Kubernetes Submit Queue
bff5d0e5a2
Merge pull request #1879 from r2d4/map_hash_bucket_size
...
Automatic merge from submit-queue
Make map_hash_bucket_size configurable
I was getting an error while trying to run the nginx controller in minikube. This allows this nginx configuration option to be passed in through a configmap.
The default value depends on the processor's cache line size (32 | 64 | 128), however ServerNameHashBucketSize is determined similarly, so I've set it to the same default (64).
Fixes #1817
ref https://github.com/kubernetes/minikube/issues/611
cc @bprashanth
2016-11-03 09:39:47 -07:00
Kubernetes Submit Queue
e1faa8ebe9
Merge pull request #1813 from marketlogicsoftware/kayrus/nginx-log-format
...
Automatic merge from submit-queue
Added domain name and server port into nginx logs
I replaced dashes so it shouldn't brake log parsers.
In addition here are the [fluentd rules](dc71d8db4a/docker/fluentd/td-agent.conf (L230..L237)
) which parse these logs (requires https://github.com/tagomoris/fluent-plugin-parser plugin)
2016-10-25 09:51:43 -07:00
Matt Rickard
c8487c1973
Make map_hash_bucket_size configurable
2016-10-14 11:20:34 -07:00
Kubernetes Submit Queue
6456025035
Merge pull request #1830 from aledbf/dbackend
...
Automatic merge from submit-queue
[nginx-ingress-controller] Add support for default backend in Ingress rule
replaces #1759
2016-10-06 14:28:10 -07:00
Kubernetes Submit Queue
a2aae637dc
Merge pull request #1808 from whitlockjc/document-nginx-connection-header
...
Automatic merge from submit-queue
ingress/controllers/nginx: WebSocket documentation
For those that do not understand the default way in which nginx proxies
requests not containing a "Connection" header, the approach for enabling
WebSocket support might not make sense. This commit adds documentation
that explains why things are done this way.
2016-10-05 10:09:18 -07:00
Manuel de Brito Fontes
a0776997c3
Add support for default backend in Ingress rule
2016-10-04 09:28:21 -03:00
Manuel de Brito Fontes
541928e27d
Add external authentication using auth_request
2016-10-03 11:54:02 -03:00
kayrus
0bae7c4b7c
Added domain name and server port into nginx logs
2016-09-30 12:32:25 +02:00
Manuel de Brito Fontes
25bf00a1fc
Add docs about the log format
2016-09-29 22:16:32 -03:00
Jeremy Whitlock
0373ce6f31
ingress/controllers/nginx: WebSocket documentation
...
For those that do not understand the default way in which nginx proxies
requests not containing a "Connection" header, the approach for enabling
WebSocket support might not make sense. This commit adds documentation
that explains why things are done this way.
2016-09-29 15:42:46 -06:00
Manuel de Brito Fontes
75dd1d3c6a
Initialize proxy_upstream_name variable
2016-09-29 14:53:54 -03:00
Manuel de Brito Fontes
e74b8039a5
Add annotation to add CORS support
2016-09-27 13:35:57 -03:00
Kubernetes Submit Queue
741ac710cd
Merge pull request #1749 from aledbf/cloud-health-check
...
Automatic merge from submit-queue
[nginx-ingress-controller] Readiness probe that works behind a CP lb
fixes #1507
2016-09-26 15:44:12 -07:00
Manuel de Brito Fontes
4e722f9d6d
Add the name of the upstream in the log
2016-09-18 11:50:42 -03:00
Manuel de Brito Fontes
9d4dfe7609
Change readiness probe for nginx ingress that works behind a CP lb
2016-09-16 19:09:29 -03:00
Vy-Shane Xie
ae1c4503b3
Allow customisation of the nginx proxy_buffer_size directive via ConfigMap
2016-09-15 23:14:16 +08:00
Manuel de Brito Fontes
9f64273b9c
Use system self signed certificate as default SSL certificate
2016-07-22 19:30:00 -04:00
Manuel de Brito Fontes
3ef038c557
Change nginx status port to 18080 to avoid conflicts with port 8080
2016-07-20 16:39:46 -04:00
Prashanth B
1a04fa4881
Merge pull request #1398 from aledbf/nginx-httpoxy
...
Mitigate HTTPoxy Vulnerability
2016-07-20 10:56:17 -07:00
Prashanth B
5306ca4eb9
Merge pull request #1384 from atombender/issue_1883
...
Unset Authorization header when proxying
2016-07-20 10:54:57 -07:00
Prashanth B
eabad1c990
Merge pull request #1338 from aledbf/ssl-default-backend
...
[nginx-ingress-controller]: Add HTTPS default backend
2016-07-20 10:35:15 -07:00
Manuel de Brito Fontes
a38f2b21a1
Mitigate HTTPoxy Vulnerability
2016-07-20 09:55:46 -04:00
Manuel de Brito Fontes
d3d6c879d5
Refactor nginx certificate creation.
2016-07-18 17:08:00 -04:00
Alexander Staubo
5effb7b4e3
Unset Authorization header when proxying.
2016-07-17 22:02:02 -04:00
Manuel de Brito Fontes
8b25cc67a5
Improve nginx performance to match listen backlog with net.core.somaxconn
2016-07-11 23:04:21 -04:00
Manuel de Brito Fontes
a2d9c6e48b
Fix duplicated real_ip_header
2016-07-05 12:37:54 -04:00
Manuel de Brito Fontes
09d7b756db
Add support for dynamic TLS records and spdy
2016-07-01 14:07:48 -04:00
Prashanth B
b728a0cbd5
Merge pull request #1239 from aledbf/conditional-log
...
[nginx-ingress-controller]: Add support for conditional log of urls
2016-06-22 10:47:41 -07:00
Manuel de Brito Fontes
3cbe01767f
Add support for conditional log of urls
2016-06-18 18:04:07 -04:00
Manuel de Brito Fontes
e68aa3806a
Fix stats by country in nginx status page
2016-06-17 18:26:08 -04:00
Manuel de Brito Fontes
e792e940b2
Add ip/cidr white list support
2016-06-09 17:59:46 -04:00
Christian Simon
3ae80fd3cc
ingress: adds configurable SSL redirect nginx controller
...
* add global value to config map
* add per ingress value as annotation to ingress resources
2016-06-05 15:30:09 +01:00
Manuel de Brito Fontes
ae52257c3a
Watch for updates in configuration configmaps
2016-06-02 17:39:13 -04:00
Manuel de Brito Fontes
71ca55440b
Fix lint errors
2016-06-02 17:39:12 -04:00
Manuel de Brito Fontes
6b841edff0
Address comments. Move auth and healthcheck inside nginx package
2016-05-31 14:34:04 -04:00
Manuel de Brito Fontes
e603976721
Remove blank lines from template rendering
2016-05-31 13:43:36 -04:00
Manuel de Brito Fontes
ccaf15cdd4
Add support for rate limiting in ingress rule locations
2016-05-31 13:34:09 -04:00
Manuel de Brito Fontes
f8ea58882b
Add option to append a base tag in the head
2016-05-31 12:30:35 -04:00
Manuel de Brito Fontes
6968e23f8d
Add support for geoip in stats
2016-05-30 18:31:04 -04:00
Manuel de Brito Fontes
675ce396ac
Allow custom health checks
2016-05-27 21:31:21 -03:00
Manuel de Brito Fontes
28f982845d
Change errors to a list of codes
2016-05-26 11:52:17 -03:00
Manuel de Brito Fontes
5faa855e66
Custom errors should be optional
2016-05-26 11:52:17 -03:00
Manuel de Brito Fontes
2d7acf33c4
Enable configuration to disable http2
2016-05-25 23:50:15 -03:00
Manuel de Brito Fontes
c4228a150f
Add ssl certificate checksum to template
2016-05-25 23:05:23 -03:00
Manuel de Brito Fontes
8bf7007c40
Add support for sticky sessions
2016-04-28 11:37:13 -03:00
Manuel de Brito Fontes
a86a682429
Fix HSTS
2016-04-28 00:30:49 -03:00
Manuel de Brito Fontes
102c2eeaa4
Avoid iteration in pods during update of service annotations
2016-04-27 23:28:21 -03:00
Manuel de Brito Fontes
5663c725be
Make optional redirect to SSL
2016-04-27 23:28:20 -03:00
Manuel de Brito Fontes
102c056b67
Add header X-Forwarded-Port
2016-04-27 23:28:19 -03:00
Manuel de Brito Fontes
cf263c1390
Wait until the pod it's running before getting information about it
2016-04-10 18:38:48 -03:00