Ricardo Katz
9c51676f17
Add support to CRL ( #3164 )
...
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Add support to CRL
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
2019-09-03 16:47:28 -04:00
Manuel Alejandro de Brito Fontes
8def5ef7ca
Add support for multiple alias and remove duplication of SSL certificates ( #4472 )
2019-08-26 10:58:44 -04:00
Kubernetes Prow Robot
6697203891
Merge pull request #4409 from ProNic-QY/master
...
sort ingress by namespace and name when ingress.CreationTimestamp identical
2019-08-18 17:30:03 -07:00
qianyong
70614f4622
sort ingress by namespace and name when ingress.CreationTimestamp identical
2019-08-18 23:11:15 +08:00
Gabor Lekeny
65b9e2c574
Merge branch 'master' of https://github.com/kubernetes/ingress-nginx into proxyssl
2019-08-16 06:21:53 +02:00
Manuel Alejandro de Brito Fontes
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
Gabor Lekeny
def13fc06c
Add proxy_ssl_* directives
...
Add support for backends which require client certificate (eg. NiFi)
authentication. The `proxy-ssl-secret` k8s annotation references a
secret which is used to authenticate to the backend server. All other
directives fine tune the backend communication.
The following annotations are supported:
* proxy-ssl-secret
* proxy-ssl-ciphers
* proxy-ssl-protocol
* proxy-ssl-verify
* proxy-ssl-verify-depth
2019-07-18 03:21:52 +02:00
Manuel Alejandro de Brito Fontes
3d7a09347d
Apply fixes suggested by staticcheck
2019-07-08 16:18:52 -04:00
Manuel Alejandro de Brito Fontes
8807db9748
Check and complete intermediate SSL certificates
2019-07-04 19:13:21 -04:00
Manuel Alejandro de Brito Fontes
85a848faaf
Fix misspelled and e2e check
2019-06-24 23:47:22 -04:00
Manuel Alejandro de Brito Fontes
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 11:32:39 -04:00
Elvin Efendi
c4ced9d694
fix source file mods
2019-06-06 10:47:08 -04:00
Manuel Alejandro de Brito Fontes
14a394fc9e
Update nginx ( #4150 )
...
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
Manuel Alejandro de Brito Fontes
c639f490b1
Use a real apiserver to test the store
2019-05-23 04:58:14 -04:00
Manuel Alejandro de Brito Fontes
bae49a4657
Refactor ListIngresses to add filters
2019-05-22 05:37:44 -04:00
okryvoshapka-connyun
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
Elvin Efendi
417af76e97
properly handle default and custom default certs in dynamic ssl mode
2019-04-13 12:32:06 -04:00
Elvin Efendi
fc6e7c9be0
fix dynamic cert bug
2019-04-09 22:11:21 -04:00
Manuel Alejandro de Brito Fontes
14a9e9f3fa
Update dependencies client-go to release-11.0 and kubernetes-1.14.0
2019-03-28 20:43:18 -03:00
Elvin Efendi
5667ea5d67
bugfix: when secret includes ca.crt store it on disk even in dynamic cert mode
2019-03-11 00:53:06 -04:00
Elvin Efendi
70df5e03e5
clean up certificate processing
2019-03-11 00:53:06 -04:00
Manuel Alejandro de Brito Fontes
bef6ff9042
Do not log unnecessarily ( #3771 )
2019-02-16 20:56:18 -03:00
Alex Kursell
b5a9f6c000
Fix flaky test
2019-02-05 18:02:21 -05:00
Alex Kursell
ca74960905
Fix --disable-catch-all
2019-01-25 14:53:55 -05:00
Maxime Ginters
3fa8395f7f
Fix a bug in Ingress update handler
2019-01-08 09:28:42 -05:00
Kubernetes Prow Robot
8f57f9578d
Merge pull request #3586 from Shopify/disable-catch-all
...
Add --disable-catch-all option to disable catch-all server
2019-01-07 07:16:26 -08:00
Manuel Alejandro de Brito Fontes
b2fa243b97
Sort ingresses by creation timestamp
2018-12-27 10:48:01 -03:00
Maxime Ginters
1678d99a03
Add --disable-catch-all option to disable catch-all server
2018-12-21 13:22:26 -05:00
Elvin Efendi
7a00d52141
fix status updated: make sure ingress.status is copied
2018-12-17 16:19:02 +04:00
Maxime Ginters
f90881b367
Update lua configuration_data when number of controller pod change
2018-12-14 13:34:54 -05:00
Archangel_SDY
ece5e1c678
Pass k8sStore
to member functions by pointer
...
Passing `k8sStore` by value implies read and copy of `backendConfig`,
which is not protected by a mutex and may cause race conditions.
2018-12-06 22:11:19 +08:00
Archangel_SDY
d58dbde5e3
Add a mutex to protect against simultaneous read/write to backend config
...
This addresses issues found by race detector.
2018-12-06 22:02:17 +08:00
Archangel_SDY
9122c08b3e
Ignore updates of ingress with invalid class
2018-12-06 22:02:17 +08:00
Manuel Alejandro de Brito Fontes
68f344233b
Fix lint issues
2018-12-05 13:28:28 -03:00
Manuel Alejandro de Brito Fontes
2fa55eabf6
Replace glog with klog
2018-12-05 13:27:55 -03:00
Manuel Alejandro de Brito Fontes
497246f8ba
Annotations cannot being empty
2018-12-02 16:07:46 -03:00
Manuel Alejandro de Brito Fontes
f78e2e3849
Only copy fields being used
2018-12-02 15:35:36 -03:00
Manuel Alejandro de Brito Fontes
67808c0ed8
Improve parsing of annotations and use of Ingress wrapper
2018-12-02 15:35:36 -03:00
Maxime Ginters
b6b221aebb
Watch controller Pods list
2018-11-26 15:35:31 -05:00
Maxime Ginters
12766cdfc6
Use struct to pack Ingress and its annotations
2018-11-20 09:38:22 -05:00
Manuel Alejandro de Brito Fontes
168f30d1ec
Revert removal of support for TCP and UDP services
2018-11-16 13:48:47 -03:00
SataQiu
76b5a7b45e
fix typos
2018-11-06 15:58:56 +08:00
Manuel Alejandro de Brito Fontes
44bdc7eb59
Remove support for TCP and UDP services
2018-10-07 10:53:37 -03:00
Manuel de Brito Fontes
281318b4b6
Replace client-go deprecated method
2018-09-10 14:42:10 -03:00
Fernando Diaz
10de8cac56
Log Errors Missing in Internal
...
Adds a few missing errors and fix formatting for others.
Fixes #3013
2018-08-30 15:02:42 -05:00
Henry Tran
7faf089082
Add dynamic certificate feature to controller
2018-08-16 20:19:33 -04:00
Manuel de Brito Fontes
f311668625
Add misspell target
2018-08-11 08:26:14 -04:00
Fernando Diaz
c783c08d81
Remove KubeConfig Dependency for Store Tests
...
Removes the KubeConfig Dependency for the Store Test by using the
FakeClient Instead. Unit Tests should not rely on a real KubeConfig.
Fixes #2789
2018-07-17 11:13:41 -05:00
Fernando Diaz
52ecdf0b46
Add Better Error Handling for SSLSessionTicketKey
...
Adds more error handling when writing an SSLSessionTicketKey to
the config map. Also adds tests and makes the function for modular.
Fixes #2756
2018-07-15 19:53:39 -05:00
Manuel de Brito Fontes
601315039e
Fix regression introduced in #2732
2018-07-10 10:29:45 -04:00