DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1560 commits 4 branches 217 tags 166 MiB
Commit graph

758 commits

Author SHA1 Message Date
Gorka Lerchundi Osa
e1c1dfadc7 allow specifying custom dh param 
fixes #162
 2017-03-08 15:32:32 +01:00
Giancarlo Rubio
63b5f2f1c5 add configuration to disable listening on ipv6 2017-03-08 13:29:02 +01:00
Manuel Alejandro de Brito Fontes
f1062e07bc Merge pull request #369 from xialonglee/patch-1 
Minor text fix for "ApiServer"
 2017-03-08 07:09:32 -03:00
Nick Sardo
31eab3880b Merge pull request #384 from timstclair/busybox 
Rebase GLBC on alpine:3.5
 2017-03-07 17:19:17 -08:00
Manuel Alejandro de Brito Fontes
d6620ead2c Merge pull request #397 from aledbf/fix-external-auth 
Fix external auth
 2017-03-07 21:36:53 -03:00
Nick Sardo
61a03033f7 Merge pull request #386 from itamaro/patch-1 
Fix glbc usage string
 2017-03-07 15:08:17 -08:00
Tony Li
7000924dc5 GCE pre-shared cert fixes (#395) 
* pick up changes to the external cert referenced by lb

* less prone way to check if cert should be deleted
 2017-03-07 15:05:21 -08:00
Manuel de Brito Fontes
bebd596b3f Listen customization must be done just in one place 2017-03-07 19:50:24 -03:00
Tim St. Clair
1023056c3b
Rebase GLBC on busybox 2017-03-07 13:49:43 -08:00
Tony Li
e1d1445370 GCE/GKE "pre-shared" TLS cert (#291) 
* add allow-named-tls annotation

* works for setting tls

* fix logs (mostly)

* add ssl cert annotation

* return an error when cert not found

* use annotation if specified, otherwise use spec

* add TODO on naming

* use the annotation key from k8s

* add unit test for HTTPS LB w/ cert annotation

* refactor logic and check for error

* move annotation to controller package

* remove todo for function naming
 2017-03-07 13:42:41 -08:00
craigmonson
6e6aae6c29 Update README.md 
fix broken link to config maps
 2017-03-07 15:09:50 -05:00
Manuel de Brito Fontes
484bd43111 Fix http2 header size 2017-03-07 14:42:59 -03:00
Victor Unegbu
dfdcdfde0b remove tmp nginx-diff files 2017-03-07 09:59:10 -06:00
Itamar Ostricher
6f3139a79e Fix glbc usage string 
1. Typo in `glbc` binary name
2. Typo in `running-in-cluster` flag
3. Remove non-existing flag `--default-backend-node-port`
 2017-03-07 12:09:12 +02:00
chentao1596
1417a3a818 add copyright 2017-03-07 15:34:31 +08:00
Nick Sardo
a6e38221ee Merge pull request #278 from csbell/fw-name 
Extend ConfigMap to store fwrule names
 2017-03-06 10:37:20 -08:00
Manuel de Brito Fontes
f0c758eed2 Fix custom log format 2017-03-06 12:33:51 -03:00
Manuel Alejandro de Brito Fontes
de8b9b8df2 Merge pull request #370 from foxylion/force-ssl-redirect-documentation 
Add documentation for ingress.kubernetes.io/force-ssl-redirect
 2017-03-05 22:11:05 -03:00
Manuel de Brito Fontes
cd924f5522 Avoid duplication of ReadConfig function 2017-03-04 18:35:33 -03:00
Manuel de Brito Fontes
1473f64fb0 Remove SPDY reference 2017-03-04 18:35:33 -03:00
Manuel de Brito Fontes
3c0fb01ba2 Add warning when the ingress controller uses a custom class 2017-03-04 18:35:33 -03:00
Manuel de Brito Fontes
2399be867e Cleanup custom log format configuration 2017-03-04 18:35:33 -03:00
Jakob Jarosch
74d57c9502 Add documentation for ingress.kubernetes.io/force-ssl-redirect 
refs #314 #365
 2017-03-03 20:29:43 +01:00
Peter Lee
0b6f4d2770 Minor text fix for "ApiServer" 
It looks a little weird to apply camel case style for the noun "apiserver", i didn't see somewhere else spelling it in that way.
 2017-03-04 00:40:07 +08:00
Manuel Alejandro de Brito Fontes
75124bc9f1 Merge pull request #356 from gianrubio/patch-1 
Disable listen only on ipv6 and fix proxy_protocol
 2017-03-03 09:50:43 -03:00
Manuel Alejandro de Brito Fontes
6cd21f7dea Merge pull request #362 from gianrubio/fix-ingress-class 
Fix ingress class
 2017-03-03 09:49:59 -03:00
Manuel Alejandro de Brito Fontes
3b2f668f39 Merge pull request #367 from gianrubio/customize-logformat 
BuildLogFormatUpstream was always using the default log-format
 2017-03-03 09:43:48 -03:00
Manuel Alejandro de Brito Fontes
9f39abc019 Merge pull request #365 from pwillie/forcesslredirect 
add ForceSSLRedirect ingress annotation
 2017-03-03 09:05:02 -03:00
Giancarlo Rubio
1e5081baf2 BuildLogFormatUpstream function was always using the default log-format-upstream, 2017-03-03 13:03:49 +01:00
caiyixiang
482293b99d add_judgment 2017-03-03 15:17:32 +08:00
Peter Wilson
1a72b3f775 add ForceSSLRedirect ingress annotation 2017-03-03 16:44:29 +11:00
Aaron Roydhouse
336f3cb108 Fix error caused by increasing proxy_buffer_size (#363) 
This fixes the bug raised in #363, by increasing the size of the proxy_buffers (memory allocation) to match the size of the proxy buffer. This leaves the default values (with no ingress setting) unchanged:
```
proxy_buffer_size      4k
proxy_buffers            4 4k
```
If 'proxy-buffer-size' is set, then now both the buffer size and the memory allocation size is increased:
```
proxy_buffer_size     "{{ $location.Proxy.BufferSize }}";
proxy_buffers           4 "{{ $location.Proxy.BufferSize }}";
```
I have been using this patch with 0.8.3 and 0.9.0-beta.2.
 2017-03-02 16:11:27 -05:00
rsafronov
05526e4a66 Merge remote-tracking branch 'upstream/master' into nginx/extauth_headers 
# Conflicts:
#	controllers/nginx/pkg/template/template.go
 2017-03-02 14:46:18 -05:00
Christian Bell
68097e96dc Better logging and address review comments 2017-03-02 10:54:32 -08:00
Giancarlo Rubio
2ddba72baa Fix ingress class 2017-03-02 16:50:31 +01:00
Giancarlo Rubio
0ca3aef0f5 Add ability to customize upstream and stream log format 2017-03-01 18:47:11 +01:00
Giancarlo Rubio
90fdea751b Disable listen only on ipv6 and fix proxy_protocol 
- Always listen on ipv4 address for port 443
- Rollback previous PR #227 that broke the proxy_protocol when passthroughBackends is disabled
 2017-03-01 15:31:00 +01:00
Christian Bell
b259c9b349 First stab at extending the "uid" configmap to store firewall 
rule information.
 2017-02-28 10:49:31 -08:00
rsafronov
d3b952552a minor: formatting 2017-02-27 16:34:42 -05:00
electroma
c8eda8f17f Merge branch 'master' into nginx/extauth_headers 2017-02-27 16:28:11 -05:00
Manuel de Brito Fontes
02d44ccbaa Fix client source IP address 2017-02-26 19:01:07 -03:00
Manuel Alejandro de Brito Fontes
0aabfba848 Merge pull request #235 from rikatz/ingress-ssl-auth 
Adds correct support for TLS Muthual autentication
 2017-02-25 20:34:28 -03:00
Piotr Szczesniak
fd7990de67 Expose Prometheus metrics in glbc controller 2017-02-25 18:30:00 +01:00
Manuel Alejandro de Brito Fontes
8f23451c24 Merge pull request #221 from tonglil/typos 
Typo: unittesting -> unit testing
 2017-02-25 08:12:53 -03:00
Manuel Alejandro de Brito Fontes
712b60f197 Merge pull request #222 from tonglil/fix-log-message 
Change arg ordering in log message
 2017-02-25 08:12:41 -03:00
Manuel Alejandro de Brito Fontes
3f2592128c Merge pull request #224 from tonglil/check-error 
Check for error getting cert
 2017-02-25 08:12:25 -03:00
Ricardo Pchevuzinske Katz
a342c0bce3 Adds correct support for TLS Muthual autentication and depth verification 
modified:   controllers/nginx/configuration.md
	modified:   controllers/nginx/rootfs/etc/nginx/template/nginx.tmpl
	modified:   core/pkg/ingress/annotations/authtls/main.go
	modified:   core/pkg/ingress/controller/backend_ssl.go
	modified:   core/pkg/ingress/controller/controller.go
	modified:   core/pkg/ingress/controller/util_test.go
	modified:   core/pkg/ingress/resolver/main.go
	modified:   core/pkg/ingress/types.go
	modified:   core/pkg/net/ssl/ssl.go
	modified:   examples/PREREQUISITES.md
	new file:   examples/auth/client-certs/nginx/README.md
	new file:   examples/auth/client-certs/nginx/nginx-tls-auth.yaml
 2017-02-24 22:49:01 -03:00
Manuel de Brito Fontes
84324af140 Refactoring of TCP and UDP services 2017-02-24 20:14:43 -03:00
Manuel Alejandro de Brito Fontes
33ab550290 Merge pull request #332 from aledbf/snippets 
Add annotation to customize nginx configuration
 2017-02-24 18:39:45 -03:00
Giancarlo Rubio
704a18cec9 Add support for proxy cookie path/proxy cookie domain 2017-02-24 16:06:30 +01:00
Marcin Owsiany
192c551abb Fix for formatting error introduced in #304. 
Why don't we fail the travis build when go fmt is unhappy?
 2017-02-24 12:05:31 +01:00
Manuel de Brito Fontes
a20c287614 Add annotation to customize nginx location configuration 2017-02-23 16:48:59 -03:00
Manuel Alejandro de Brito Fontes
964aa0a15a Merge pull request #295 from tangle329/master 
We need check content, when cmd failed.
 2017-02-23 00:28:13 -03:00
Manuel de Brito Fontes
7013a52ee5 Return sorted endpoints 2017-02-22 14:41:44 -03:00
Manuel de Brito Fontes
036892fb96 Release 0.9.0-beta.2 2017-02-22 14:41:43 -03:00
Manuel Alejandro de Brito Fontes
5ab0f284b0 Merge pull request #306 from caiyixiang/modifyNGINXreadme 
modify nginx readme
 2017-02-20 08:01:31 -03:00
Manuel Alejandro de Brito Fontes
463ff2b453 Merge pull request #304 from caiyixiang/changeSStoSSL 
change 'buildSSPassthrouthUpstreams' to 'buildSSLPassthroughUpstreams'
 2017-02-20 08:00:15 -03:00
chentao1596
a74fe3426a Add docs for body-size annotation 2017-02-20 18:01:57 +08:00
caiyixiang
488d89db18 modify nginx readme 2017-02-20 15:58:16 +08:00
Tang Le
c0f0cb2ff7 Check content when cmd failed 
Signed-off-by: Tang Le <at28997146@163.com>
 2017-02-20 10:34:05 +08:00
caiyixiang
e68abf067b change 'buildSSPassthrouthUpstreams' to 'buildSSLPassthroughUpstreams' 2017-02-20 10:30:37 +08:00
Prashanth B
cb60085b17 Merge pull request #299 from bprashanth/owners 
Add more assignees and approvers
 2017-02-18 04:17:39 +05:30
Manuel de Brito Fontes
8fd12b26ba Change nginx variable to use in filter of access_log 2017-02-17 18:21:46 -03:00
bprashanth
7e02e9adaa Add more assignees and approvers 2017-02-17 10:47:56 -08:00
Manuel Alejandro de Brito Fontes
e603066d92 Merge pull request #290 from aledbf/update-nginx 
Update nginx version in ingress controller to 1.11.10
 2017-02-17 15:46:52 -03:00
Manuel Alejandro de Brito Fontes
5fab1e99fe Merge pull request #296 from aledbf/fix-rewrite 
Fix rewrite regex to match the start of the URL and not a substring
 2017-02-17 15:12:18 -03:00
Manuel de Brito Fontes
77221b3555 Fix rewrite regex to match the start of the URL and not a substring 2017-02-17 11:04:57 -03:00
Tang Le
e26efd0b08 We need check content, when cmd failed. 
Signed-off-by: Tang Le <at28997146@163.com>
 2017-02-17 19:11:56 +08:00
Prashanth B
3d9f89be1d Merge pull request #293 from tonglil/gcloud-docker 
Update makefile gcloud docker command
 2017-02-17 07:07:25 +05:30
Tony Li
f32ef32489 do the same for nginx 2017-02-16 17:12:33 -08:00
Prashanth B
698c08402a Merge pull request #258 from rikatz/nginx-sticky-annotations 
Nginx sticky annotations
 2017-02-17 05:27:18 +05:30
Tony Li
5f8a40d392 update makefile docker command 2017-02-16 14:49:35 -08:00
Manuel de Brito Fontes
2d0971d6b0 Update nginx version in ingress controller to 1.11.10 2017-02-16 15:10:14 -03:00
Manuel Alejandro de Brito Fontes
b5819d8f4d Merge pull request #246 from aledbf/set-headers 
Add support for custom proxy headers using a ConfigMap
 2017-02-16 07:35:57 -03:00
Manuel Alejandro de Brito Fontes
111f338fa3 Merge pull request #272 from aledbf/refactor-annotation-parsers 
Fix error getting class information from Ingress annotations
 2017-02-16 07:35:34 -03:00
Ricardo Pchevuzinske Katz
e5c9c788a5 Correct the configuration.md reference to annotations 2017-02-16 08:31:01 -02:00
Manuel Alejandro de Brito Fontes
a8b89677d6 Merge pull request #275 from aledbf/pass-headers 
Pass headers to custom error backend
 2017-02-14 18:05:22 -03:00
Manuel de Brito Fontes
0cdc4bd8ba Pass headers to custom error backend 2017-02-14 17:43:31 -03:00
Manuel de Brito Fontes
5c9bf12648 Fix error getting class information from Ingress annotations 2017-02-14 11:02:23 -03:00
Arnd Hannemann
f46aedd7a2 Fix typo in nginx README 2017-02-14 10:06:44 +01:00
Manuel Alejandro de Brito Fontes
aa02b7e085 Merge pull request #244 from aledbf/annotations-docs 
Add information about cors annotation
 2017-02-13 17:59:47 -03:00
Ricardo Pchevuzinske Katz
a158e5fc5a Improve the session affinity feature 2017-02-12 21:13:39 -02:00
bprashanth
8ea814264d Add nginx README and configuration docs back 2017-02-10 10:59:40 -08:00
Ricardo Pchevuzinske Katz
6809319318 Adds support for configuring stickness per Ingress 2017-02-10 12:24:16 -02:00
Ricardo Pchevuzinske Katz
79e186cb77 New sticky session configuration 2017-02-10 01:33:23 -02:00
Ricardo Pchevuzinske Katz
d0c4e0d713 Adds support for disabling the entire access_log 2017-02-09 21:20:12 -02:00
Prashanth B
2119b23cb8 Merge pull request #251 from bprashanth/balancing_mode 
Balancing mode UTILIZATION -> RATE
 2017-02-10 00:23:23 +05:30
bprashanth
9b305f1954 Flip version to 0.9.1 2017-02-08 19:31:59 -08:00
bprashanth
3f618d7dca Add unittest 2017-02-08 19:31:55 -08:00
bprashanth
bc8b658a5c Be more specific about the type of error to retry on 2017-02-08 17:27:53 -08:00
bprashanth
24d9aada11 Set balancing mode 2017-02-08 15:15:48 -08:00
rsafronov
4c2b2512f5 Merge branch 'upstream' into nginx/extauth_headers 2017-02-08 16:57:03 -05:00
Manuel de Brito Fontes
5cc5669938 Add support for custom proxy headers using a ConfigMap 2017-02-07 17:00:23 -03:00
Leszek Charkiewicz
ee484aa19f Fix wrong URL in nginx ingress configuration 2017-02-07 20:26:11 +01:00
Manuel de Brito Fontes
c83d46ef86 Add information about cors annotation 2017-02-07 11:17:25 -03:00
Manuel Alejandro de Brito Fontes
4eb527d4a9 Merge pull request #228 from tangle329/master 
Fix worker check issue
 2017-02-07 09:36:55 -03:00
caiyixiang
229250f419 changeUDP 2017-02-07 14:35:39 +08:00
Manuel de Brito Fontes
36f842c011 Add information about proxy_protocol in port 442 2017-02-04 21:29:35 -03:00
Manuel Alejandro de Brito Fontes
e35e5bfce5 Merge pull request #227 from justinsb/use_proxy_protocol 
proxy_protocol on ssl_passthrough listener
 2017-02-04 21:22:47 -03:00
Justin Santa Barbara
8d71557b13 Remove proxy_protocol from 442 listener 
The proxy_protocol processing should only happen once, on the
"external-facing" listeners.
 2017-02-04 19:02:24 -05:00
Justin Santa Barbara
6fa461c2a7 proxy_protocol on ssl_passthrough listener 
Move proxy_protocol to listener.

Fix #207
 2017-02-04 02:38:36 -05:00
Tang Le
008c47c2d3 Fix worker check issue 
Signed-off-by: Tang Le <at28997146@163.com>
 2017-02-04 15:37:06 +08:00
rsafronov
302fa5f4bb Added: support for http header passing from external authentication service response 2017-02-03 19:43:15 -05:00
Tony Li
fbdacb2a67 comment on skipping the error check 2017-02-03 18:23:07 -05:00
Tony Li
404e0712db check for error getting cert 2017-02-03 17:24:24 -05:00
Tony Li
881ddba90d change arg ordering in log message 2017-02-03 15:13:08 -05:00
Jeff Grafton
bc020f1370 Always docker --pull when building to fetch latest base images 2017-02-01 19:04:23 -08:00
bprashanth
3a37607138 Change nginx controller image to 0.9.0-beta.1 2017-01-30 12:13:06 -08:00
Prashanth B
910b706f8f Merge pull request #181 from aledbf/0.9 
WIP: Release 0.9.0
 2017-01-30 10:55:59 -08:00
Tim Hockin
df6f1ab5c6 Merge pull request #185 from bprashanth/named_port 
Match named port between container and probe
 2017-01-27 17:25:39 -08:00
bprashanth
7d709d5e93 Match named port between container and probe 
We were previous matching the target port with the readiness probe, and
hence dropping the case where the container port and the probe had the
same name, but the target port did not.
 2017-01-27 14:22:44 -08:00
Manuel de Brito Fontes
2887daaf78 Release 0.9.0 2017-01-27 18:23:15 -03:00
Manuel de Brito Fontes
c3ac562429 Fix template error 2017-01-27 17:52:09 -03:00
Tony Li
0278034bcf unittesting -> unit testing 2017-01-26 15:17:12 -05:00
Manuel Alejandro de Brito Fontes
87d4145c76 Merge pull request #178 from aledbf/proxy-name 
Add initialization of proxy variable
 2017-01-26 16:50:20 -03:00
Ricardo Pchevuzinske Katz
cc1413261f Allows the usage of Default SSL Cert 2017-01-26 16:51:55 -02:00
Manuel de Brito Fontes
2baa1def46 Add initialization of proxy variable 2017-01-26 11:52:48 -03:00
Manuel de Brito Fontes
ec67f83305 Refactoring sysctlFSFileMax helper 2017-01-26 00:10:33 -03:00
Prashanth B
0f7102a356 Merge pull request #174 from aledbf/update-nginx-1119 
Update nginx to 1.11.9
 2017-01-25 13:58:24 -08:00
Manuel de Brito Fontes
08eda50ebb Update nginx to 1.11.9 2017-01-25 15:16:31 -03:00
Justin Ryan
96df5b3d55 Clarify usage of Ingress backend.servicePort 2017-01-25 09:52:50 -05:00
Manuel Alejandro de Brito Fontes
099fba21c8 Merge pull request #165 from tangle329/master 
Fix rate limit issue when more than 2 servers enabled in ingress
 2017-01-25 07:35:25 -03:00
Tang Le
c0aca1833a Fix rate limit issue when more than 2 servers enabled in ingress 
Signed-off-by: Tang Le <at28997146@163.com>
 2017-01-24 16:19:28 +08:00
Peter Sutherland
8fae080cce Remove SPDY documentation as it is broken 2017-01-23 14:50:52 +00:00
Peter Sutherland
e665072eaa Document more parameters and list defaults 2017-01-23 14:20:21 +00:00
Peter Sutherland
6c8792d80a Add whitelist-source-range to config map docs 2017-01-23 13:34:15 +00:00
Tang Le
50297c8f47 Fix issue for ratelimit 
Signed-off-by: Tang Le <tangle3@wanda.cn>
 2017-01-23 10:01:51 +08:00
Manuel de Brito Fontes
3df139cb56 Add configuration and annotation for port_in_redirect 2017-01-21 23:01:21 -03:00
Manuel de Brito Fontes
87322b84ba Add support for custom header sizes 2017-01-21 12:46:20 -03:00
Manuel de Brito Fontes
b0c2619594 Add annotation to allow custom body sizes 2017-01-21 11:50:05 -03:00
chentao1596
7bcdef0505 adjust some improper punctuations 2017-01-20 10:55:18 +08:00
chentao1596
08149a7a21 fix wrong link(change titile) 2017-01-20 10:38:31 +08:00
Manuel Alejandro de Brito Fontes
fbcedc02dc Merge pull request #132 from pedrosland/docs/nginx-controller-config-1 
Document nginx controller configuration tweaks
 2017-01-19 15:07:40 -03:00
Peter Sutherland
292375e8b4 Incorporate more feedback 2017-01-19 18:03:44 +00:00
Manuel Alejandro de Brito Fontes
7553ab361a Merge pull request #136 from chentao1596/add-info-about-MapHashBucketSize 
Add content and descriptions about nginx's configuration
 2017-01-19 09:10:20 -03:00
Manuel Alejandro de Brito Fontes
0ed8260704 Merge pull request #133 from aledbf/fix-tcp-stream 
Add TCP and UDP services removed in migration
 2017-01-19 09:06:03 -03:00
Justin Santa Barbara
f1520a1232 Merge pull request #142 from aledbf/file-max 
Use system fs.max-files as limits instead of hard-coded value
 2017-01-19 01:46:49 -05:00
Manuel de Brito Fontes
9ce52c51f1 Use system fs.max-files as limits instead of hard-coded value 2017-01-19 00:29:31 -03:00
Manuel de Brito Fontes
ba98383c2d Add TCP and UDP services removed in migration 2017-01-18 23:46:03 -03:00
Manuel de Brito Fontes
7fa5aecd71 Add reuse port and backlog to port 80 and 443 2017-01-18 23:04:00 -03:00
caiyixiang
5131b76fe5 const-reference 2017-01-18 11:29:59 +08:00
chentao1596
af8f2881f1 add content: Server-side HTTPS enforcement through redirect 2017-01-18 10:21:29 +08:00
chentao1596
4fbe1ed422 add description for 'map-hash-bucket-size' 2017-01-18 09:58:22 +08:00
Peter Sutherland
9e94863db2 Incorporate feedback 2017-01-17 14:47:54 +00:00
fate-grand-order
0cd3663def fix typo 
Signed-off-by: fate-grand-order <chenjg@harmonycloud.cn>
 2017-01-16 13:58:54 +08:00
Peter Sutherland
b81a49cdfd Sort config map params alphabetically 2017-01-15 23:38:57 +00:00
Peter Sutherland
727eb2ce81 Many mostly small tweaks to the documentation 2017-01-15 23:38:50 +00:00
Manuel de Brito Fontes
64a5e43394 Add tests and godebug to compare structs 2017-01-13 10:26:13 -03:00
Manuel de Brito Fontes
dbd368adf2 Add nginx tests 2017-01-13 09:54:00 -03:00
Manuel Alejandro de Brito Fontes
71492a6f8f Merge pull request #115 from safework/master 
add default_server to listen statement for default backend
 2017-01-13 09:11:25 -03:00
Manuel Alejandro de Brito Fontes
43a3d67561 Merge pull request #99 from aledbf/update-nginx 
Update nginx to 1.11.8
 2017-01-12 21:17:17 -03:00
Manuel de Brito Fontes
597a0e691a Deny location mapping in case of specific errors 2017-01-12 13:40:32 -03:00
Manuel Alejandro de Brito Fontes
c49b03facc Merge pull request #123 from aledbf/fix-resolver 
Add resolver configuration to nginx
 2017-01-12 13:03:46 -03:00
Manuel de Brito Fontes
d570ea6381 Add resolver configuration to nginx 2017-01-12 12:31:39 -03:00
Manuel Alejandro de Brito Fontes
54d9762cf0 Merge pull request #94 from aledbf/server-tokens 
Add support to disable server_tokens directive
 2017-01-12 12:23:32 -03:00
Tim Hockin
717594ae2a Merge pull request #124 from bprashanth/default_backend_ig_delete 
Only delete default backend when there are no loadbalancers
 2017-01-10 22:55:41 -08:00
bprashanth
a6b0405480 Move IG GC out of backend pool and into cluster manager 2017-01-10 03:49:08 -08:00
bprashanth
9d85c9b163 Send an event if default backend doesn't have a NodePort 2017-01-10 03:49:05 -08:00
Prashanth B
f90e9eeb7c Merge pull request #117 from thockin/dont-sync-unchanged-urlmaps 
GCE: Don't update URL Map if unchanged
 2017-01-09 20:25:48 -08:00
Tim Hockin
0950910e29 GCE: Don't update URL Map if unchanged 2017-01-09 11:41:50 -08:00
Mark Cola
939c6d9128 add default_server to listen statement for default backend 2017-01-09 11:30:44 +11:00
Tim Hockin
c3b7631b01 Log node-sync details 2017-01-04 16:59:03 -08:00
Tim Hockin
d1f13a3ad4 Fix a typo in logs 2017-01-04 16:58:47 -08:00
Tim Hockin
4e5efe56de rename for clarity 2017-01-04 13:13:02 -08:00
Manuel de Brito Fontes
af9375aa96 Add support to disable server_tokens directive 2017-01-02 16:27:57 -03:00
Manuel de Brito Fontes
c0b5be6ff7 Refactoring of nginx configuration deserialization 2017-01-02 11:09:24 -03:00
Prashanth B
5cdb8fe4fb Merge pull request #77 from aledbf/dns-resolver 
Add support for IPV6 in dns resolvers
 2017-01-01 20:21:52 -08:00
Manuel de Brito Fontes
def1e034d8 Update nginx to 1.11.8 2016-12-29 20:27:21 -03:00
Justin Santa Barbara
fb8208cf8b Fix typo PassthrougBackends -> PassthroughBackends 2016-12-29 17:57:51 -05:00
Manuel de Brito Fontes
61dad19f8e Fix lint errors 2016-12-28 07:30:58 -03:00
Manuel de Brito Fontes
99209ad33d Add support for IPV6 in dns resolvers 2016-12-28 07:30:58 -03:00
Manuel de Brito Fontes
3b4358b861 Fix x-forwarded-port mapping 2016-12-26 10:56:22 -03:00
Manuel de Brito Fontes
99fb1f4874 Fix incorrect X-Forwarded-Port for TLS 2016-12-22 10:03:58 -03:00
Manuel Alejandro de Brito Fontes
f0762ba144 Merge pull request #34 from euank/nginx-ipv6ish 
nginx: also listen on ipv6
 2016-12-21 13:53:49 -03:00
Giancarlo Rubio
bda6646905 Fix "invalid port in upstream" on nginx controller 2016-12-14 17:42:34 +01:00
Prashanth B
0af8cccc7f Merge pull request #54 from bprashanth/devel_docs 
Expand developer docs
 2016-12-13 14:21:17 -08:00
bprashanth
939cb9c122 Expand developer docs 2016-12-13 10:50:08 -08:00
bprashanth
5fcd42f7dc Bump up glbc version to match release 2016-12-12 19:16:33 -08:00
Euan Kemp
8fe1efe396 nginx: also listen on ivp6 
This allows a brave user to run this in host networking mode and support
ipv6.
 2016-12-12 09:56:42 -08:00
Giancarlo Rubio
bd9ec42042 fix typo in variable ProxyRealIPCIDR 2016-12-12 14:23:45 +01:00
bprashanth
5fde50d3c9 Fix unittests 2016-12-07 11:53:16 -08:00
Prashanth B
cd07b0b06d Merge pull request #21 from bprashanth/default_backend_retry 
Refactor default backend handling and add better events
 2016-12-07 11:26:07 -08:00
Manuel de Brito Fontes
f7011d22f8 Update godeps 2016-11-29 18:10:06 -03:00
Manuel de Brito Fontes
86dbf979cb Add nginx metrics to prometheus 2016-11-29 18:10:06 -03:00
Manuel de Brito Fontes
81cd7782c6 Restart nginx if master process dies 2016-11-29 14:21:44 -03:00
Manuel de Brito Fontes
478d51c827 Add healthz checker 2016-11-27 02:28:04 -03:00
Manuel de Brito Fontes
16c5800545 Add e2e boilerplate 2016-11-23 21:34:30 -03:00
Manuel de Brito Fontes
42b58e957c Avoid nginx reloads 2016-11-23 21:19:07 -03:00
Manuel de Brito Fontes
5a8e090736 Add Generic interface 2016-11-23 21:17:49 -03:00
Manuel de Brito Fontes
f2b627486d Remove interface 2016-11-23 21:17:49 -03:00
Manuel de Brito Fontes
ed9a416b01 Split implementations from generic code 2016-11-23 21:17:49 -03:00
bprashanth
8c4d951df3 Bump up glbc version 2016-11-22 18:42:00 -08:00
bprashanth
d2312229dd Don't retry on instance group not found 2016-11-22 18:31:34 -08:00
bprashanth
d7fb15d972 Better events and timeouts for health checks 2016-11-22 18:31:07 -08:00
bprashanth
b789b78837 Log urlmap 2016-11-22 16:44:08 -08:00
bprashanth
6260eeeed4 Re-order default backend deletion calls 2016-11-22 16:39:08 -08:00
Manuel de Brito Fontes
0dbe499a3b Fix lint errors 2016-11-11 19:46:09 -03:00
Manuel de Brito Fontes
96f8ec419d Remove gce data race in tests 2016-11-11 18:25:42 -03:00
Manuel de Brito Fontes
827fcf10dd Fix lint errors 2016-11-11 18:23:02 -03:00
Manuel de Brito Fontes
4d1887310b Update GCE ingress controller 2016-11-11 18:22:35 -03:00
Manuel de Brito Fontes
e963d095ab Remove nginx-alpha, examples and simplify read files 2016-11-10 18:46:41 -03:00
Manuel de Brito Fontes
55acaabbd8 Merge branch 'copy-history' of https://github.com/aledbf/contrib into history 2016-11-10 17:51:37 -03:00
bprashanth
ef44383e33 Basic structure 2016-11-10 10:23:50 -08:00
bprashanth
294ff58f63 Clarify ingress docs 2016-11-08 10:25:35 -08:00
Kubernetes Submit Queue
bff5d0e5a2 Merge pull request #1879 from r2d4/map_hash_bucket_size 
Automatic merge from submit-queue

Make map_hash_bucket_size configurable

I was getting an error while trying to run the nginx controller in minikube.  This allows this nginx configuration option to be passed in through a configmap.  

The default value depends on the processor's cache line size (32 | 64 | 128), however ServerNameHashBucketSize is determined similarly, so I've set it to the same default (64).

Fixes #1817

ref https://github.com/kubernetes/minikube/issues/611

cc @bprashanth
 2016-11-03 09:39:47 -07:00
Kubernetes Submit Queue
e1faa8ebe9 Merge pull request #1813 from marketlogicsoftware/kayrus/nginx-log-format 
Automatic merge from submit-queue

Added domain name and server port into nginx logs

I replaced dashes so it shouldn't brake log parsers.
In addition here are the [fluentd rules](dc71d8db4a/docker/fluentd/td-agent.conf (L230..L237)) which parse these logs (requires https://github.com/tagomoris/fluent-plugin-parser plugin)
 2016-10-25 09:51:43 -07:00
Manuel de Brito Fontes
248699cbc3 Sync yaml probes with published image 2016-10-21 11:59:12 -03:00
Matt Rickard
c8487c1973 Make map_hash_bucket_size configurable 2016-10-14 11:20:34 -07:00
Denis Andrejew
54891aef04 fix typo in ingress/controllers/README.md 2016-10-11 18:25:12 +02:00
Kubernetes Submit Queue
6456025035 Merge pull request #1830 from aledbf/dbackend 
Automatic merge from submit-queue

[nginx-ingress-controller] Add support for default backend in Ingress rule

replaces #1759
 2016-10-06 14:28:10 -07:00
Kubernetes Submit Queue
a2aae637dc Merge pull request #1808 from whitlockjc/document-nginx-connection-header 
Automatic merge from submit-queue

ingress/controllers/nginx: WebSocket documentation

For those that do not understand the default way in which nginx proxies
requests not containing a "Connection" header, the approach for enabling
WebSocket support might not make sense.  This commit adds documentation
that explains why things are done this way.
 2016-10-05 10:09:18 -07:00
Manuel de Brito Fontes
a0776997c3 Add support for default backend in Ingress rule 2016-10-04 09:28:21 -03:00
bprashanth
190c9a277a Bump glbc version in Makefile 2016-10-03 10:12:25 -07:00
bprashanth
98af96514e Don't index ingress.status.ip if empty. 2016-10-03 10:11:43 -07:00
Manuel de Brito Fontes
541928e27d Add external authentication using auth_request 2016-10-03 11:54:02 -03:00
kayrus
0bae7c4b7c Added domain name and server port into nginx logs 2016-09-30 12:32:25 +02:00
Manuel de Brito Fontes
25bf00a1fc Add docs about the log format 2016-09-29 22:16:32 -03:00
Jeremy Whitlock
0373ce6f31 ingress/controllers/nginx: WebSocket documentation 
For those that do not understand the default way in which nginx proxies
requests not containing a "Connection" header, the approach for enabling
WebSocket support might not make sense.  This commit adds documentation
that explains why things are done this way.
 2016-09-29 15:42:46 -06:00
Kubernetes Submit Queue
90d8402293 Merge pull request #1802 from aledbf/fix-vars 
Automatic merge from submit-queue

[nginx-ingress-controller] Initialize proxy_upstream_name variable

fixes #1801
 2016-09-29 11:28:25 -07:00
Manuel de Brito Fontes
75dd1d3c6a Initialize proxy_upstream_name variable 2016-09-29 14:53:54 -03:00
Kubernetes Submit Queue
e9b160c519 Merge pull request #1772 from aledbf/check-new-error 
Automatic merge from submit-queue

[nginx-ingress-controller] Avoid replacing nginx.conf file with invalid content
 2016-09-28 18:08:20 -07:00
Manuel de Brito Fontes
db3388e777 Avoid replacing nginx.conf file if the new configuration is invalid 2016-09-28 21:35:20 -03:00
George G
963081375b ingress/controllers/README.md: Fix a link 2016-09-28 16:32:20 +01:00
Kubernetes Submit Queue
d6e8d89108 Merge pull request #1771 from bprashanth/ing_0.8.0 
Automatic merge from submit-queue

Bump glbc to 0.8.0

Don't think this hits the bar for 1.4.0, but hopefully it can make 1.4.1. The version bump is for the godep update that fixes an issue with the throttling workqueue (https://github.com/kubernetes/kubernetes/pull/31396). I should've done this sooner, dropped it.

Also fixes https://github.com/kubernetes/contrib/issues/1776 and https://github.com/kubernetes/contrib/issues/1783
 2016-09-27 14:39:04 -07:00
Manuel de Brito Fontes
e74b8039a5 Add annotation to add CORS support 2016-09-27 13:35:57 -03:00
Kubernetes Submit Queue
b49a91965c Merge pull request #1786 from aledbf/custom-funcs-docs 
Automatic merge from submit-queue

[nginx-ingress-controller] Add docs about go template

Address https://github.com/kubernetes/contrib/pull/1711#issuecomment-249474385
 2016-09-26 15:44:20 -07:00
Kubernetes Submit Queue
741ac710cd Merge pull request #1749 from aledbf/cloud-health-check 
Automatic merge from submit-queue

[nginx-ingress-controller] Readiness probe that works behind a CP lb

fixes #1507
 2016-09-26 15:44:12 -07:00
Manuel de Brito Fontes
428d8e3a85 Add docs about go template 2016-09-26 11:41:29 -03:00
Kubernetes Submit Queue
d90ceb7f3c Merge pull request #1711 from aledbf/add-helper-to-funcmap 
Automatic merge from submit-queue

[nginx-ingress-controller]: Add function helpers to nginx template

fixes #1695
 2016-09-25 21:03:32 -07:00
bprashanth
e30bbdfe2c Don't reconcile health checks after first create. 2016-09-23 14:22:22 -07:00
bprashanth
d99efea804 Don't consider pods cross namespace for health checks 2016-09-22 14:56:50 -07:00
Brad Bowman
c33d05a467 Fix link to auth example 2016-09-22 14:33:22 -06:00
bprashanth
3c703356ee Fix log level so we log debug output by default. 2016-09-21 18:37:52 -07:00
bprashanth
8c770ba384 Bump glbc version to 0.8.0 2016-09-21 17:33:14 -07:00
Manuel de Brito Fontes
a965f44f84 Clarify the controller uses endpoints and not services 2016-09-21 17:53:39 -03:00
Manuel de Brito Fontes
4e722f9d6d Add the name of the upstream in the log 2016-09-18 11:50:42 -03:00
Manuel de Brito Fontes
9d4dfe7609 Change readiness probe for nginx ingress that works behind a CP lb 2016-09-16 19:09:29 -03:00
Kubernetes Submit Queue
77afc22875 Merge pull request #1743 from vyshane/nginx-ingress-controller-proxy-buffer-size-2 
Automatic merge from submit-queue

Allow customisation of the nginx proxy_buffer_size directive via ConfigMap

I'm opening a new PR with the same changes as #1693 because I pushed the latter with an email address that can't be used to sign the CLA. Description from the previous PR:

When using nginx as a proxy we can run into the following error:

```
upstream sent too big header while reading response header from upstream
```

In order to fix this, we need to be able to configure the proxy_buffer_size nginx directive to increase its value. This PR updates the nginx-ingress-controller to allow that.
 2016-09-15 09:49:58 -07:00
Vy-Shane Xie
ae1c4503b3 Allow customisation of the nginx proxy_buffer_size directive via ConfigMap 2016-09-15 23:14:16 +08:00
oilbeater
baf5c07446 Fix typo 2016-09-12 19:00:12 +08:00
bprashanth
5d653fc10c Clarify ingress limitation around large clusters. 2016-09-09 13:28:32 -07:00
Jan Chaloupka
8053699360 Remove "All rights reserved" from all the headers 2016-09-08 13:02:39 +02:00
Manuel de Brito Fontes
15cc763b2d Add function helpers to nginx template 2016-09-07 13:21:28 -07:00
Kubernetes Submit Queue
fbff29d1ec Merge pull request #1672 from pdoreau/patch-1 
Automatic merge from submit-queue

Add firewall rules and ing class clarifications
 2016-09-02 14:39:33 -07:00
Pierrick
aad635636b Update README.md 2016-09-02 23:11:22 +02:00
Pierrick
dc14774bac Update README.md 2016-09-02 10:20:06 +02:00
Pierrick
1cc40b45da Update README.md 2016-09-02 10:18:28 +02:00
Kubernetes Submit Queue
42e3a61d3c Merge pull request #1596 from aledbf/improve-defaults 
Automatic merge from submit-queue

[nginx-ingress-controller]: Adapt nginx hash sizes to the number of ingress

This change allows the tuning of 2 important NGINX variables:
- server_names_hash_max_size
- server_names_hash_bucket_size

The default values should be enough for most of the users but after +300 Ingress rules or long hostnames as FQDN NGINX requires tuning of this values or it will not start.

The introduced change allows the self-tuning using the Ingress information
Using `--v=3` it's possible to see the changes:
```
...
I0822 21:42:10.517778       1 template.go:84] adjusting ServerNameHashMaxSize variable from 4096 to 16384
...
```

fixes #1487
 2016-09-01 14:11:47 -07:00
Pierrick
f4854b60c9 Add firewall rules and ing class clarifications 2016-09-01 11:19:26 +02:00
Manuel de Brito Fontes
05add360d2 Update image version 2016-08-29 15:47:20 -03:00
Kubernetes Submit Queue
c6a1b820f0 Merge pull request #1571 from marketlogicsoftware/kayrus/fix_default_namespace 
Automatic merge from submit-queue

ingress: use POD_NAMESPACE as a namespace in cli parameters

When you deploy ingress not into `default` namespace, ingress RC fails with the `no service with name default/default-http-backend found: services "default-http-backend" not found` error message.

This fix uses `POD_NAMESPACE` which we already pass into the pod ENV.
 2016-08-26 16:11:52 -07:00
Manuel de Brito Fontes
b06fcbb8c3 Adapt nginx hash sizes to the number of ingress 2016-08-26 19:32:28 -03:00
Manuel de Brito Fontes
3c3880d28f Update sysctl method 2016-08-26 18:52:56 -03:00
Manuel de Brito Fontes
d43021b3f1 Update gce node return types 2016-08-25 14:08:29 -03:00
Manuel de Brito Fontes
e91c23ff2d Refactoring of templates 2016-08-25 14:08:29 -03:00
kayrus
d8fbe2f582 ingress: removed unnecessary whitespaces 2016-08-23 10:37:10 +02:00
Kubernetes Submit Queue
e4236ad0f2 Merge pull request #1577 from aledbf/update-nginx-controller 
Automatic merge from submit-queue

WIP: [nginx-ingress-controller] Release 0.8.3

fixes #1572
 2016-08-22 11:33:31 -07:00
Manuel de Brito Fontes
4f92eb9da2 Always listen on port 443, even without ingress rules 2016-08-22 10:51:11 -03:00
Manuel de Brito Fontes
9d07120eb1 Release 0.8.3 2016-08-19 11:44:22 -03:00
kayrus
e4de1e62b8 ingress: use POD_NAMESPACE as a namespace in cli parameters 2016-08-19 10:25:38 +02:00
Kubernetes Submit Queue
727a62421e Merge pull request #1467 from aledbf/change-client 
Automatic merge from submit-queue

[nginx-ingress-controller]: Use ClientConfig to configure connection

fixes #1459

Running with `docker run`:
```
core@localhost ~ $ docker run -it aledbf/nginx-third-party:0.31 bash
root@f6a96f46eab0:/# export KUBERNETES_MASTER=http://172.17.4.99:8080
root@f6a96f46eab0:/# /nginx-ingress-controller --default-backend-service=default/nginx-errors
I0802 14:44:58.604384       7 main.go:94] Using build: https://github.com/aledbf/contrib - git-5b9146a
W0802 14:44:58.605282       7 main.go:118] unexpected error getting runtime information: unable to get POD information (missing POD_NAME or POD_NAMESPACE environment variable)
I0802 14:44:58.607270       7 main.go:123] Validated default/nginx-errors as the default backend
W0802 14:44:58.611322       7 ssl.go:132] no file dhparam.pem found in secrets
I0802 14:44:58.615637       7 controller.go:1128] starting NGINX loadbalancer controller
I0802 14:44:58.615902       7 command.go:35] Starting NGINX process...
```

Running inside in a cluster:
```
I0802 14:47:50.254736       1 main.go:94] Using build: https://github.com/aledbf/contrib - git-5b9146a
I0802 14:47:50.254920       1 merged_client_builder.go:103] No kubeconfig could be created, falling back to service account.
I0802 14:47:50.343440       1 main.go:123] Validated default/nginx-errors as the default backend
W0802 14:47:50.343677       1 ssl.go:132] no file dhparam.pem found in secrets
I0802 14:47:50.347322       1 controller.go:1128] starting NGINX loadbalancer controller
I0802 14:47:50.347870       1 command.go:35] Starting NGINX process...
```

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.kubernetes.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.kubernetes.io/reviews/kubernetes/contrib/1467)
<!-- Reviewable:end -->
 2016-08-17 13:40:11 -07:00
Kubernetes Submit Queue
01cf346b6f Merge pull request #1435 from mml/k8s-ig-dead-code 
Automatic merge from submit-queue

Delete dead code in cluster_manager.



<!-- Reviewable:start -->
This change is [<img src="https://reviewable.kubernetes.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.kubernetes.io/reviews/kubernetes/contrib/1435)
<!-- Reviewable:end -->
 2016-08-12 14:13:33 -07:00
Kubernetes Submit Queue
34a469fa1b Merge pull request #1363 from bprashanth/ing_uid 
Automatic merge from submit-queue

Use existing uid if one is found

Without this if we create some ingresses we will get eg: a forwarding rule like "foo-uid". Now if we restart 
the ingress controller, and while it's down delete the configmap where it stores its uid, it will come back, see an existing ingress, but wrongly record the uid as "empty string". This will cause the ingress to ignore the old forwarding rule, backends etc.

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.kubernetes.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.kubernetes.io/reviews/kubernetes/contrib/1363)
<!-- Reviewable:end -->
 2016-08-12 11:03:58 -07:00
bprashanth
fc50762257 Poll and notice changes to cluster UID 2016-08-11 18:03:00 -07:00
Kubernetes Submit Queue
dfc322c2a2 Merge pull request #1503 from bprashanth/backends 
Automatic merge from submit-queue

Don't clobber backends.

If a parallel ingress controller updates the backend service with another instance group, don't clobber it, just make sure the instance group you put in is there.
 2016-08-11 17:13:50 -07:00
Kubernetes Submit Queue
3032ff166f Merge pull request #1501 from bprashanth/ing_docs_listing 
Automatic merge from submit-queue

Correctly handle ingress.class in GCE controller 

This bug would only get activated when a user has both `ingess.class=gce` and `ingress.class=nginx` ingresses active in the same GCE/GKE cluster, and would manifest as a set of cloud resources created wastefully for the `ingress.class=nginx` ingress as well.

We were previously only ignoring ingress.class (documented here: https://github.com/kubernetes/contrib/blob/master/ingress/controllers/gce/BETA_LIMITATIONS.md#disabling-glbc) when the ingress was created/deleted/modified. There's a chance another ingress with the correct class results in us entering the `sync` routine and listing all ingresses. The listing routine was not smart enough to ignore `ingress.class=nginx`, so we ended up creating resources for the nginx ingress anyway. 

The second commit fixes some of the nginx examples to include a `readiness` probe that is == liveness probe. 

Minhan or Girish, whichever one has spare cycles first.
 2016-08-11 13:43:47 -07:00
bprashanth
114dbd3575 Don't clobber backends inserted by other controllers. 2016-08-10 19:23:31 -07:00
Matt Liggett
1b5d8fe011 Delete dead code in cluster_manager. 2016-08-10 15:50:25 -07:00
bprashanth
7e674d5f24 Bump glbc image. 2016-08-10 14:09:08 -07:00
Prashanth Balasubramanian
c479d3e261 Bump glbc version 2016-08-08 19:10:09 -07:00
bprashanth
1a890fe7db Continue to ingore non-gce ingress in lister. 2016-08-08 12:47:37 -07:00
Prashanth B
139c5f2b4b Merge pull request #1450 from aledbf/improve-template-errors 
[nginx-ingress-controller]: Check for errors in nginx template
 2016-08-05 13:57:45 -07:00
Manuel de Brito Fontes
4fe3462a82 Change healthz port to avoid conflicts when running using hostNetwork 2016-08-02 23:10:47 -04:00
Manuel de Brito Fontes
0f70b80745 Use ClientConfig to configure connection 2016-08-02 10:46:35 -04:00
Siva Manivannan
c2d56dc685 GCE ingress http-only annotation naming fix 2016-08-02 00:10:24 -05:00
Prashanth Balasubramanian
632d4ae45c Fix health check link 2016-07-29 14:54:01 -07:00
Manuel de Brito Fontes
0886c7e58a Check for errors in nginx template 2016-07-28 17:41:12 -04:00
Manuel de Brito Fontes
9f64273b9c Use system self signed certificate as default SSL certificate 2016-07-22 19:30:00 -04:00
Manuel de Brito Fontes
2c7d921d76 Update changelog 2016-07-20 16:39:46 -04:00
Manuel de Brito Fontes
3ef038c557 Change nginx status port to 18080 to avoid conflicts with port 8080 2016-07-20 16:39:46 -04:00
Manuel de Brito Fontes
0d1dd32567 Release 0.8.2 2016-07-20 16:39:46 -04:00
Prashanth B
bff40d7c14 Merge pull request #1351 from aledbf/check-certificate 
[nginx-ingress-controller]: Avoid generation of invalid ssl certificates
 2016-07-20 13:36:23 -07:00
Manuel de Brito Fontes
de6b00daa3 Change container /proc values to improve nginx performance 2016-07-20 15:00:30 -04:00
Manuel de Brito Fontes
bf5113d91c Avoid generation of invalid ssl certificates 2016-07-20 14:36:15 -04:00
Prashanth B
1a04fa4881 Merge pull request #1398 from aledbf/nginx-httpoxy 
Mitigate HTTPoxy Vulnerability
 2016-07-20 10:56:17 -07:00
Prashanth B
5306ca4eb9 Merge pull request #1384 from atombender/issue_1883 
Unset Authorization header when proxying
 2016-07-20 10:54:57 -07:00
Prashanth B
eabad1c990 Merge pull request #1338 from aledbf/ssl-default-backend 
[nginx-ingress-controller]: Add HTTPS default backend
 2016-07-20 10:35:15 -07:00
Prashanth B
fe59e29f5e Merge pull request #1336 from aledbf/skip-ingress-rules 
[nginx-ingress-controller]: Add annotation to skip ingress rule
 2016-07-20 10:33:17 -07:00
Manuel de Brito Fontes
a38f2b21a1 Mitigate HTTPoxy Vulnerability 2016-07-20 09:55:46 -04:00
Manuel de Brito Fontes
d3d6c879d5 Refactor nginx certificate creation. 2016-07-18 17:08:00 -04:00
Alexander Staubo
5effb7b4e3 Unset Authorization header when proxying. 2016-07-17 22:02:02 -04:00
Prashanth B
ce7085d277 Merge pull request #1289 from simonswine/docs-kube-lego 
ingress: nginx suggest kube-lego for automated cert management
 2016-07-15 17:51:03 -07:00
Prashanth B
1aaa63e0be Merge pull request #1350 from aledbf/nginx-backlog 
[nginx-ingress-controller]: Improve performance (listen backlog=net.core.somaxconn)
 2016-07-12 08:18:53 -07:00
Manuel de Brito Fontes
b4f1b7c0f5 Show warning in case of low number of connections 2016-07-12 00:40:45 -04:00
Manuel de Brito Fontes
a34124be9d Update gce NodeCondition parameter 2016-07-11 23:43:36 -04:00
Manuel de Brito Fontes
8b25cc67a5 Improve nginx performance to match listen backlog with net.core.somaxconn 2016-07-11 23:04:21 -04:00
Prashanth B
cce520a950 Merge pull request #1324 from bprashanth/docs 
GCE Ingress docs update
 2016-07-08 20:07:27 -07:00
Manuel de Brito Fontes
8f4efb4e3d Add HTTPS default backend 2016-07-08 17:20:14 -04:00
Manuel de Brito Fontes
89bbb8d4ee Add annotation to skip ingress rule 2016-07-08 17:01:40 -04:00
Prashanth Balasubramanian
94ea4ab247 GCE Ingress docs update 2016-07-08 11:15:27 -07:00
Prashanth B
ba964cdcda Merge pull request #1299 from Nalum/patch-2 
Formatting fix
 2016-07-06 13:47:26 -07:00
Manuel de Brito Fontes
9b762b7d54 Release 0.8.1 2016-07-06 12:22:07 -04:00
Prashanth B
a7570a8b37 Merge pull request #1315 from fcvarela/master 
Addresses #1314 [nginx-ingress-controller ssl nginx reload abort]
 2016-07-06 09:10:53 -07:00
Filipe Varela
9285335ce3 Fixes #1314 
Removed comment to be consistent w/ rest of code

Fixes typo and string concat
 2016-07-06 12:35:08 +01:00
Manuel de Brito Fontes
a2d9c6e48b Fix duplicated real_ip_header 2016-07-05 12:37:54 -04:00
Prashanth B
15f199c84a Merge pull request #1259 from aledbf/release-0.8 
[nginx-ingress-controller] Release 0.8
 2016-07-01 20:12:21 -07:00
Manuel de Brito Fontes
6d03a101be Add mime aplication/x-javascript to the gzip list and show the defaults in configuration.md 2016-07-01 21:15:54 -04:00
Prashanth B
0d5917e6a4 Merge pull request #1296 from Nalum/patch-1 
Fix formatting
 2016-07-01 17:23:50 -07:00
Manuel de Brito Fontes
0bcfcef8f8 Release 0.8 2016-07-01 19:18:45 -04:00
Manuel de Brito Fontes
09d7b756db Add support for dynamic TLS records and spdy 2016-07-01 14:07:48 -04:00
Luke Mallon
cd2e2b0717 Formatting fix 2016-06-30 15:12:34 +01:00
Luke Mallon
c398b66aa9 Fix formatting 
Fix the formatting of this README
 2016-06-30 09:53:28 +01:00
Prashanth Balasubramanian
8bbf869030 Add an annotation to ignore non-gce ingresses 2016-06-29 15:49:02 -07:00
Prashanth Balasubramanian
cb05e7b18e Don't adopt complex http probes for health checks 2016-06-29 15:02:27 -07:00
Prashanth Balasubramanian
58d5638888 Firewall updates only on port change 2016-06-29 15:02:27 -07:00
Prashanth Balasubramanian
5db8389fb3 Rate limit requeues on error 2016-06-29 15:02:27 -07:00
Prashanth Balasubramanian
acf87ef9d5 Pass in nil instead of the interface 2016-06-29 15:02:22 -07:00
Christian Simon
7303019de1 Suggest kube-lego for automated cert management 2016-06-29 09:30:03 +02:00
Manuel de Brito Fontes
26fd12a81c Avoid sync without a reachable master 2016-06-23 10:38:08 -04:00
Prashanth B
bf9ea5eec4 Revert "[nginx-ingress-controller]: Avoid sync without a reachable master" 2016-06-22 22:56:46 -07:00
Prashanth B
7e8760b9db Merge pull request #1233 from aledbf/avoid-sync 
[nginx-ingress-controller]: Avoid sync without a reachable master
 2016-06-22 22:44:12 -07:00
Prashanth B
db825411fb Merge pull request #1253 from aledbf/use-delayed-queue 
[nginx-ingress-controller]: Use delayed queue
 2016-06-22 22:40:16 -07:00
Prashanth B
b9740c96d9 Merge pull request #1130 from aledbf/improve-docs 
[nginx-ingress-controller] Improve docs and examples
 2016-06-22 22:37:43 -07:00
Manuel de Brito Fontes
a153187ce7 Use delayed queue 2016-06-22 17:48:13 -04:00
Piotr Szczesniak
72fe8dc293 Merge pull request #1249 from bprashanth/ing 
Reduce number of backends in basic ingress example
 2016-06-22 21:28:39 +02:00
Prashanth B
b728a0cbd5 Merge pull request #1239 from aledbf/conditional-log 
[nginx-ingress-controller]: Add support for conditional log of urls
 2016-06-22 10:47:41 -07:00
Manuel de Brito Fontes
56a2bc68ab Change annotation name secure-upstreams to secure-backends 2016-06-22 12:34:45 -04:00
Prashanth Balasubramanian
834ddb6813 Quota modification 2016-06-22 08:58:04 -07:00
Manuel de Brito Fontes
4335d831a9 Improve docs 2016-06-22 08:10:05 -04:00
Prashanth Balasubramanian
9bb2aa7d8f Fix log statement 2016-06-21 15:07:11 -07:00
Prashanth Balasubramanian
6fa9fd2828 Bump up image version for glbc 2016-06-21 15:00:04 -07:00
Prashanth Balasubramanian
423433bc5f Update image on ingress example 2016-06-20 15:18:34 -07:00
Manuel de Brito Fontes
3cbe01767f Add support for conditional log of urls 2016-06-18 18:04:07 -04:00
Manuel de Brito Fontes
ed41a706b9 Avoid sync without a reachable master 2016-06-17 19:13:52 -04:00
Manuel de Brito Fontes
e68aa3806a Fix stats by country in nginx status page 2016-06-17 18:26:08 -04:00
Cory Klein
57c0eab11d Fix typo "does no" -> "does not" 2016-06-15 12:00:48 -06:00
Prashanth B
5d49051168 Merge pull request #1144 from aledbf/ip-whitelisting 
[nginx-ingress-controller] Add cidr whitelist support
 2016-06-13 18:34:20 -07:00
Manuel de Brito Fontes
17e42ed902 Add example 2016-06-13 14:22:03 -04:00
Manuel de Brito Fontes
e792e940b2 Add ip/cidr white list support 2016-06-09 17:59:46 -04:00
Manuel de Brito Fontes
b1a17c565a Fix nginx rewrite rule order 2016-06-09 17:08:29 -04:00
Prashanth B
b395b714be Merge pull request #1133 from bprashanth/ubernetes_healthchecks 
Ubernetes multizone and custom healthchecks
 2016-06-09 13:17:38 -07:00
Prashanth Balasubramanian
61558f4d19 Get rid of default-zone everywhere. 2016-06-08 11:24:06 -07:00
Christian Simon
3ae80fd3cc ingress: adds configurable SSL redirect nginx controller 
* add global value to config map
* add per ingress value as annotation to ingress resources
 2016-06-05 15:30:09 +01:00
Christian Simon
08a05db93c Refactor nginx config into own package 2016-06-05 15:29:59 +01:00
Prashanth Balasubramanian
3bed62f51e Forget oldSSL cert after first cleanup 2016-06-03 10:44:55 -07:00
Prashanth Balasubramanian
9abd4e0ea6 append / to healthcheck url 2016-06-03 10:39:29 -07:00
Prashanth Balasubramanian
22c6e5ddd7 Unittests 2016-06-03 10:39:29 -07:00
Prashanth Balasubramanian
f84ca54831 Readiness probe health check 2016-06-03 10:39:29 -07:00
Prashanth Balasubramanian
32ac61e7e3 Teach l7 controller about zones 2016-06-03 10:39:29 -07:00
Christian Simon
00b2180a8f ingress: nginx controller watches referenced tls secrets 
* reload certificates on change
 2016-06-03 16:53:21 +01:00