Commit graph

54 commits

Author SHA1 Message Date
Kubernetes Submit Queue
bff5d0e5a2 Merge pull request #1879 from r2d4/map_hash_bucket_size
Automatic merge from submit-queue

Make map_hash_bucket_size configurable

I was getting an error while trying to run the nginx controller in minikube.  This allows this nginx configuration option to be passed in through a configmap.  

The default value depends on the processor's cache line size (32 | 64 | 128), however ServerNameHashBucketSize is determined similarly, so I've set it to the same default (64).

Fixes #1817

ref https://github.com/kubernetes/minikube/issues/611

cc @bprashanth
2016-11-03 09:39:47 -07:00
Kubernetes Submit Queue
e1faa8ebe9 Merge pull request #1813 from marketlogicsoftware/kayrus/nginx-log-format
Automatic merge from submit-queue

Added domain name and server port into nginx logs

I replaced dashes so it shouldn't brake log parsers.
In addition here are the [fluentd rules](dc71d8db4a/docker/fluentd/td-agent.conf (L230..L237)) which parse these logs (requires https://github.com/tagomoris/fluent-plugin-parser plugin)
2016-10-25 09:51:43 -07:00
Matt Rickard
c8487c1973 Make map_hash_bucket_size configurable 2016-10-14 11:20:34 -07:00
Kubernetes Submit Queue
6456025035 Merge pull request #1830 from aledbf/dbackend
Automatic merge from submit-queue

[nginx-ingress-controller] Add support for default backend in Ingress rule

replaces #1759
2016-10-06 14:28:10 -07:00
Kubernetes Submit Queue
a2aae637dc Merge pull request #1808 from whitlockjc/document-nginx-connection-header
Automatic merge from submit-queue

ingress/controllers/nginx: WebSocket documentation

For those that do not understand the default way in which nginx proxies
requests not containing a "Connection" header, the approach for enabling
WebSocket support might not make sense.  This commit adds documentation
that explains why things are done this way.
2016-10-05 10:09:18 -07:00
Manuel de Brito Fontes
a0776997c3 Add support for default backend in Ingress rule 2016-10-04 09:28:21 -03:00
Manuel de Brito Fontes
541928e27d Add external authentication using auth_request 2016-10-03 11:54:02 -03:00
kayrus
0bae7c4b7c Added domain name and server port into nginx logs 2016-09-30 12:32:25 +02:00
Manuel de Brito Fontes
25bf00a1fc Add docs about the log format 2016-09-29 22:16:32 -03:00
Jeremy Whitlock
0373ce6f31 ingress/controllers/nginx: WebSocket documentation
For those that do not understand the default way in which nginx proxies
requests not containing a "Connection" header, the approach for enabling
WebSocket support might not make sense.  This commit adds documentation
that explains why things are done this way.
2016-09-29 15:42:46 -06:00
Manuel de Brito Fontes
75dd1d3c6a Initialize proxy_upstream_name variable 2016-09-29 14:53:54 -03:00
Manuel de Brito Fontes
e74b8039a5 Add annotation to add CORS support 2016-09-27 13:35:57 -03:00
Kubernetes Submit Queue
741ac710cd Merge pull request #1749 from aledbf/cloud-health-check
Automatic merge from submit-queue

[nginx-ingress-controller] Readiness probe that works behind a CP lb

fixes #1507
2016-09-26 15:44:12 -07:00
Manuel de Brito Fontes
4e722f9d6d Add the name of the upstream in the log 2016-09-18 11:50:42 -03:00
Manuel de Brito Fontes
9d4dfe7609 Change readiness probe for nginx ingress that works behind a CP lb 2016-09-16 19:09:29 -03:00
Vy-Shane Xie
ae1c4503b3 Allow customisation of the nginx proxy_buffer_size directive via ConfigMap 2016-09-15 23:14:16 +08:00
Manuel de Brito Fontes
9f64273b9c Use system self signed certificate as default SSL certificate 2016-07-22 19:30:00 -04:00
Manuel de Brito Fontes
3ef038c557 Change nginx status port to 18080 to avoid conflicts with port 8080 2016-07-20 16:39:46 -04:00
Prashanth B
1a04fa4881 Merge pull request #1398 from aledbf/nginx-httpoxy
Mitigate HTTPoxy Vulnerability
2016-07-20 10:56:17 -07:00
Prashanth B
5306ca4eb9 Merge pull request #1384 from atombender/issue_1883
Unset Authorization header when proxying
2016-07-20 10:54:57 -07:00
Prashanth B
eabad1c990 Merge pull request #1338 from aledbf/ssl-default-backend
[nginx-ingress-controller]: Add HTTPS default backend
2016-07-20 10:35:15 -07:00
Manuel de Brito Fontes
a38f2b21a1 Mitigate HTTPoxy Vulnerability 2016-07-20 09:55:46 -04:00
Manuel de Brito Fontes
d3d6c879d5 Refactor nginx certificate creation. 2016-07-18 17:08:00 -04:00
Alexander Staubo
5effb7b4e3 Unset Authorization header when proxying. 2016-07-17 22:02:02 -04:00
Manuel de Brito Fontes
8b25cc67a5 Improve nginx performance to match listen backlog with net.core.somaxconn 2016-07-11 23:04:21 -04:00
Manuel de Brito Fontes
a2d9c6e48b Fix duplicated real_ip_header 2016-07-05 12:37:54 -04:00
Manuel de Brito Fontes
09d7b756db Add support for dynamic TLS records and spdy 2016-07-01 14:07:48 -04:00
Prashanth B
b728a0cbd5 Merge pull request #1239 from aledbf/conditional-log
[nginx-ingress-controller]: Add support for conditional log of urls
2016-06-22 10:47:41 -07:00
Manuel de Brito Fontes
3cbe01767f Add support for conditional log of urls 2016-06-18 18:04:07 -04:00
Manuel de Brito Fontes
e68aa3806a Fix stats by country in nginx status page 2016-06-17 18:26:08 -04:00
Manuel de Brito Fontes
e792e940b2 Add ip/cidr white list support 2016-06-09 17:59:46 -04:00
Christian Simon
3ae80fd3cc ingress: adds configurable SSL redirect nginx controller
* add global value to config map
* add per ingress value as annotation to ingress resources
2016-06-05 15:30:09 +01:00
Manuel de Brito Fontes
ae52257c3a Watch for updates in configuration configmaps 2016-06-02 17:39:13 -04:00
Manuel de Brito Fontes
71ca55440b Fix lint errors 2016-06-02 17:39:12 -04:00
Manuel de Brito Fontes
6b841edff0 Address comments. Move auth and healthcheck inside nginx package 2016-05-31 14:34:04 -04:00
Manuel de Brito Fontes
e603976721 Remove blank lines from template rendering 2016-05-31 13:43:36 -04:00
Manuel de Brito Fontes
ccaf15cdd4 Add support for rate limiting in ingress rule locations 2016-05-31 13:34:09 -04:00
Manuel de Brito Fontes
f8ea58882b Add option to append a base tag in the head 2016-05-31 12:30:35 -04:00
Manuel de Brito Fontes
6968e23f8d Add support for geoip in stats 2016-05-30 18:31:04 -04:00
Manuel de Brito Fontes
675ce396ac Allow custom health checks 2016-05-27 21:31:21 -03:00
Manuel de Brito Fontes
28f982845d Change errors to a list of codes 2016-05-26 11:52:17 -03:00
Manuel de Brito Fontes
5faa855e66 Custom errors should be optional 2016-05-26 11:52:17 -03:00
Manuel de Brito Fontes
2d7acf33c4 Enable configuration to disable http2 2016-05-25 23:50:15 -03:00
Manuel de Brito Fontes
c4228a150f Add ssl certificate checksum to template 2016-05-25 23:05:23 -03:00
Manuel de Brito Fontes
8bf7007c40 Add support for sticky sessions 2016-04-28 11:37:13 -03:00
Manuel de Brito Fontes
a86a682429 Fix HSTS 2016-04-28 00:30:49 -03:00
Manuel de Brito Fontes
102c2eeaa4 Avoid iteration in pods during update of service annotations 2016-04-27 23:28:21 -03:00
Manuel de Brito Fontes
5663c725be Make optional redirect to SSL 2016-04-27 23:28:20 -03:00
Manuel de Brito Fontes
102c056b67 Add header X-Forwarded-Port 2016-04-27 23:28:19 -03:00
Manuel de Brito Fontes
cf263c1390 Wait until the pod it's running before getting information about it 2016-04-10 18:38:48 -03:00