Commit graph

4686 commits

Author SHA1 Message Date
Elvin Efendi
60da27bbe6 refactor force ssl redirect logic 2019-09-24 14:57:52 -04:00
Kubernetes Prow Robot
665e503051 Merge pull request #4594 from Shopify/cleanup-certs
cleanup unused certificates
2019-09-24 11:51:29 -07:00
Elvin Efendi
178c67d589 cleanup unused certificates 2019-09-24 14:16:03 -04:00
Manuel Alejandro de Brito Fontes
00f916adc9 Rollback change of ModSecurity setting SecAuditLog 2019-09-24 14:53:44 -03:00
Kubernetes Prow Robot
1eceeafa75 Merge pull request #4550 from Shopify/upstream-auth-proxy-set-headers
Add support for configmap of headers for auth-url per ingress
2019-09-24 09:33:27 -07:00
Kubernetes Prow Robot
c8557d7a93 Merge pull request #4591 from membphis/change/lua-code-style
optimize: local cache global variable and avoid single lines over 80
2019-09-24 07:55:29 -07:00
A Gardner
ea4b970f83 Add support for configmap of headers to be sent to external auth service 2019-09-24 10:53:23 -04:00
Kubernetes Prow Robot
0addf0bdbd Merge pull request #4586 from aledbf/fix-reload
Fix reload when a configmap changes
2019-09-24 07:23:28 -07:00
Yuansheng
e7752af693 optimize: local cache global variable and avoid single lines over 80
characters.
2019-09-24 10:08:45 -04:00
Manuel Alejandro de Brito Fontes
0c7ceabf18 Fix reload when a configmap changes 2019-09-24 10:55:59 -03:00
Kubernetes Prow Robot
437449a542 Merge pull request #4514 from alexmaret/4475-stickyness-mode
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00
Alexander Maret-Huskinson
553e6a4813 Fixed LUA lint findings. 2019-09-24 10:56:11 +02:00
Alexander Maret-Huskinson
da078c68c6 Fixed review findings. 2019-09-24 10:46:02 +02:00
Kubernetes Prow Robot
4022d402b2 Merge pull request #4587 from aledbf/order-directives
Avoid unnecessary reloads generating lua_shared_dict directives
2019-09-23 06:29:23 -07:00
Olaf Klischat
24bb6c1d36 tls user guide --default-ssl-certificate clarification
Evidently the `--default-ssl-certificate` option is used not only for the catch-all server, but also for all ingress `tls:` sections that don't have a `secretName` option. This doesn't seem to be documented anywhere, hence this change.
2019-09-23 12:35:10 +02:00
Manuel Alejandro de Brito Fontes
e07e407d70 Avoid unnecessary reloads generating lua_shared_dict directives 2019-09-22 21:16:00 -03:00
Manuel Alejandro de Brito Fontes
5d84c1f2f9 Remove retries to ExternalName (#4584) 2019-09-22 18:16:25 -03:00
Manuel Alejandro de Brito Fontes
4728f7161b Disable go modules (#4583) 2019-09-22 17:18:50 -03:00
Manuel Alejandro de Brito Fontes
5ba2c71bfb Update kubectl-plugin docs (#4582) 2019-09-22 16:39:19 -03:00
Manuel Alejandro de Brito Fontes
8db15d2abc Fix spelling and remove local reference of 404 docker image (#4581) 2019-09-22 16:08:47 -03:00
Kubernetes Prow Robot
0ac0fa531f Merge pull request #4575 from aledbf/vendor
Update go dependencies for kubernetes 1.16.0
2019-09-19 07:53:01 -07:00
Manuel Alejandro de Brito Fontes
abfdea8b55 Update runc cgroup mount api 2019-09-19 11:01:31 -03:00
Manuel Alejandro de Brito Fontes
97f65d91a5 Update go dependencies for kubernetes 1.16.0 2019-09-19 11:01:00 -03:00
Kubernetes Prow Robot
a3edea1631 Merge pull request #4572 from aledbf/fix-log
Fix log format after #4557
2019-09-18 09:49:30 -07:00
Manuel Alejandro de Brito Fontes
d316ba0469 Fix log format after #4557 2019-09-18 12:52:09 -03:00
Kubernetes Prow Robot
493d3714b1 Merge pull request #4571 from aledbf/log
Increase log level for identical CreationTimestamp warning
2019-09-18 08:21:32 -07:00
Manuel Alejandro de Brito Fontes
1b63032c52 Increase log level for identical CreationTimestamp warning 2019-09-18 11:59:03 -03:00
Kubernetes Prow Robot
26f6dec849 Merge pull request #4569 from mkabischev/jaeger-header-configuration
allow to configure jaeger header names
2019-09-17 20:29:29 -07:00
Manuel Alejandro de Brito Fontes
76ce1fe8f7 Update nginx image (#4570) 2019-09-18 00:02:29 -03:00
Mike Kabischev
43fe8ce219 allow to configure jaeger header names 2019-09-17 12:35:53 +03:00
Kubernetes Prow Robot
56c494e68d Merge pull request #4560 from Shopify/basic-auth-map
Support configuring basic auth credentials as a map of user/password hashes
2019-09-16 07:52:39 -07:00
Kubernetes Prow Robot
3fc49f793b Merge pull request #4557 from aledbf/remove-realipvar
Remove the_real_ip variable
2019-09-16 07:30:39 -07:00
A Gardner
4304755a97 Add annotation to support map of user/pass pairs in basic auth 2019-09-13 11:33:33 -04:00
Manuel Alejandro de Brito Fontes
4ff960d964 Allow multiple CA Certificates (#4556) 2019-09-13 09:22:24 -03:00
Manuel Alejandro de Brito Fontes
0d8ec3dbce Remove the_real_ip variable 2019-09-12 20:01:33 -03:00
Kubernetes Prow Robot
7862814d67 Merge pull request #4548 from ElvinEfendi/regression-test
regression test for the issue fixed in #4543
2019-09-10 07:52:55 -07:00
Manuel Alejandro de Brito Fontes
188a0e296a Cleanup of docker build (#4549) 2019-09-10 11:22:04 -03:00
Elvin Efendi
8457dc0478 regression test for the issue fixed in #4543 2019-09-10 10:00:21 -04:00
Manuel Alejandro de Brito Fontes
820da81efb Fix terraform build of nginx images (#4547) 2019-09-10 10:26:10 -03:00
Manuel Alejandro de Brito Fontes
22ceefb74e Rollback luarocks version to 3.1.3 (#4545) 2019-09-09 13:15:46 -03:00
Manuel Alejandro de Brito Fontes
e3bde66337 Add terraform scripts to build nginx image (#4484) 2019-09-09 01:18:30 -03:00
Manuel Alejandro de Brito Fontes
5d32bfcaf9 WIP Remove nginx unix sockets (#4531)
* Remove nginx unix sockets
* Use an emptyDir volume for /tmp in PSP e2e tests
2019-09-08 18:14:54 -03:00
Kubernetes Prow Robot
41fcfa1fc8 Merge pull request #4506 from ProNic-QY/master
Fix panic on multiple ingress mess up upstream is primary or not
2019-09-07 12:15:18 -07:00
Kubernetes Prow Robot
d3978ba651 Merge pull request #4543 from jacksontj/ipv6_resolvers
Correctly format ipv6 resolver config for lua
2019-09-07 11:51:18 -07:00
Thomas Jackson
6208ab22ed Correctly format ipv6 resolver config for lua
It seems that when support was added for parsing resolv_conf directly a regression was introduced which effectively breaks anyone with ipv6 resolvers.

Regression of #3895
2019-09-06 21:18:07 -07:00
Kubernetes Prow Robot
18f9aa9035 Merge pull request #4535 from aledbf/speedup
Improve the time to run e2e tests
2019-09-05 13:24:58 -07:00
Manuel Alejandro de Brito Fontes
e478e3729d Improve the time to run e2e tests 2019-09-05 11:46:53 -04:00
Kubernetes Prow Robot
11d9f40158 Merge pull request #4534 from ramnes/current-reloads-count
Show current reloads count, not total
2019-09-05 06:29:09 -07:00
Guillaume Gelin
c669fbc2f3 Show current reloads count, not total 2019-09-05 15:03:40 +02:00
Kubernetes Prow Robot
b4c77be8e5 Merge pull request #4509 from aledbf/nginx
Update openresty and third party modules
2019-09-04 13:14:22 -07:00