Commit graph

601 commits

Author SHA1 Message Date
Marco Ebert
d06029e3c5
Fix minor typos (#11940)
Co-authored-by: Nathan Baulch <nathan.baulch@gmail.com>
2024-09-06 23:19:46 +02:00
k8s-infra-cherrypick-robot
886ba107dd
Update maxmind post link about geolite2 license changes (#11880)
Signed-off-by: Seonghyeon Cho <seonghyeoncho96@gmail.com>
Co-authored-by: Seonghyeon Cho <seonghyeoncho96@gmail.com>
2024-08-26 22:31:28 +02:00
Marco Ebert
0486f013fe
Auto-generate annotation docs (#11835)
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2024-08-21 09:38:34 +02:00
Marco Ebert
5862677a1b
Tests & Docs: Bump images. (#11804)
* Tests: Bump CFSSL.

* Docs: Bump Custom Error Pages.

* Tests: Bump FastCGI HelloServer.

* Tests: Bump HTTPBun.

* Docs: Bump OpenTelemetry.
2024-08-15 08:26:51 +02:00
k8s-infra-cherrypick-robot
2d6c3302fa
Docs: Fix from-to-www redirect description. (#11715)
Co-authored-by: dvg <vdruginin@gmail.com>
2024-08-01 04:49:08 -07:00
k8s-infra-cherrypick-robot
9ed5485745
Docs: Clarify from-to-www redirect direction. (#11692)
* docs: Clarify from-to-www redirect direction.

This was not clear to me when reading the docs whether the ingress will
redirect from non-www to with-www or the reverse. It's also not very
clear from just grepping around the codebase. I found the answer by
reading from this reddit link:

https://www.reddit.com/r/kubernetes/comments/pbl033/k8s_ingress_redirecting_www_to_nonwww_domains/

So, to save time for other people doing the same, which I assumes is a
lot of people since it's a common scenario, this little revision in the
docs is warranted.

* Docs: Implement suggestion.

---------

Co-authored-by: Chakrit Wichian <service@chakrit.net>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-29 02:55:09 -07:00
k8s-infra-cherrypick-robot
d1adb0de3f
added real-client-ip faq (#11665)
Co-authored-by: longwuyuan <longwuyuan@gmail.com>
2024-07-21 09:54:37 -07:00
Marco Ebert
eed43af7e3
Docs: Format NGINX configuration table. (#11660) 2024-07-21 16:15:22 +02:00
k8s-infra-cherrypick-robot
514b10231f
Fix indent in YAML for example pod (#11609)
Co-authored-by: apiwat-chantawibul <billiska@gmail.com>
2024-07-12 00:53:21 -07:00
k8s-infra-cherrypick-robot
96610e143b
Upgrade OWASP_MODSECURITY_CRS_VERSION 3.3.5 to 4.4.0 and update docs (#11548)
Signed-off-by: jessebot <jessebot@linux.com>
Co-authored-by: jessebot <jessebot@linux.com>
2024-07-03 14:05:35 -07:00
k8s-infra-cherrypick-robot
292a17201b
Docs: Specify ingressClass for multi-controller setup. (#11520)
Co-authored-by: kiblik <5609770+kiblik@users.noreply.github.com>
2024-07-01 11:14:23 +02:00
k8s-infra-cherrypick-robot
46c637ef26
Docs: Improve default certificate usage. (#11519)
Co-authored-by: Marco <62987024+marco-svitol@users.noreply.github.com>
2024-07-01 11:13:35 +02:00
Marco Ebert
8acccfa5df
Fix boolean configuration (#11484)
Co-authored-by: Yoofi Quansah <ybquansah@gmail.com>
2024-06-18 10:31:38 -07:00
k8s-infra-cherrypick-robot
5c6af27dc9
fixed fastcgi userguide (#11455)
Co-authored-by: longwuyuan <longwuyuan@gmail.com>
2024-06-12 01:23:15 -07:00
k8s-infra-cherrypick-robot
1651900d8a
fix for docs issue 11432 (#11446)
Co-authored-by: longwuyuan <longwuyuan@gmail.com>
2024-06-10 06:48:17 -07:00
k8s-infra-cherrypick-robot
e2b3ac95a2
added multiplecontrollers-howto to faq (#11409)
Co-authored-by: longwuyuan <longwuyuan@gmail.com>
2024-06-02 12:05:50 -07:00
k8s-infra-cherrypick-robot
b7f6f93334
removed tlsv1 & tlsv1.1 (#11408)
Co-authored-by: longwuyuan <longwuyuan@gmail.com>
2024-06-02 11:52:07 -07:00
Marco Ebert
047fa58e26
Docs: Remove opentracing and zipkin from docs (#11405)
Co-authored-by: Lucas Andrade Flores <lcs.oliveira93@gmail.com>
2024-06-02 10:38:19 -07:00
k8s-infra-cherrypick-robot
3230e4abbc
fix geoip2 configuration docs (#11151)
Co-authored-by: dVerhees <30548963+dVerhees@users.noreply.github.com>
2024-03-24 16:42:21 -07:00
Marco Ebert
4f530225e5
Fix typos in OTel doc (#11081) (#11129)
Co-authored-by: Robert Ma <bob1211@gmail.com>
2024-03-14 09:21:29 -07:00
Khoo Hao Yit
b4ea953cce
add missing backend-protocol annotation option (#9545) 2024-02-27 09:41:09 -08:00
zengyuxing007
536c4e7e06
Update ingress-path-matching.md (#11008) 2024-02-21 22:07:07 -08:00
zengyuxing007
7edcdeefe5
Update ingress-path-matching.md (#11007) 2024-02-21 19:00:17 -08:00
Tore Stendal Lønøy
c295cd1c4b
docs: update annotations docs with missing session-cookie section (#10917) 2024-01-27 03:40:35 -08:00
James Strong
4e97379b4e
Release controller 1.9.6 and helm 4.9.1 (#10919)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-01-26 23:45:19 -08:00
Ray Huang
66cbd57755
Improve docs for multiple instances of controller on one cluster (#10882)
* Added note to include '--ingress-class-by-name=true' for Multiple Ingress controllers instruction.

* Add note to include '-ingress-class-by-name=true' for Multiple Controllers instruction.
2024-01-19 22:04:14 +01:00
Tobias Mühl
00db204d86
Fix OpenTelemetry docs typo (#10836) 2024-01-12 14:00:44 +01:00
Lucien Boix
5a72a42235
Update multiple-ingress.md (#10704)
Fixing a typo that can mislead people : it looks like the prefix k8s.io/ is automatically stripped from ingress-class parameter value (which is not the case)
2024-01-04 15:40:32 +01:00
Tore
7f723c5985
docs: add index for global-auth-always-set-cookie (#10670) 2023-11-22 11:59:09 +01:00
Tore
cd3e5d323d
docs: Update configmap docs for enable-global-auth option (#10667)
* docs: Include default annotation prefix is docs

Most docs includes the annotation prefix

* docs: Update annotations docs for global-auth

Correct documentation to reflect whats possible. It is not possible to use `enable-global-auth: false` in ConfigMap.
2023-11-21 14:43:36 +01:00
chriss-de
ad406b64d8
Add override for proxy_intercept_errors when using Custom HTTP Errors (#9497)
* added proxy-intercept-errors config option

* fixed error when comparing locations

* fixed missing location config from annotation
added e2e test

* reversed logic for proxy-intercept-errors to disable-proxy-intercept-errors

* reversed logic to disable-proxy-intercept-errors

* reversed logic

* default has to be false

* put comment in same line as return

* run gofmt

* fixing wrong Boilerplate header

* updated code to new IngressAnnotation interface

* fixes to satisfy PR comments

* synced with upstream; fixed typo

* gofumpt disableproxyintercepterrors.go

* gofumpt
2023-11-17 05:43:54 +01:00
Ricardo Katz
9ed0d7f7af
Separate third party NGINX configuration (#10470)
* Document container separation

* Separate configurations
2023-11-03 14:46:32 +01:00
Michael Dreher
8c3aeaae4a
Increase HSTS max-age to default to one year (#10564) 2023-10-27 12:50:37 +02:00
Marcelo Cyreno
b1ac371dee
Documenting flag enable-auth-access-log (#10518) (#10535) 2023-10-19 03:43:20 +02:00
Long Wu Yuan
3732fc6ab6
added warning for configuration-snippets usage (#10492) 2023-10-11 15:16:47 +02:00
Ricardo Katz
cbed4c6831
Remove legacy GeoIP from controller (#10495) 2023-10-11 08:53:55 +02:00
ChangZhuo Chen (陳昌倬)
a4de4debec
docs(tls): add warning for not supporting TLSv1, TLSv1.1 (#10473) 2023-10-03 15:56:07 +02:00
Stefan Lobbenmeier
ae86c07298
Fix link from #10456 (#10458) 2023-09-28 09:02:34 -07:00
Stefan Lobbenmeier
e2ee3346db
Link configuration snippet to allow-snippet-annotations (#10456) 2023-09-28 08:38:34 -07:00
Chen Chen
d96b3f0082
Add a flag to enable or disable aio_write (#10394)
* Add a flag to enable or disable aio_write

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix e2e test for aio_write

Signed-off-by: z1cheng <imchench@gmail.com>

* Remove redundant spaces to fix the 2e test

Signed-off-by: z1cheng <imchench@gmail.com>

---------

Signed-off-by: z1cheng <imchench@gmail.com>
2023-09-11 05:56:12 -07:00
Mathieu Benoit
1bb8a9bba0
Update external-articles.md - advanced setup with GKE/Cloud Armor/IAP (#10372)
* Update external-articles.md

* Update external-articles.md - article publicly available
2023-09-11 05:48:11 -07:00
Ricardo Katz
cf889c6c47
Disable user snippets per default (#10393)
* Disable user snippets per default

* Enable snippet on tests
2023-09-10 20:02:10 -07:00
Son Bui
c3a28ab45d
fix: path with sepecial characters warning #10281 #10308 (#10330) 2023-09-03 14:09:47 -07:00
logica
dd6145b2d3
Bump k8s.io/component-base from 0.26.4 to 0.27.4 (Replace Topology Aware Hints with Topology Aware Routing) (#10282)
* Bump k8s.io/component-base from 0.26.4 to 0.27.4

Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.26.4 to 0.27.4.
- [Commits](https://github.com/kubernetes/component-base/compare/v0.26.4...v0.27.4)

---
updated-dependencies:
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* changed annotation to TopologyMode

* fixed documents

* fixed test

* using api constraint for test deployment options

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-11 07:17:27 -07:00
Jack
d9baff90d7
docs: swap explanation to match example (#10220) 2023-08-11 07:13:27 -07:00
Gabor Lekeny
5d8185c9d7
Handle request_id variable correctly in auth requests (#9219)
* Handle $request_id variable correctly in auth requests

* Make share_all_vars configurable

* Fix test name
2023-08-07 06:16:32 -07:00
Ricardo Katz
c5f348ea2e
Implement annotation validation (#9673)
* Add validation to all annotations

* Add annotation validation for fcgi

* Fix reviews and fcgi e2e

* Add flag to disable cross namespace validation

* Add risk, flag for validation, tests

* Add missing formating

* Enable validation by default on tests

* Test validation flag

* remove ajp from list

* Finalize validation changes

* Add validations to CI

* Update helm docs

* Fix code review

* Use a better name for annotation risk
2023-07-21 20:32:07 -07:00
Alex Matchneer
125b3be6f9
Clarify TCP/UDP service docs (#10146)
In the current state, the docs on TCP/UDP aren't really clear on exactly whether/how TCP/UDP traffic is supported. This is an attempt to clarify the limitations inherent to k8s Ingress resources vs what can be accomplished with this controller.
2023-07-06 16:47:04 -07:00
Ricardo Katz
ebb6314494
Deprecate and remove AJP support (#10158) 2023-07-02 02:26:49 -07:00
Brendan Kamp
30de5999c1
fix: obsolete warnings (#10029)
Signed-off-by: Spazzy <brendankamp757@gmail.com>
2023-06-18 12:16:21 -07:00