Manuel Alejandro de Brito Fontes
d781d99797
Fixes for gosec
2020-12-04 20:29:07 -03:00
Manuel Alejandro de Brito Fontes
1389cc0e80
Refactor extraction of ingress pod details
2020-11-19 17:31:28 -03:00
Manuel Alejandro de Brito Fontes
e659bb2963
Improve ingress class error message
2020-11-02 20:37:40 -03:00
Manuel Alejandro de Brito Fontes
703c2d6f8e
Enable validation of ingress definitions from extensions package
2020-10-26 10:50:44 -03:00
Manuel Alejandro de Brito Fontes
108637bb1c
Migrate to structured logging (klog)
2020-09-27 18:59:57 -03:00
Manuel Alejandro de Brito Fontes
29ea30a4e8
Add events for NGINX reloads
2020-09-27 17:16:09 -03:00
Matthew Silverman
9612180f6e
reject annotations with default prefix in the case of an override
2020-09-10 09:16:44 -04:00
Manuel Alejandro de Brito Fontes
b1f0d28634
Require Kubernetes v1.14 or higher and deprecate extensions
2020-09-02 10:00:16 -04:00
Tore Lønøy
903e511b9d
fix: log warning if empty ingress class is monitored. Improve docs related to --ingress-class
2020-08-21 09:25:43 +02:00
Loo Zheng Yuan
af29ec1137
fix variable ordering in error message
2020-08-11 20:06:14 +08:00
Manuel Alejandro de Brito Fontes
cb86c5698c
Migrate to klog v2
2020-08-08 21:01:03 -04:00
Mason Staugler
a3f2be6b90
Fixup docs for the ingress-class flag.
...
According to this issue, there is no way to handle all ingress classes.
https://github.com/kubernetes/ingress-nginx/issues/3101
2020-06-26 13:12:48 -04:00
Bo0km4n
7ab0916c92
Resolve conflicts
2020-06-20 17:13:31 +09:00
Bo0km4n
53a6b0fd3b
Configurable metrics max batch size
2020-06-20 15:58:14 +09:00
Kubernetes Prow Robot
e9a08abffe
Merge pull request #5700 from sylr/user-agent
...
Configure User-Agent
2020-06-12 18:47:55 -07:00
Sylvain Rabot
09074a8589
Configure User-Agent
...
Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
2020-06-11 17:34:38 +02:00
Manuel Alejandro de Brito Fontes
4179f71cc4
Check service If publish-service flag is defined
2020-05-14 09:13:43 -04:00
Manuel Alejandro de Brito Fontes
efbb3f9fc8
Add support for IngressClass and ingress.class annotation
2020-04-22 09:15:32 -04:00
Manuel Alejandro de Brito Fontes
9c6873a55d
Remove deprecated flags and update docs
2020-04-12 10:07:33 -04:00
Manuel Alejandro de Brito Fontes
04ef782c57
Migrate ingress.class annotation to new IngressClassName field
2020-03-31 12:20:01 -03:00
Manuel Alejandro de Brito Fontes
630278f730
Increase e2e concurrency
2020-03-27 21:42:23 -03:00
Manuel Alejandro de Brito Fontes
a46126a034
Update client-go methods to support context and and new create and delete options
2020-03-27 19:52:51 -03:00
Maxim Pogozhiy
78576a9bbc
Add Maxmind Editions support
2020-03-19 19:36:10 +07:00
Manuel Alejandro de Brito Fontes
2c5819e1b3
Add flag to allow custom ingress status update intervals ( #5050 )
2020-02-10 16:52:50 -03:00
Manuel Alejandro de Brito Fontes
66ef05849f
Refactor how to handle sigterm and nginx process goroutine ( #4959 )
2020-01-25 14:52:31 -03:00
Manuel Alejandro de Brito Fontes
74944b99e9
Enable download of GeoLite2 databases ( #4896 )
2020-01-08 19:46:43 -03:00
Manuel Alejandro de Brito Fontes
8db541e24b
Remove /build endpoint ( #4875 )
2019-12-31 13:49:04 -03:00
Manuel Alejandro de Brito Fontes
1d46ec2eb2
Cleanup test
2019-12-10 22:45:11 -03:00
Manuel Alejandro de Brito Fontes
19d596b72b
Allow custom CA certificate when flag --api-server is specified ( #4807 )
2019-12-05 19:12:54 -03:00
Andrea Spacca
203a3ed455
ISSUE-4244 comply with --health-check-path ( #4619 )
2019-09-29 14:37:57 -03:00
Manuel Alejandro de Brito Fontes
d5d2b4037c
Fix ports collision when hostNetwork=true ( #4617 )
2019-09-28 17:30:57 -03:00
Manuel Alejandro de Brito Fontes
c2935ca35c
Refactor health checks and wait until NGINX process ends
2019-09-01 15:31:27 -04:00
Manuel Alejandro de Brito Fontes
23ed3ba4c4
Fix file permissions to support volumes
2019-08-15 20:48:37 -04:00
Manuel Alejandro de Brito Fontes
80bd481abb
Only support SSL dynamic mode
2019-08-13 17:33:34 -04:00
Pierrick Charron
29788452b6
Fix broken test's filename
2019-07-26 18:15:25 -04:00
Manuel Alejandro de Brito Fontes
3d7a09347d
Apply fixes suggested by staticcheck
2019-07-08 16:18:52 -04:00
Manuel Alejandro de Brito Fontes
8807db9748
Check and complete intermediate SSL certificates
2019-07-04 19:13:21 -04:00
Manuel Alejandro de Brito Fontes
004d0c8214
Fix go imports
2019-06-30 18:58:18 -04:00
Manuel Alejandro de Brito Fontes
3e86064e04
Remove kubeclient configuration
2019-06-29 16:12:59 -04:00
Kubernetes Prow Robot
6f1261015b
Merge pull request #4127 from aledbf/migration
...
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 09:28:19 -07:00
Manuel Alejandro de Brito Fontes
84102eec2b
Migrate to new networking.k8s.io/v1beta1 package
2019-06-13 11:32:39 -04:00
Colstuwjx
b28577a4bf
Fix: fillout missing health check timeout on health check.
2019-06-13 21:15:50 +08:00
Manuel Alejandro de Brito Fontes
32fda20378
Remove stop controller endpoint
2019-05-17 18:42:22 -04:00
Thibault Jamet
1cd17cd12c
Implement a validation webhook
...
In case some ingress have a syntax error in the snippet configuration,
the freshly generated configuration will not be reloaded to prevent tearing down existing rules.
Although, once inserted, this configuration is preventing from any other valid configuration to be inserted as it remains in the ingresses of the cluster.
To solve this problem, implement an optional validation webhook that simulates the addition of the ingress to be added together with the rest of ingresses.
In case the generated configuration is not validated by nginx, deny the insertion of the ingress.
In case certificates are mounted using kubernetes secrets, when those
changes, keys are automatically updated in the container volume, and the
controller reloads it using the filewatcher.
Related changes:
- Update vendors
- Extract useful functions to check configuration with an additional ingress
- Update documentation for validating webhook
- Add validating webhook examples
- Add a metric for each syntax check success and errors
- Add more certificate generation examples
2019-04-18 19:07:04 +02:00
Elvin Efendi
13a7e2c5d0
refactor GetFakeSSLCert
2019-04-14 09:35:48 -04:00
Elvin Efendi
417af76e97
properly handle default and custom default certs in dynamic ssl mode
2019-04-13 12:32:06 -04:00
Elvin Efendi
1d59e4f1fe
enable dynamic SSL mode by default
2019-03-17 14:58:06 -04:00
Alex Kursell
d8fe2d992b
Remove useless nodeip call and deprecate --force-namespace-isolation
2019-03-11 18:19:13 -04:00
Elvin Efendi
70df5e03e5
clean up certificate processing
2019-03-11 00:53:06 -04:00
Manuel Alejandro de Brito Fontes
34b0580225
Replace Status port using a socket
2019-02-06 18:00:10 -03:00