -04:00
Manuel Alejandro de Brito Fontes
3a9e3fd7e2 Merge pull request #784 from aledbf/variable-hash-size
Allow customization of variables hash tables
2017-05-28 17:25:05 -04:00
Manuel de Brito Fontes
b84fc350ee Update echoserver image version in examples 2017-05-28 17:19:34 -04:00
Manuel de Brito Fontes
8837cf93e2 Allow customization of variables hash tables 2017-05-28 16:05:49 -04:00
Manuel Alejandro de Brito Fontes
f00823fd83 Merge pull request #783 from unixwitch/nginx-app-root
nginx/README.md: clarify app-root and fix example hyperlink
2017-05-28 15:43:51 -04:00
Liss Tarnell
6d3e9666ba nginx/README.md: clarify app-root and fix example hyperlink 2017-05-28 20:41:00 +01:00
Manuel Alejandro de Brito Fontes
bad009ecb4 Merge pull request #776 from unixwitch/annotations-list
docs/annotations.md: add list of known annotations
2017-05-28 14:54:57 -04:00
Liss Tarnell
d4d369d8c1 docs/annotations.md: fix app-root and clean up haproxy 2017-05-28 19:47:24 +01:00
Manuel Alejandro de Brito Fontes
efd6714d42 Merge pull request #774 from aledbf/fix-tcp-upd-listen
Add IPv6 support in TCP and UDP stream section
2017-05-28 13:11:05 -04:00
Manuel Alejandro de Brito Fontes
90e1ab3a69 Merge pull request #780 from xeor/patch-1
Correcting image version link
2017-05-27 15:29:15 -04:00
Lars Solberg
c12a2fa186 Correcting image version link 2017-05-27 21:04:40 +02:00
Manuel Alejandro de Brito Fontes
865cc78df3 Merge pull request #773 from aknuds1/fix-readme
Fix README WRT. building nginx-ingress-controller
2017-05-27 08:06:33 -04:00
Nick Sardo
fa579af218 Merge pull request #779 from nicksardo/recorder-scheme
Change recorder event scheme for GCE
2017-05-26 15:39:06 -07:00
Nick Sardo
4a43fe400d Use scheme package 2017-05-26 14:43:35 -07:00
Nick Sardo
c1b8a324dd Merge pull request #778 from aledbf/fix-beta-6
Release nginx ingress controller 0.9-beta.7
2017-05-26 12:58:28 -07:00
Manuel de Brito Fontes
6563330d2b Release nginx ingress controller 0.9-beta.7 2017-05-26 15:10:07 -04:00