Commit graph

167 commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
def5155aa6 Merge pull request #1210 from sethpollack/whitelist
add rate limit whitelist
2017-08-22 08:23:45 -04:00
Manuel Alejandro de Brito Fontes
9863140b8c Merge pull request #1186 from diazjf/client-body-buffer-size
Add annotation for client-body-buffer-size per location
2017-08-22 08:02:35 -04:00
Seth Pollack
6253c34266 add rate limit whitelist 2017-08-22 07:53:52 -04:00
Fernando Diaz
e9ffbf0f87 Add annotation for client-body-buffer-size per location
Adds an annotation which allows for client-body-buffer-size to
be configured per specific locations specified in the ingress
resource yaml.
2017-08-21 23:12:30 -05:00
Manuel de Brito Fontes
884b388438 Fix template error 2017-08-21 16:06:38 -03:00
Manuel Alejandro de Brito Fontes
6ef63438b6 Merge pull request #1190 from aledbf/disable-ssl-passthrough
Add flag to disable SSL passthrough
2017-08-20 22:25:06 -04:00
Manuel de Brito Fontes
daa9fea41a Add flag to disable SSL Passthrough 2017-08-20 22:34:31 -03:00
Manuel de Brito Fontes
b2be9f0e04 Fix sign in URL 2017-08-20 20:39:58 -03:00
Manuel de Brito Fontes
ed68194688 Add support for temporal and permanent redirects 2017-08-20 15:07:25 -03:00
Fernando Diaz
47e4dd59a8 Merge branch 'master' into server-alias 2017-08-17 17:32:48 -05:00
Fernando Diaz
e12138f4dc Remove any aliases that conflict with a hostname
Removes the alias association if an existing server
with the same hostname as the alias exists. This is
done to disallow any duplicate server creation when
the alias annotation is provided.
2017-08-17 13:05:52 -05:00
Manuel de Brito Fontes
5e08600d2f Use variable request_uri as redirect after auth 2017-08-17 14:49:44 -03:00
Fernando Diaz
62fea9aa01 Update Server Alias Annotation with Review Changes
Updates the Server-Alias annotation to create another server
containing the same configuration as the current server, but
with the name provided in the annotation.
2017-08-15 14:49:04 -05:00
Fernando Diaz
ac504bdbc0 Add support for Server Alias in Nginx
Adds support for server alias in nginx. Adds a new annotation
which allows us to specify a server alias that will be appended
to the server name.
2017-08-13 13:01:00 -05:00
Manuel de Brito Fontes
fb3c7c3714 Cleanup remote address in nginx template 2017-08-10 11:41:14 -04:00
Manuel Alejandro de Brito Fontes
91077a2ed8 Merge pull request #1088 from aledbf/worker-timeout
Configure nginx worker timeout
2017-08-08 14:41:33 -04:00
Manuel de Brito Fontes
106cfca1a6 Configure nginx worker timeout 2017-08-08 14:17:49 -04:00
zhengjiajin
f8c4c0da21 Fix some broken link 2017-08-08 17:50:14 +08:00
Manuel Alejandro de Brito Fontes
cf732e846e Merge pull request #1074 from aledbf/rem-lua
Remove lua and use fastcgi to render errors
2017-08-07 22:15:32 -04:00
zhengjiajin
13ab894e6f feat/proxytimeout support proxy timeout for stream type 2017-08-08 02:01:12 +08:00
Manuel de Brito Fontes
a091d3ede7 Remove lua and use fastcgi to render errors 2017-08-05 16:29:58 -04:00
Bastian Hofmann
38d198bfde Make proxy_headers_hash_bucket_size and proxy_headers_hash_max_size configurable in the nginx controller
See https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_headers_hash_bucket_size and https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_headers_hash_max_size
2017-07-13 13:57:03 +02:00
n1koo
02832dec6c Add support for add_headers 2017-07-10 09:55:07 +03:00
Georgiy Kutsurua
d56e261835 Sets parameters for a shared memory zone that will keep states for various keys. 2017-07-07 15:45:13 +04:00
Remington Reackhof
1b3f0acde1 add configmap and template changes for comma separated proxy-real-ip-cidr list 2017-07-06 10:54:36 -05:00
Manuel de Brito Fontes
6a4679b028 Add support for proxy protocol in TCP services 2017-07-02 17:09:09 -04:00
Manuel de Brito Fontes
844ea6a864 Add arm and ppc64le support 2017-06-28 20:22:59 -04:00
Manuel Alejandro de Brito Fontes
3c9ac43058 Merge pull request #919 from Collaborne/pr/redirect-per-location
Apply the 'ssl-redirect' annotation per-location
2017-06-28 13:43:44 -04:00
Andreas Kohn
04346a8ec2
Apply the 'ssl-redirect' redirect per-location
This is needed to avoid ingress definitions with different settings for SSL
redirection conflicting with each other.

NB: This was discussed in the review of #427, but ultimately not addressed.
2017-06-28 11:18:06 +02:00
Manuel Alejandro de Brito Fontes
005ed5243f Merge pull request #907 from glerchundi/master
nginx/proxy: allow specifying next upstream behaviour
2017-06-27 19:24:16 -04:00
Gorka Lerchundi Osa
5503e8d0e9 nginx/proxy: allow specifying next upstream behaviour 2017-06-27 23:30:43 +02:00
Manuel de Brito Fontes
5f02858623 Improve X-Forwarded-Host support 2017-06-27 10:08:14 -04:00
Manuel de Brito Fontes
83d03a19a6 Add feature to allow sticky sessions per location 2017-06-22 14:12:57 -04:00
Manuel de Brito Fontes
6e2203594e Add upstream keepalive connections cache 2017-06-21 23:52:06 -04:00
Manuel de Brito Fontes
85e6d30844 Improve variable configuration for source IP address 2017-06-21 00:52:12 -04:00
Manuel de Brito Fontes
df6795c0af Update nginx-slim to 0.19 2017-06-20 22:23:24 -04:00
Manuel de Brito Fontes
92e3b5ba78 Lint nginx code 2017-06-14 23:05:04 -04:00
Manuel de Brito Fontes
51b2e0f2cb Fix IPv6 UDP stream section 2017-06-13 08:45:30 -04:00
Giancarlo Rubio
fffddebdf8 add semicolon 2017-06-13 13:05:43 +02:00
Manuel Alejandro de Brito Fontes
cdbf2aad37 Merge pull request #824 from aledbf/update-nginx-controller
Update nginx-slim to 0.18
2017-06-12 18:39:15 -04:00
Cory Klein
fa70e5e905 Make log format json escaping configurable
This will allow json logging in nginx ingress controllers which greatly
improves ease of log indexing and searching via elasticsearch.

After this change is made, users could set the following property in the
ingress configmap to enable json logging:

log-format-upstream: '{"proxy_protocol_addr": "$proxy_protocol_addr", "proxy_add_x_forwarded_for": "$proxy_add_x_forwarded_for", "remote_user": "$remote_user", "time_iso8601": "$time_iso8601", "request": "$request", "status": "$status", "body_bytes_sent": "$body_bytes_sent", "http_referer": "$http_referer", "http_user_agent": "$http_user_agent", "request_length": "$request_length", "request_time": "$request_time", "proxy_upstream_name": "$proxy_upstream_name", "upstream_addr": "$upstream_addr", "upstream_response_length": "$upstream_response_length", "upstream_response_time": "$upstream_response_time", "upstream_status": "$upstream_status"}'
2017-06-09 15:32:11 -06:00
Manuel Alejandro de Brito Fontes
dbb12afbb9 Merge pull request #829 from rlguarino/ross/2017-06-08T18-48-35-07-00
feat(template): wrap IPv6 addresses in []
2017-06-09 13:21:30 -04:00
Ross Guarino
54f6729dc8 feat(template): wrap IPv6 addresses in []
Add formatIP helper function which will wrap IPv6 addresses
in [] and print IPv4 addresses as is.

Closes #828
2017-06-08 20:11:00 -07:00
Manuel de Brito Fontes
a4793eda8c Update nginx-slim to 0.18 2017-06-07 11:33:13 -04:00
Olve Sæther Hansen
d4600a87b5 Added client_max_body_size to authPath location
Seems like nginx denies the request because it would be over the max body size,
event if `proxy_pass_request_body` is `off`.

This fixes 811
2017-06-02 22:40:29 +02:00
Manuel Alejandro de Brito Fontes
66b4c2606b Merge pull request #809 from aledbf/fix-variables-map
Fix dynamic variable name
2017-06-02 11:59:32 -04:00
Manuel de Brito Fontes
b70e9ca078 Fix dynamic variable name 2017-06-02 11:12:02 -04:00
Arjan Schaaf
a854dc71b2 #789 removing duplicate X-Real-IP header introduced 4bd4bf3be6 2017-05-29 11:43:05 +02:00
Manuel Alejandro de Brito Fontes
32f24380ec Merge pull request #787 from aledbf/pass-server-header
Add setting to allow returning the Server header from the backend
2017-05-28 19:16:58 -04:00
Manuel de Brito Fontes
2f20c6bfcb Add setting to allow returning the Server header from the backend 2017-05-28 17:40:25 -04:00