Manuel Alejandro de Brito Fontes
fb3a317f4d
Rollback #1854 ( #1969 )
2018-01-24 14:28:34 -03:00
Manuel Alejandro de Brito Fontes
8975800740
Add support to hide headers from upstream servers ( #1928 )
2018-01-18 16:37:22 -02:00
Manuel Alejandro de Brito Fontes
858f3398f8
Remove sendfile configuration ( #1927 )
2018-01-18 15:22:59 -02:00
Manuel Alejandro de Brito Fontes
52794ae22d
Do not use port from host header ( #1926 )
2018-01-18 14:51:58 -02:00
Manuel Alejandro de Brito Fontes
b50cdc0256
Add option for reuseport in nginx listen section ( #1919 )
2018-01-17 21:12:46 -02:00
Manuel Alejandro de Brito Fontes
28058f0edc
Add support for jaeger backend ( #1916 )
2018-01-17 19:28:59 -02:00
Manuel Alejandro de Brito Fontes
807932259e
If server_tokens is disabled remove the Server header ( #1903 )
...
* If server_tokens is disabled remove the Server header
* Add server-tokens tests
* Fix tests
2018-01-17 10:26:53 -02:00
Manuel Alejandro de Brito Fontes
b0e0712984
Fix custom port in redirects ( #1907 )
2018-01-17 10:20:41 -02:00
Márk Sági-Kazár
313fdd2d1a
Add CORS max age annotation ( #1888 )
...
Add cors-max-age annotation
2018-01-09 09:19:42 -02:00
Manuel Alejandro de Brito Fontes
da829748ec
Fix SSL Passthrough template issue and custom ports in redirect to HTTPS ( #1870 )
2018-01-02 14:48:42 -03:00
Tang Le
d22038b3af
"proxy_redirect default" should be placed after the "proxy_pass" ( #1869 )
...
When use nginx.ingress.kubernetes.io/proxy-redirect-from: default
annotation. ingress controller will report:
"""
Error: exit status 1
2018/01/02 07:03:11 [emerg] 181#181: "proxy_redirect default" should be placed after the "proxy_pass" directive in /tmp/nginx-cfg632387194:366
nginx: [emerg] "proxy_redirect default" should be placed after the "proxy_pass" directive in /tmp/nginx-cfg632387194:366
nginx: configuration file /tmp/nginx-cfg632387194 test failed
"""
Signed-off-by: Tang <at28997146@163.com>
2018-01-02 08:34:20 -03:00
Manuel Alejandro de Brito Fontes
54cfad0a07
When upstream-hash-by annotation is used do not configure a lb algorithm ( #1858 )
2017-12-27 07:48:06 -03:00
Manuel Alejandro de Brito Fontes
6a34e9c261
Fix redirect to ssl ( #1854 )
2017-12-26 22:53:43 -03:00
Manuel Alejandro de Brito Fontes
fead9087ac
Validate x-forwarded-proto and connection scheme before redirecting to https ( #1844 )
2017-12-21 12:44:08 -03:00
Gabi Davar
8325ca9934
force external_auth requests to http/1.1
2017-12-02 17:05:13 +02:00
Manuel de Brito Fontes
3058e7758d
Add setting to configure proxy responses in the stream section
2017-11-30 17:53:23 -03:00
Manuel de Brito Fontes
161b485ae0
Add option to configure the redirect code
2017-11-30 12:08:43 -03:00
Manuel de Brito Fontes
be185b9743
Use custom https port in redirects
2017-11-29 17:16:45 -03:00
Ricardo Katz
e93c75f46e
Changes ssl-client-cert header
2017-11-20 15:15:31 -02:00
Manuel de Brito Fontes
2223ea9600
Add annotation to enable passing the certificate to the upstream server
2017-11-17 21:28:45 -03:00
Manuel de Brito Fontes
c5b0c8ab0d
Add annotation for setting proxy_redirect
2017-11-13 20:19:41 -03:00
Manuel de Brito Fontes
a858c549d9
Add e2e tests for auth annotation
2017-11-12 20:08:32 -03:00
Manuel de Brito Fontes
fdd231816c
Disable features not availables in some platforms
2017-11-12 11:12:58 -03:00
Manuel de Brito Fontes
e7d412c3e8
Always add cors headers when enabled
2017-11-12 01:58:52 -03:00
chrisblu
2dfaaa7b9d
Add the original http request method to the auth request
2017-11-08 12:14:04 +01:00
Manuel de Brito Fontes
5115adef82
Update nginx to 0.28 and enable brotli
2017-11-01 22:54:22 -03:00
Manuel de Brito Fontes
ff87480070
Disable brotli temporarily [ci skip]
2017-11-01 20:49:53 -03:00
Manuel Alejandro de Brito Fontes
dc3225e5ee
Merge pull request #1627 from estaleiro/brotli
...
Add brotli support
2017-11-01 17:49:11 -03:00
Ricardo Pchevuzinske Katz
fddcfd0340
Adds Brotli support
2017-11-01 17:53:18 -02:00
Joao Morais
29d90a6f18
Add client-dn header
2017-10-31 13:50:06 -02:00
acoshift
589b358311
Add gzip_vary
2017-10-29 20:54:25 +07:00
Max Laverse
b85055a976
Fix full XFF with PROXY
2017-10-28 17:43:16 +02:00
Max Laverse
bfe20306a0
Make X-Forwarded-For computation configurable
2017-10-26 17:44:17 +02:00
Max Laverse
a43833c621
Compute a real X-Forwarded-For
2017-10-26 17:42:13 +02:00
rnburn
888375acef
Upgrade nginx-opentracing.
2017-10-24 13:49:30 -07:00
Ricardo Pchevuzinske Katz
c9fbfa34e7
Certiifcate Auth Bugfix
2017-10-22 20:52:54 -02:00
Ricardo Pchevuzinske Katz
2097676ca8
Adds support for other Cors directives
...
CORS annotations improvements
Cors improvements
Cors improevements
Cors improvements
Cors improvements
2017-10-22 19:22:12 -02:00
Ilya Saulenko
9a9c612f5a
Allow usage of non_idempotent option in proxy_next_upstream
2017-10-16 21:50:17 +03:00
Manuel de Brito Fontes
16c1198980
Merge remote-tracking branch 'master/master' into docs
2017-10-16 09:02:10 -03:00
Manuel de Brito Fontes
8506e1ca67
Remove authentication send body annotation
2017-10-15 18:26:43 -03:00
Manuel de Brito Fontes
a30d3775c4
Merge remote-tracking branch 'master/master' into docs
2017-10-13 18:17:38 -03:00
Manuel de Brito Fontes
a9168f276e
Split documentation
2017-10-13 18:13:51 -03:00
Chris Reinhardt
0aae81114a
Include the serversnippet from the config map in servers that aren't aliaes
2017-10-12 14:30:26 -04:00
Petr Gregor
e78ad92c87
Change alias behaviour not to create new server section needlessly
2017-10-11 15:24:33 +02:00
Manuel de Brito Fontes
7632465ce3
Enable modsecurity feature
2017-10-10 11:24:21 -03:00
Manuel Alejandro de Brito Fontes
63155ee5bd
Merge pull request #1511 from sapcc/sso
...
fix deprecated ssl_client_cert. add ssl_client_verify header
2017-10-09 10:40:32 -04:00
Max Laverse
1062340b0d
Return 503 by default when no endpoint is available
2017-10-09 14:30:28 +02:00
Arno Uhlig
788eb58bfe
ssl_client_cert is deprecated. use ssl_client_escaped_cert. add ssl_client_verify to enable client certificate verification.
2017-10-09 13:13:50 +02:00
Manuel de Brito Fontes
29c0304921
Add tls session ticket key setting
2017-10-08 19:37:19 -03:00
Lourens Naudé
d607cf6dd7
Introduce an upstream-hash-by annotation to support consistent hashing by nginx variable or text
2017-10-07 15:12:20 +01:00
