Manuel Alejandro de Brito Fontes
f93670c2b2
SSL expiration metrics cannot be tied to dynamic updates
2019-06-05 11:04:27 -04:00
Manuel Alejandro de Brito Fontes
1dd5493404
Partially revert usage of kustomize for installation ( #4159 )
2019-06-05 10:59:38 -04:00
Kubernetes Prow Robot
185aa01505
Merge pull request #4153 from Niksko/use-regex-annotation
...
Add clarification on how to enable path matching
2019-06-04 19:05:53 -07:00
Nikolas Skoufis
d9e629d4da
Add clarification on how to enable path matching
...
The fact that you need to explicitly add the annotation is easy to miss.
This makes this more explicit, while leaving the finer details to the
linked annotations document.
2019-06-05 11:14:50 +10:00
Manuel Alejandro de Brito Fontes
1962f02dae
Update nginx ( #4150 )
...
* Update nginx image
* Fix IPV6 test issues in Prow
2019-06-04 12:15:03 -04:00
Ionut Craciunescu
941863c26a
update modsecurity to latest, libmodsecurity to v3.0.3 and owasp-scrs to v3.1.0 ( #4140 )
2019-06-04 12:13:40 -04:00
Kubernetes Prow Robot
6ba422aa46
Merge pull request #4135 from nicknovitski/deployment-api-appsv1
...
Use apps/v1 api group in e2e tests
2019-05-29 16:50:18 -07:00
Kubernetes Prow Robot
67aea883f5
Merge pull request #4133 from nicknovitski/parallel-psp-e2e-test
...
Run PodSecurityPolicy E2E test in parallel
2019-05-29 16:18:20 -07:00
Kubernetes Prow Robot
cc92e915d3
Merge pull request #4132 from zhucebuliaolongchuan/patch-1
...
Update README.md for external-auth Test 4
2019-05-29 14:40:22 -07:00
Nick Novitski
b0139b0b63
Run PodSecurityPolicy E2E test in parallel
...
Previously, this test modified a ClusterRole used by _every_ test. It had to be run serially, with a special teardown function that restored the state of the ClusterRole for any other serial tests.
Now every test gets its own cluster role, which means this test can be safely run in parallel with all the others, without any special teardown.
2019-05-29 14:13:04 -07:00
Nick Novitski
f186437cc1
Use apps/v1 api group in e2e tests
2019-05-29 12:12:45 -07:00
Chuan Long
782b56a5e6
Update README.md for external-auth Test 4
...
Title for Test 4 should be `secure service with valid auth header`. The current one is the same as Test 3.
2019-05-29 13:23:20 -05:00
Sergio Morales
d545251835
feature(collectors): Added services to collectorLabels and requests Countervec to capture the name of the kubernetes service used to serve the client request.
2019-05-27 11:19:42 -04:00
Kubernetes Prow Robot
a41710f201
Merge pull request #4101 from aledbf/reftactor-whitelist
...
Refactor whitelist from map to standard allow directives
2019-05-27 05:33:51 -07:00
Manuel Alejandro de Brito Fontes
1a6ea8c813
Refactor e2e test
2019-05-27 06:31:01 -04:00
Eugene Fedunin
4bb44f42a8
Added support for annotation session-cookie-change-on-failure
...
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.
Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
Manuel Alejandro de Brito Fontes
7d91eafcca
Refactor whitelist from map to standard allow directives
2019-05-27 04:55:38 -04:00
Kubernetes Prow Robot
c13b8f39b8
Merge pull request #3803 from ElvinEfendi/use-table-nkeys
...
use nkeys for counting lua table elements
2019-05-27 01:41:51 -07:00
Elvin Efendi
6980708356
use nkeys for counting lua table elements
2019-05-26 18:15:15 -04:00
Kubernetes Prow Robot
921d294900
Merge pull request #4123 from aledbf/update-nginx
...
Update nginx image to 0.86
2019-05-26 10:07:49 -07:00
Kubernetes Prow Robot
94654e77ec
Merge pull request #4122 from ElvinEfendi/update-nginx-and-dependencies
...
Update Nginx to 1.17.0 and upgrade some other modules
2019-05-26 09:03:48 -07:00
Manuel Alejandro de Brito Fontes
7af952c5f2
Update nginx image to 0.86
2019-05-26 11:28:35 -04:00
Elvin Efendi
95d5b04148
updated nginx and some other modules
2019-05-26 09:09:57 -04:00
Kubernetes Prow Robot
a18118c88b
Merge pull request #4109 from aledbf/use-real-server
...
Use real apiserver
2019-05-26 04:47:50 -07:00
Kubernetes Prow Robot
1534c8196a
Merge pull request #4120 from ElvinEfendi/lua-balancer-logging
...
log info when endpoints change for a balancer
2019-05-26 01:17:50 -07:00
Elvin Efendi
dbfc659b11
log info when endpoints change for a balancer
2019-05-25 23:50:18 -04:00
Kubernetes Prow Robot
c98cd52ad5
Merge pull request #4055 from nicknovitski/kustomize
...
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
Kubernetes Prow Robot
0fceaa87f8
Merge pull request #4113 from Shopify/goos-linux
...
Force GOOS to linux
2019-05-24 09:00:22 -07:00
Maxime Ginters
96a069a093
Force GOOS to linux
2019-05-24 10:33:16 -04:00
Manuel Alejandro de Brito Fontes
229d747a37
Update e2e images ( #4110 )
2019-05-24 02:47:14 +02:00
Kubernetes Prow Robot
8c50396e86
Merge pull request #4108 from aledbf/fix-flake
...
Add retry to LookupHost used to check the content of ExternalName
2019-05-23 06:34:28 -07:00
Manuel Alejandro de Brito Fontes
5870e6ccbf
Add retry to LookupHost used to check the content of ExternalName
2019-05-23 05:07:25 -04:00
Manuel Alejandro de Brito Fontes
572bcc4256
Update go dependencies
2019-05-23 04:58:14 -04:00
Manuel Alejandro de Brito Fontes
f05d90917a
Use a real apiserver to test the store
2019-05-23 04:58:14 -04:00
Kubernetes Prow Robot
a911e82856
Merge pull request #4102 from aledbf/listingresses
...
Refactor ListIngresses to add filters
2019-05-22 06:48:14 -07:00
Kubernetes Prow Robot
6b4889f31f
Merge pull request #4100 from aledbf/remove-stop
...
Remove stop controller endpoint
2019-05-22 06:10:13 -07:00
Manuel Alejandro de Brito Fontes
03ce697c53
Refactor ListIngresses to add filters
2019-05-22 05:37:44 -04:00
Kubernetes Prow Robot
cee53c1c3f
Merge pull request #4107 from MMeent/patch-1
...
Clear up some inconsistent / unclear wording
2019-05-21 07:00:54 -07:00
MMeent
21b6dac15c
Clear up some inconsistent / unclear wording
...
IPv6 enabled/disabled working was confusing or contradicting itself. This updates the wording to what is expected, based on the default values in the table above, and the behaviour that I could find in code.
2019-05-21 15:27:58 +02:00
Kubernetes Prow Robot
da937a8dc6
Merge pull request #4105 from reynaldiwijaya/master
...
UPT: Add variable to define custom sampler host and port
2019-05-21 05:56:45 -07:00
reynaldi.wijaya
7bb649f99a
UPT: Opentracing configmap documentation
2019-05-21 18:14:33 +08:00
reynaldi.wijaya
b5154699fd
UPT: Modify configmap to include jaeger sampler host and jaeger sampler port
2019-05-21 17:54:29 +08:00
reynaldi.wijaya
e6b3ee1c8c
UPT: Add variable to define custom sampler host and port, add commituser
2019-05-21 12:34:38 +08:00
Nick Novitski
702101098c
Rearrange deployment files into kustomizations
2019-05-19 12:35:54 -07:00
Kubernetes Prow Robot
644b09ca26
Merge pull request #4091 from weltschraet/modsecurity-memory
...
reduce memory footprint and cpu usage when modsecurity and owasp rule…
2019-05-19 06:27:11 -07:00
weltschraet
41e8402d8d
reduce memory footprint and cpu usage when modsecurity and owasp rules are enabled globally
2019-05-18 19:08:30 +02:00
Kubernetes Prow Robot
8a67e669a7
Merge pull request #4089 from alanjcastonguay/docs/use-gzip-configmap-defaults
...
Docs: configmap: use-gzip
2019-05-18 04:09:14 -07:00
Kubernetes Prow Robot
3761c12fd3
Merge pull request #4098 from kevinsimper/patch-1
...
Update configmap about adding custom locations
2019-05-18 03:39:12 -07:00
Kubernetes Prow Robot
c3ed96243b
Merge pull request #4099 from kppullin/patch-1
...
Docs - Update capture group `placeholder`
2019-05-18 03:09:13 -07:00
Kevin Pullin
c6eafbddbb
Docs - Update capture group placeholder
...
The current ingress example uses the `$2` capture group placeholder, however the description refers to the `$1` placeholder (this was previously correct, but was not updated when the ingress example changed from $1 to $2).
2019-05-17 16:01:17 -07:00