Manuel Alejandro de Brito Fontes
d251a50b52
Merge pull request #1076 from aledbf/ssl-tests
...
Add more ssl test cases
2017-08-05 19:37:01 -04:00
Manuel de Brito Fontes
d648094296
Add more ssl test cases
2017-08-05 19:14:38 -04:00
Manuel Alejandro de Brito Fontes
0fad23af25
Merge pull request #1002 from farcaller/patch-1
...
Fixed the ambiguous error message
2017-08-05 15:36:48 -04:00
Manuel Alejandro de Brito Fontes
6403efe0d4
Merge pull request #1058 from sethpollack/rpm
...
add per minute rate limiting
2017-08-03 20:44:49 -04:00
Manuel Alejandro de Brito Fontes
1045e432c7
Merge pull request #1043 from antoineco/ep-targetref
...
Return reference to object providing Endpoint
2017-08-02 19:56:22 -04:00
Seth Pollack
40a9a54082
add per minute rate limiting
2017-08-01 23:24:48 -04:00
Vladimir Pouzanov
e62bfff135
Pass through the original error text
2017-08-01 18:36:01 +01:00
Manuel de Brito Fontes
98a95282f9
Add field FileSHA in BasicDigest struct
2017-07-31 22:08:09 -04:00
Antoine Cotten
6035e55ec3
Return reference to object providing Endpoint
2017-07-29 15:27:56 +02:00
Manuel de Brito Fontes
fe1b913f21
Add function to allow custom values in Ingress status
2017-07-28 20:26:35 -04:00
Manuel de Brito Fontes
facf8f0f6f
Alternative syncSecret approach #1030
2017-07-27 22:17:22 -04:00
Joao Morais
4453a06caa
Change missing secret name log level to V(3)
2017-07-27 13:57:34 -03:00
Manuel Alejandro de Brito Fontes
ce5e3999ab
Merge pull request #1027 from aledbf/doc-equals
...
Lint code
2017-07-27 10:39:41 -04:00
Manuel de Brito Fontes
681ca36b1c
Lint code
2017-07-26 23:07:59 -04:00
Manuel de Brito Fontes
dbe1880f60
Fix random watch errors
2017-07-26 22:31:34 -04:00
Minhan Xia
ee3054dd52
adapt gce controller to godep updates
2017-07-25 17:09:27 -07:00
Vladimir Pouzanov
60926d4cca
Fixed the ambiguous error message
2017-07-21 17:45:23 +01:00
Manuel de Brito Fontes
4fb61c73d1
Update go dependencies
2017-07-20 10:43:09 -07:00
Manuel de Brito Fontes
7f2b68b7df
Update generic controller
2017-07-20 10:43:09 -07:00
Manuel Alejandro de Brito Fontes
fbb96f4c83
Merge pull request #981 from chrismoos/service_upstream
...
Add annotation to allow use of service ClusterIP for NGINX upstream.
2017-07-19 12:20:30 -04:00
Manuel Alejandro de Brito Fontes
e59ac13eba
Merge pull request #991 from aledbf/ssl-refactoring
...
Remove secret sync loop
2017-07-19 12:19:36 -04:00
Chris Moos
666bcca495
Add annotation to allow use of service ClusterIP for NGINX upstream.
2017-07-19 16:02:04 +02:00
Manuel de Brito Fontes
5a1f845593
Remove secret sync loop
2017-07-18 22:54:32 -04:00
Manuel de Brito Fontes
bd621359ac
Check errors generating pem files
2017-07-18 16:26:28 -04:00
Joao Morais
8c3bb17f56
Add sort-backends command line option
2017-07-16 11:00:02 -03:00
Manuel Alejandro de Brito Fontes
a6f7c93245
Merge pull request #973 from stibi/945-nginx-no-reload
...
check number of servers in configuration comparator
2017-07-15 13:43:58 -04:00
Martin Stiborsky
299d4c373c
check number of servers in configuration comparator
2017-07-15 17:40:28 +02:00
Manuel Alejandro de Brito Fontes
438a2fa70b
Merge pull request #967 from claytononeill/runningaddresses-typo
...
Fix runningAddresses typo
2017-07-14 11:01:29 -04:00
Clayton O'Neill
fb42b9979d
Fix runningAddresses typo
2017-07-14 10:33:33 -04:00
Clayton O'Neill
ad583c3acb
Fix error checking for pod name & NS
...
Previously it would just check if POD_NAME *or* POD_NAMESPACE was set, which
could lead to very bizarre failure modes.
2017-07-14 09:26:50 -04:00
Manuel de Brito Fontes
14a02d128c
Simplify handling of ssl certificates
2017-07-12 15:29:03 -04:00
Manuel de Brito Fontes
6a4679b028
Add support for proxy protocol in TCP services
2017-07-02 17:09:09 -04:00
Manuel Alejandro de Brito Fontes
9af4fb573e
Merge pull request #906 from aledbf/fix-race-condition
...
Fix race condition with closed channels
2017-06-28 14:47:57 -04:00
Gorka Lerchundi Osa
5503e8d0e9
nginx/proxy: allow specifying next upstream behaviour
2017-06-27 23:30:43 +02:00
Manuel de Brito Fontes
8e8277f1a4
Fix race condition with closed channels
2017-06-26 13:16:53 -04:00
Manuel de Brito Fontes
67e0e0b920
Fix nginx sticky sessions
2017-06-25 21:30:30 -04:00
Manuel de Brito Fontes
3b903c5913
Always reload after a change in the configuration
2017-06-25 18:12:07 -04:00
Manuel Alejandro de Brito Fontes
312c9ec7e2
Merge pull request #871 from aledbf/fix-sticky
...
Add feature to allow sticky sessions per location
2017-06-23 13:22:12 -04:00
Manuel de Brito Fontes
83d03a19a6
Add feature to allow sticky sessions per location
2017-06-22 14:12:57 -04:00
Manuel de Brito Fontes
4ee2bdc302
Add support for SubjectAltName in SSL certificates
2017-06-20 19:47:06 -04:00
Manuel de Brito Fontes
05a976f9e5
Add flag to skip the update of Ingress status on shutdown
2017-06-20 09:47:18 -04:00
Manuel de Brito Fontes
92eeb7828b
Implement Equaler
2017-06-15 00:17:54 -04:00
Manuel de Brito Fontes
75a4a61254
WIP: Avoid reloads implementing Equals in structs
2017-06-14 23:58:31 -04:00
Manuel de Brito Fontes
45c77a951d
Code linting
2017-06-14 19:49:35 -04:00
Manuel de Brito Fontes
aa8c66ec01
Remove dead code
2017-06-14 19:42:13 -04:00
Manuel Alejandro de Brito Fontes
bd1429ddac
Merge pull request #855 from aledbf/lint
...
Lint code
2017-06-13 11:31:32 -04:00
Giancarlo Rubio
b4c8a66b1f
Don't expose certificate metrics for default server
...
The default server has a self signed certificate so it's not important to monitor
2017-06-13 16:01:05 +02:00
Fabian Ruff
8304feb497
ensure private key and certificate match
...
Adding an ingress tls secret with a non matching certificate and private key break at least the nginx-controller permanently until the offending secret is deleted.
In that case nginx refuses to start/reload with an error like this:
```
Error: exit status 1
2017/06/13 12:16:53 [emerg] 51#51: SSL_CTX_use_PrivateKey_file("/ingress-controller/ssl/monsoon3-tls-baremetal-3-eu-de-1-cloud-sap.pem") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
nginx: [emerg] SSL_CTX_use_PrivateKey_file("/ingress-controller/ssl/tls-baremetal-3-example-com.pem") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
nginx: configuration file /tmp/nginx-cfg728491545 test failed
```
2017-06-13 15:16:24 +02:00
Manuel de Brito Fontes
aacb7a5abb
Lint
2017-06-13 09:07:14 -04:00
Giancarlo Rubio
d9cf043552
Instrument nginx to expose metric "ssl certficate expiration time "
...
Add a console warning message 10 days before the certificate expire
2017-06-13 13:44:00 +02:00
