DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1811 commits 4 branches 217 tags 166 MiB
Commit graph

321 commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
def5155aa6 Merge pull request #1210 from sethpollack/whitelist 
add rate limit whitelist
 2017-08-22 08:23:45 -04:00
Manuel Alejandro de Brito Fontes
9863140b8c Merge pull request #1186 from diazjf/client-body-buffer-size 
Add annotation for client-body-buffer-size per location
 2017-08-22 08:02:35 -04:00
Seth Pollack
6253c34266 add rate limit whitelist 2017-08-22 07:53:52 -04:00
Fernando Diaz
e9ffbf0f87 Add annotation for client-body-buffer-size per location 
Adds an annotation which allows for client-body-buffer-size to
be configured per specific locations specified in the ingress
resource yaml.
 2017-08-21 23:12:30 -05:00
Manuel Alejandro de Brito Fontes
1da974f16b Merge pull request #1095 from zjj2wry/whilelist 
Fix(#1096) ingress annotation can not set ip in whitelist
 2017-08-21 18:46:15 -04:00
Manuel de Brito Fontes
90fc30c328 Add initial sync of secrets 2017-08-21 17:18:30 -03:00
danielqsj
68685edfc9 Add support for specific scheme for base url 2017-08-21 14:10:35 +08:00
Manuel de Brito Fontes
ed68194688 Add support for temporal and permanent redirects 2017-08-20 15:07:25 -03:00
Manuel Alejandro de Brito Fontes
f6413e292f Merge pull request #1123 from diazjf/server-alias 
Add support for Server Alias in Nginx
 2017-08-19 14:47:23 -04:00
xuzhonghu
9206a8baf9 fix typos 2017-08-18 17:46:19 +08:00
Fernando Diaz
47e4dd59a8 Merge branch 'master' into server-alias 2017-08-17 17:32:48 -05:00
Fernando Diaz
e12138f4dc Remove any aliases that conflict with a hostname 
Removes the alias association if an existing server
with the same hostname as the alias exists. This is
done to disallow any duplicate server creation when
the alias annotation is provided.
 2017-08-17 13:05:52 -05:00
zhengjiajin
ce3abe22b8 Fix Todo:convert sequence to table 2017-08-16 16:46:08 +08:00
Manuel de Brito Fontes
a2217ab1be Fix status update - changed in #1074 2017-08-15 18:34:36 -03:00
Fernando Diaz
62fea9aa01 Update Server Alias Annotation with Review Changes 
Updates the Server-Alias annotation to create another server
containing the same configuration as the current server, but
with the name provided in the annotation.
 2017-08-15 14:49:04 -05:00
hzxuzhonghu
db1a12718e update deprecated interface with versioned ones 2017-08-15 20:41:44 +08:00
Chen Peng
03a6ffda52 check fields len in dns.go 2017-08-14 11:53:40 +08:00
Fernando Diaz
ac504bdbc0 Add support for Server Alias in Nginx 
Adds support for server alias in nginx. Adds a new annotation
which allows us to specify a server alias that will be appended
to the server name.
 2017-08-13 13:01:00 -05:00
zhengjiajin
890c57f2ca feat(#733)Support nginx bandwidth control 2017-08-13 14:52:20 +08:00
Manuel de Brito Fontes
e1308d942f Fix Endpoint comparison 2017-08-11 15:08:11 -04:00
Manuel Alejandro de Brito Fontes
d28ea365fb Merge pull request #1104 from aledbf/ssl-check 
Simplify verification of hostname in ssl certificates
 2017-08-10 02:12:13 -04:00
Manuel de Brito Fontes
c3dd00c7b4 Simplify verification of hostname in ssl certificates 2017-08-09 23:27:57 -04:00
Kraig Amador
d0e4ddc1fd Exposing the generic controller event recorder so that controllers can add events to their ingresses 2017-08-09 10:42:12 -07:00
zhengjiajin
01e8815365 Fix ingress annotation can not set ip in whilelist 2017-08-09 21:03:26 +08:00
Manuel Alejandro de Brito Fontes
cf732e846e Merge pull request #1074 from aledbf/rem-lua 
Remove lua and use fastcgi to render errors
 2017-08-07 22:15:32 -04:00
Chen Peng
fa2c422a68 fix the same udp port and tcp port, update nginx.conf error 2017-08-07 11:22:06 +08:00
Manuel Alejandro de Brito Fontes
d251a50b52 Merge pull request #1076 from aledbf/ssl-tests 
Add more ssl test cases
 2017-08-05 19:37:01 -04:00
Manuel de Brito Fontes
d648094296 Add more ssl test cases 2017-08-05 19:14:38 -04:00
Manuel de Brito Fontes
69e766e042 Remove unnecessary periodic sync 2017-08-05 16:29:58 -04:00
Manuel de Brito Fontes
a091d3ede7 Remove lua and use fastcgi to render errors 2017-08-05 16:29:58 -04:00
Manuel Alejandro de Brito Fontes
0fad23af25 Merge pull request #1002 from farcaller/patch-1 
Fixed the ambiguous error message
 2017-08-05 15:36:48 -04:00
Manuel Alejandro de Brito Fontes
6403efe0d4 Merge pull request #1058 from sethpollack/rpm 
add per minute rate limiting
 2017-08-03 20:44:49 -04:00
Manuel Alejandro de Brito Fontes
1045e432c7 Merge pull request #1043 from antoineco/ep-targetref 
Return reference to object providing Endpoint
 2017-08-02 19:56:22 -04:00
Seth Pollack
40a9a54082
add per minute rate limiting 2017-08-01 23:24:48 -04:00
Vladimir Pouzanov
e62bfff135 Pass through the original error text 2017-08-01 18:36:01 +01:00
Manuel de Brito Fontes
98a95282f9 Add field FileSHA in BasicDigest struct 2017-07-31 22:08:09 -04:00
Antoine Cotten
6035e55ec3
Return reference to object providing Endpoint 2017-07-29 15:27:56 +02:00
Manuel de Brito Fontes
fe1b913f21 Add function to allow custom values in Ingress status 2017-07-28 20:26:35 -04:00
Manuel de Brito Fontes
facf8f0f6f Alternative syncSecret approach #1030 2017-07-27 22:17:22 -04:00
Joao Morais
4453a06caa Change missing secret name log level to V(3) 2017-07-27 13:57:34 -03:00
Manuel Alejandro de Brito Fontes
ce5e3999ab Merge pull request #1027 from aledbf/doc-equals 
Lint code
 2017-07-27 10:39:41 -04:00
Manuel de Brito Fontes
681ca36b1c Lint code 2017-07-26 23:07:59 -04:00
Manuel de Brito Fontes
dbe1880f60 Fix random watch errors 2017-07-26 22:31:34 -04:00
Minhan Xia
ee3054dd52 adapt gce controller to godep updates 2017-07-25 17:09:27 -07:00
Vladimir Pouzanov
60926d4cca Fixed the ambiguous error message 2017-07-21 17:45:23 +01:00
Manuel de Brito Fontes
4fb61c73d1 Update go dependencies 2017-07-20 10:43:09 -07:00
Manuel de Brito Fontes
7f2b68b7df Update generic controller 2017-07-20 10:43:09 -07:00
Manuel Alejandro de Brito Fontes
fbb96f4c83 Merge pull request #981 from chrismoos/service_upstream 
Add annotation to allow use of service ClusterIP for NGINX upstream.
 2017-07-19 12:20:30 -04:00
Manuel Alejandro de Brito Fontes
e59ac13eba Merge pull request #991 from aledbf/ssl-refactoring 
Remove secret sync loop
 2017-07-19 12:19:36 -04:00
Chris Moos
666bcca495 Add annotation to allow use of service ClusterIP for NGINX upstream. 2017-07-19 16:02:04 +02:00
Manuel de Brito Fontes
5a1f845593 Remove secret sync loop 2017-07-18 22:54:32 -04:00
Manuel de Brito Fontes
bd621359ac Check errors generating pem files 2017-07-18 16:26:28 -04:00
Joao Morais
8c3bb17f56 Add sort-backends command line option 2017-07-16 11:00:02 -03:00
Manuel Alejandro de Brito Fontes
a6f7c93245 Merge pull request #973 from stibi/945-nginx-no-reload 
check number of servers in configuration comparator
 2017-07-15 13:43:58 -04:00
Martin Stiborsky
299d4c373c check number of servers in configuration comparator 2017-07-15 17:40:28 +02:00
Manuel Alejandro de Brito Fontes
438a2fa70b Merge pull request #967 from claytononeill/runningaddresses-typo 
Fix runningAddresses typo
 2017-07-14 11:01:29 -04:00
Clayton O'Neill
fb42b9979d Fix runningAddresses typo 2017-07-14 10:33:33 -04:00
Clayton O'Neill
ad583c3acb Fix error checking for pod name & NS 
Previously it would just check if POD_NAME *or* POD_NAMESPACE was set, which
could lead to very bizarre failure modes.
 2017-07-14 09:26:50 -04:00
Manuel de Brito Fontes
14a02d128c Simplify handling of ssl certificates 2017-07-12 15:29:03 -04:00
Manuel de Brito Fontes
6a4679b028 Add support for proxy protocol in TCP services 2017-07-02 17:09:09 -04:00
Manuel Alejandro de Brito Fontes
9af4fb573e Merge pull request #906 from aledbf/fix-race-condition 
Fix race condition with closed channels
 2017-06-28 14:47:57 -04:00
Gorka Lerchundi Osa
5503e8d0e9 nginx/proxy: allow specifying next upstream behaviour 2017-06-27 23:30:43 +02:00
Manuel de Brito Fontes
8e8277f1a4 Fix race condition with closed channels 2017-06-26 13:16:53 -04:00
Manuel de Brito Fontes
67e0e0b920 Fix nginx sticky sessions 2017-06-25 21:30:30 -04:00
Manuel de Brito Fontes
3b903c5913 Always reload after a change in the configuration 2017-06-25 18:12:07 -04:00
Manuel Alejandro de Brito Fontes
312c9ec7e2 Merge pull request #871 from aledbf/fix-sticky 
Add feature to allow sticky sessions per location
 2017-06-23 13:22:12 -04:00
Manuel de Brito Fontes
83d03a19a6 Add feature to allow sticky sessions per location 2017-06-22 14:12:57 -04:00
Manuel de Brito Fontes
4ee2bdc302 Add support for SubjectAltName in SSL certificates 2017-06-20 19:47:06 -04:00
Manuel de Brito Fontes
05a976f9e5 Add flag to skip the update of Ingress status on shutdown 2017-06-20 09:47:18 -04:00
Manuel de Brito Fontes
92eeb7828b Implement Equaler 2017-06-15 00:17:54 -04:00
Manuel de Brito Fontes
75a4a61254 WIP: Avoid reloads implementing Equals in structs 2017-06-14 23:58:31 -04:00
Manuel de Brito Fontes
45c77a951d Code linting 2017-06-14 19:49:35 -04:00
Manuel de Brito Fontes
aa8c66ec01 Remove dead code 2017-06-14 19:42:13 -04:00
Manuel Alejandro de Brito Fontes
bd1429ddac Merge pull request #855 from aledbf/lint 
Lint code
 2017-06-13 11:31:32 -04:00
Giancarlo Rubio
b4c8a66b1f Don't expose certificate metrics for default server 
The default server has a self signed certificate so it's not important to monitor
 2017-06-13 16:01:05 +02:00
Fabian Ruff
8304feb497 ensure private key and certificate match 
Adding an ingress tls secret with a non matching certificate and private key break at least the nginx-controller permanently until the offending secret is deleted.

In that case nginx refuses to start/reload with an error like this:
```
Error: exit status 1
2017/06/13 12:16:53 [emerg] 51#51: SSL_CTX_use_PrivateKey_file("/ingress-controller/ssl/monsoon3-tls-baremetal-3-eu-de-1-cloud-sap.pem") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
nginx: [emerg] SSL_CTX_use_PrivateKey_file("/ingress-controller/ssl/tls-baremetal-3-example-com.pem") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
nginx: configuration file /tmp/nginx-cfg728491545 test failed
```
 2017-06-13 15:16:24 +02:00
Manuel de Brito Fontes
aacb7a5abb Lint 2017-06-13 09:07:14 -04:00
Giancarlo Rubio
d9cf043552 Instrument nginx to expose metric "ssl certficate expiration time " 
Add a console warning message 10 days before the certificate expire
 2017-06-13 13:44:00 +02:00
Justin Santa Barbara
cacc7bc21e Match ServicePort to Endpoints by Name 
We can never match on the EndpointPort.Port; that is the container port.
 2017-06-12 23:02:28 -04:00
Manuel de Brito Fontes
dca6de883c Simplify controller interface 2017-06-11 15:56:30 -04:00
Joao Morais
6b54ae58ac Create or delete ingress based on class annotation 2017-06-07 13:16:34 -03:00
Manuel Alejandro de Brito Fontes
3f0307a96e Merge pull request #792 from aledbf/refactor-has-synced 
Avoid checking if the controllers are synced
 2017-05-29 20:38:30 -04:00
Manuel Alejandro de Brito Fontes
5f71bde601 Merge pull request #753 from jcmoraisjr/jm-secret-tracker 
Move secretTracker updating to GetAuthCertificate()
 2017-05-29 17:01:40 -04:00
Manuel de Brito Fontes
5472555186 Avoid checking if the controllers are synced 2017-05-29 12:22:30 -04:00
Joao Morais
37f8c8bb40 Add ConfigureFlags() on controller interface 2017-05-24 21:03:52 -03:00
Manuel de Brito Fontes
797560ab8c Change recorder event scheme 2017-05-24 14:02:51 -04:00
Manuel de Brito Fontes
e347413649 Replace use of endpoint as locks with configmap 2017-05-24 01:55:13 -04:00
Joao Morais
c4d8011fa4 Move secretTracker updating to GetAuthCertificate() 2017-05-23 14:20:31 -03:00
Manuel Alejandro de Brito Fontes
42e40557b9 Merge pull request #749 from aledbf/remove-service-annotation 
Remove service annotation for namedPorts
 2017-05-22 23:34:42 -04:00
Manuel de Brito Fontes
d98a052972 Remove service annotation for namedPorts 2017-05-22 22:55:39 -04:00
Manuel de Brito Fontes
b1d6468d5d Replace NodeLegacyHostIP with NodeInternalIP 2017-05-20 20:11:58 -04:00
Manuel Alejandro de Brito Fontes
3dc7717a68 Merge pull request #716 from jcmoraisjr/jm-secure-ca 
Add secure-verify-ca-secret annotation
 2017-05-17 07:41:13 -04:00
Manuel Alejandro de Brito Fontes
8ca5fbeece Merge pull request #717 from caiyixiang/del_unuseful_var 
delete unuseful variable
 2017-05-15 22:19:18 -04:00
zouyee
bb72a03bc2 nodeController sync 2017-05-15 14:34:08 +08:00
caiyixiang
c05b7a0094 \core\pkg\ingress\errors:delete unuseful variable 2017-05-15 10:22:58 +08:00
Joao Morais
8b5a6e7661 Add secure-verify-ca-secret annotation 2017-05-14 19:14:27 -03:00
Manuel de Brito Fontes
a537d2d0fa Remove secrets from ingress after a Delete event 2017-05-11 22:19:16 -03:00
Manuel de Brito Fontes
5c9c5a301a Avoid periodic check for secret changes 2017-05-10 21:54:30 -03:00
Frieder Paape
3694788ed5 Adding support for externalIP Services 2017-05-09 16:23:40 +02:00
Manuel de Brito Fontes
5d9728b16e Convert CN SSL Certificate to lowercase before comparison 2017-05-01 20:01:05 -03:00