
* Drop v1beta1 from ingress nginx (#7156) * Drop v1beta1 from ingress nginx Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix intorstr logic in controller Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * fixing admission Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * more intorstr fixing * correct template rendering Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix e2e tests for v1 api Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix gofmt errors * This is finally working...almost there... Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Re-add removed validation of AdmissionReview * Prepare for v1.0.0-alpha.1 release Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Update changelog and matrix table for v1.0.0-alpha.1 (#7274) Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * add docs for syslog feature (#7219) * Fix link to e2e-tests.md in developer-guide (#7201) * Use ENV expansion for namespace in args (#7146) Update the DaemonSet namespace references to use the `POD_NAMESPACE` environment variable in the same way that the Deployment does. * chart: using Helm builtin capabilities check (#7190) Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> * Update proper default value for HTTP2MaxConcurrentStreams in Docs (#6944) It should be 128 as documented in https://github.com/kubernetes/ingress-nginx/blob/master/internal/ingress/controller/config/config.go#L780 * Fix MaxWorkerOpenFiles calculation on high cores nodes (#7107) * Fix MaxWorkerOpenFiles calculation on high cores nodes * Add e2e test for rlimit_nofile * Fix doc for max-worker-open-files * ingress/tcp: add additional error logging on failed (#7208) * Add file containing stable release (#7313) * Handle named (non-numeric) ports correctly (#7311) Signed-off-by: Carlos Panato <ctadeu@gmail.com> * Updated v1beta1 to v1 as its deprecated (#7308) * remove mercurial from build (#7031) * Retry to download maxmind DB if it fails (#7242) * Retry to download maxmind DB if it fails. Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Add retries count arg, move retry logic into DownloadGeoLite2DB function Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Reorder parameters in DownloadGeoLite2DB Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Remove hardcoded value Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Release v1.0.0-alpha.1 * Add changelog for v1.0.0-alpha.2 * controller: ignore non-service backends (#7332) * controller: ignore non-service backends Signed-off-by: Carlos Panato <ctadeu@gmail.com> * update per feedback Signed-off-by: Carlos Panato <ctadeu@gmail.com> * fix: allow scope/tcp/udp configmap namespace to altered (#7161) * Lower webhook timeout for digital ocean (#7319) * Lower webhook timeout for digital ocean * Set Digital Ocean value controller.admissionWebhooks.timeoutSeconds to 29 * update OWNERS and aliases files (#7365) (#7366) Signed-off-by: Carlos Panato <ctadeu@gmail.com> * Downgrade Lua modules for s390x (#7355) Downgrade Lua modules to last known working version. * Fix IngressClass logic for newer releases (#7341) * Fix IngressClass logic for newer releases Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Change e2e tests for the new IngressClass presence * Fix chart and admission tests Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix helm chart test Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix reviews * Remove ingressclass code from admission * update tag to v1.0.0-beta.1 * update readme and changelog for v1.0.0-beta.1 * Release v1.0.0-beta.1 - helm and manifests (#7422) * Change the order of annotation just to trigger a new helm release (#7425) * [cherry-pick] Add dev-v1 branch into helm releaser (#7428) * Add dev-v1 branch into helm releaser (#7424) * chore: add link for artifacthub.io/prerelease annotations Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com> * k8s job ci pipeline for dev-v1 br v1.22.0 (#7453) * k8s job ci pipeline for dev-v1 br v1.22.0 Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * k8s job ci pipeline for dev-v1 br v1.21.2 Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * remove v1.21.1 version Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * Add controller.watchIngressWithoutClass config option (#7459) Signed-off-by: Akshit Grover <akshit.grover2016@gmail.com> * Release new helm chart with certgen fixed (#7478) * Update go version, modules and remove ioutil * Release new helm chart with certgen fixed * changed appversion, chartversion, TAG, image (#7490) * Fix CI conflict * Fix CI conflict * Fix build.sh from rebase process * Fix controller_test post rebase Co-authored-by: Tianhao Guo <rggth09@gmail.com> Co-authored-by: Ray <61553+rctay@users.noreply.github.com> Co-authored-by: Bill Cassidy <cassid4@gmail.com> Co-authored-by: Jintao Zhang <tao12345666333@163.com> Co-authored-by: Sathish Ramani <rsathishx87@gmail.com> Co-authored-by: Mansur Marvanov <nanorobocop@gmail.com> Co-authored-by: Matt1360 <568198+Matt1360@users.noreply.github.com> Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com> Co-authored-by: Kundan Kumar <kundan.kumar@india.nec.com> Co-authored-by: Tom Hayward <thayward@infoblox.com> Co-authored-by: Sergey Shakuto <sshakuto@infoblox.com> Co-authored-by: Tore <tore.lonoy@gmail.com> Co-authored-by: Bouke Versteegh <info@boukeversteegh.nl> Co-authored-by: Shahid <shahid@us.ibm.com> Co-authored-by: James Strong <strong.james.e@gmail.com> Co-authored-by: Long Wu Yuan <longwuyuan@gmail.com> Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com> Co-authored-by: Neha Lohia <nehapithadiya444@gmail.com> Co-authored-by: Akshit Grover <akshit.grover2016@gmail.com>
177 lines
4.6 KiB
Go
177 lines
4.6 KiB
Go
/*
|
|
Copyright 2015 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package parser
|
|
|
|
import (
|
|
"fmt"
|
|
"net/url"
|
|
"strconv"
|
|
"strings"
|
|
|
|
networking "k8s.io/api/networking/v1"
|
|
"k8s.io/apimachinery/pkg/util/sets"
|
|
|
|
"k8s.io/ingress-nginx/internal/ingress/errors"
|
|
)
|
|
|
|
// DefaultAnnotationsPrefix defines the common prefix used in the nginx ingress controller
|
|
const DefaultAnnotationsPrefix = "nginx.ingress.kubernetes.io"
|
|
|
|
var (
|
|
// AnnotationsPrefix is the mutable attribute that the controller explicitly refers to
|
|
AnnotationsPrefix = DefaultAnnotationsPrefix
|
|
)
|
|
|
|
// IngressAnnotation has a method to parse annotations located in Ingress
|
|
type IngressAnnotation interface {
|
|
Parse(ing *networking.Ingress) (interface{}, error)
|
|
}
|
|
|
|
type ingAnnotations map[string]string
|
|
|
|
func (a ingAnnotations) parseBool(name string) (bool, error) {
|
|
val, ok := a[name]
|
|
if ok {
|
|
b, err := strconv.ParseBool(val)
|
|
if err != nil {
|
|
return false, errors.NewInvalidAnnotationContent(name, val)
|
|
}
|
|
return b, nil
|
|
}
|
|
return false, errors.ErrMissingAnnotations
|
|
}
|
|
|
|
func (a ingAnnotations) parseString(name string) (string, error) {
|
|
val, ok := a[name]
|
|
if ok {
|
|
s := normalizeString(val)
|
|
if len(s) == 0 {
|
|
return "", errors.NewInvalidAnnotationContent(name, val)
|
|
}
|
|
|
|
return s, nil
|
|
}
|
|
return "", errors.ErrMissingAnnotations
|
|
}
|
|
|
|
func (a ingAnnotations) parseInt(name string) (int, error) {
|
|
val, ok := a[name]
|
|
if ok {
|
|
i, err := strconv.Atoi(val)
|
|
if err != nil {
|
|
return 0, errors.NewInvalidAnnotationContent(name, val)
|
|
}
|
|
return i, nil
|
|
}
|
|
return 0, errors.ErrMissingAnnotations
|
|
}
|
|
|
|
func checkAnnotation(name string, ing *networking.Ingress) error {
|
|
if ing == nil || len(ing.GetAnnotations()) == 0 {
|
|
return errors.ErrMissingAnnotations
|
|
}
|
|
if name == "" {
|
|
return errors.ErrInvalidAnnotationName
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// GetBoolAnnotation extracts a boolean from an Ingress annotation
|
|
func GetBoolAnnotation(name string, ing *networking.Ingress) (bool, error) {
|
|
v := GetAnnotationWithPrefix(name)
|
|
err := checkAnnotation(v, ing)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return ingAnnotations(ing.GetAnnotations()).parseBool(v)
|
|
}
|
|
|
|
// GetStringAnnotation extracts a string from an Ingress annotation
|
|
func GetStringAnnotation(name string, ing *networking.Ingress) (string, error) {
|
|
v := GetAnnotationWithPrefix(name)
|
|
err := checkAnnotation(v, ing)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
return ingAnnotations(ing.GetAnnotations()).parseString(v)
|
|
}
|
|
|
|
// GetIntAnnotation extracts an int from an Ingress annotation
|
|
func GetIntAnnotation(name string, ing *networking.Ingress) (int, error) {
|
|
v := GetAnnotationWithPrefix(name)
|
|
err := checkAnnotation(v, ing)
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
return ingAnnotations(ing.GetAnnotations()).parseInt(v)
|
|
}
|
|
|
|
// GetAnnotationWithPrefix returns the prefix of ingress annotations
|
|
func GetAnnotationWithPrefix(suffix string) string {
|
|
return fmt.Sprintf("%v/%v", AnnotationsPrefix, suffix)
|
|
}
|
|
|
|
func normalizeString(input string) string {
|
|
trimmedContent := []string{}
|
|
for _, line := range strings.Split(input, "\n") {
|
|
trimmedContent = append(trimmedContent, strings.TrimSpace(line))
|
|
}
|
|
|
|
return strings.Join(trimmedContent, "\n")
|
|
}
|
|
|
|
var configmapAnnotations = sets.NewString(
|
|
"auth-proxy-set-header",
|
|
"fastcgi-params-configmap",
|
|
)
|
|
|
|
// AnnotationsReferencesConfigmap checks if at least one annotation in the Ingress rule
|
|
// references a configmap.
|
|
func AnnotationsReferencesConfigmap(ing *networking.Ingress) bool {
|
|
if ing == nil || len(ing.GetAnnotations()) == 0 {
|
|
return false
|
|
}
|
|
|
|
for name := range ing.GetAnnotations() {
|
|
if configmapAnnotations.Has(name) {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// StringToURL parses the provided string into URL and returns error
|
|
// message in case of failure
|
|
func StringToURL(input string) (*url.URL, error) {
|
|
parsedURL, err := url.Parse(input)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("%v is not a valid URL: %v", input, err)
|
|
}
|
|
|
|
if parsedURL.Scheme == "" {
|
|
return nil, fmt.Errorf("url scheme is empty")
|
|
} else if parsedURL.Host == "" {
|
|
return nil, fmt.Errorf("url host is empty")
|
|
} else if strings.Contains(parsedURL.Host, "..") {
|
|
return nil, fmt.Errorf("invalid url host")
|
|
}
|
|
|
|
return parsedURL, nil
|
|
}
|