Commit graph

31 commits

Author SHA1 Message Date
Fernando Diaz
1ffeb2cee1 Enhance Certificate Logging and Clearup Mutual Auth Docs
Adds better logging to errors caused when getting a Certificate.
Adds notes and updates documentation for Mutual Authentication.
2017-09-27 11:09:37 -05:00
Manuel Alejandro de Brito Fontes
5a24f4d3bd Merge pull request #1402 from auhlig/nilpointerfix
fix error when cert or key is nil
2017-09-24 12:30:12 -07:00
Arno Uhlig
003667ff2e fix error when cert or key is nil 2017-09-21 17:50:20 +02:00
Manuel de Brito Fontes
cd288b9993 Improve resource usage in nginx controller 2017-09-19 14:05:18 -03:00
Manuel de Brito Fontes
0661eaa08c Cleanup 2017-09-17 16:12:58 -03:00
Manuel de Brito Fontes
33ce78ab66 Force reload if a secret is updated 2017-09-13 12:22:05 -03:00
Manuel de Brito Fontes
facf8f0f6f Alternative syncSecret approach #1030 2017-07-27 22:17:22 -04:00
Minhan Xia
ee3054dd52 adapt gce controller to godep updates 2017-07-25 17:09:27 -07:00
Manuel Alejandro de Brito Fontes
e59ac13eba Merge pull request #991 from aledbf/ssl-refactoring
Remove secret sync loop
2017-07-19 12:19:36 -04:00
Manuel de Brito Fontes
5a1f845593 Remove secret sync loop 2017-07-18 22:54:32 -04:00
Manuel de Brito Fontes
bd621359ac Check errors generating pem files 2017-07-18 16:26:28 -04:00
Manuel de Brito Fontes
14a02d128c Simplify handling of ssl certificates 2017-07-12 15:29:03 -04:00
Manuel de Brito Fontes
5472555186 Avoid checking if the controllers are synced 2017-05-29 12:22:30 -04:00
Manuel de Brito Fontes
a537d2d0fa Remove secrets from ingress after a Delete event 2017-05-11 22:19:16 -03:00
Manuel de Brito Fontes
5c9c5a301a Avoid periodic check for secret changes 2017-05-10 21:54:30 -03:00
chentao1596
2ec3bb810e remove reduntants alias 2017-04-11 11:13:09 +08:00
Manuel de Brito Fontes
f28142ae8e Replace secret workqueue 2017-04-09 13:52:10 -03:00
Manuel de Brito Fontes
e0561ddeb9 Update nginx and generic controller 2017-04-04 11:51:50 -03:00
Andreas Kohn
33715a9c8e Fix a typo in an error message 2017-03-30 13:00:31 +02:00
Manuel de Brito Fontes
18492c1384 Add information about SSL certificates in the default log level. 2017-03-16 16:02:15 -03:00
Andreas Kohn
dbeead3615
Fix typo in error message 2017-03-14 13:51:29 +01:00
Andreas Kohn
6e017269db
Fix grammar in error messages 2017-03-14 13:51:23 +01:00
Manuel de Brito Fontes
1cc0a95966 Manually sync secrets from certificate authentication annotations 2017-03-10 12:34:13 -03:00
Ricardo Pchevuzinske Katz
51235a38e8 Removes wrong secret enqueing and improve the Fake Cert generation 2017-03-06 16:29:33 -03:00
Ricardo Pchevuzinske Katz
6c1b45a663 Generates a Self signed certificate for default vhost if the secret doesn't exists
Generates a Self signed certificate for default vhost if the secret doesn't exists

	modified:   core/pkg/ingress/controller/backend_ssl.go
	modified:   core/pkg/ingress/controller/controller.go
	modified:   core/pkg/net/ssl/ssl.go
2017-03-06 09:21:08 -03:00
Ricardo Pchevuzinske Katz
a342c0bce3 Adds correct support for TLS Muthual autentication and depth verification
modified:   controllers/nginx/configuration.md
	modified:   controllers/nginx/rootfs/etc/nginx/template/nginx.tmpl
	modified:   core/pkg/ingress/annotations/authtls/main.go
	modified:   core/pkg/ingress/controller/backend_ssl.go
	modified:   core/pkg/ingress/controller/controller.go
	modified:   core/pkg/ingress/controller/util_test.go
	modified:   core/pkg/ingress/resolver/main.go
	modified:   core/pkg/ingress/types.go
	modified:   core/pkg/net/ssl/ssl.go
	modified:   examples/PREREQUISITES.md
	new file:   examples/auth/client-certs/nginx/README.md
	new file:   examples/auth/client-certs/nginx/nginx-tls-auth.yaml
2017-02-24 22:49:01 -03:00
Manuel de Brito Fontes
16c5800545 Add e2e boilerplate 2016-11-23 21:34:30 -03:00
Manuel de Brito Fontes
42b58e957c Avoid nginx reloads 2016-11-23 21:19:07 -03:00
Manuel de Brito Fontes
5a8e090736 Add Generic interface 2016-11-23 21:17:49 -03:00
Manuel de Brito Fontes
f2b627486d Remove interface 2016-11-23 21:17:49 -03:00
Manuel de Brito Fontes
ed9a416b01 Split implementations from generic code 2016-11-23 21:17:49 -03:00