347 Commits
Author SHA1 Message Date
Weihang LoandGitHub 12dddcca17 docs: fix use-gzip wrong markdown style 2020-04-11 14:28:04 +08:00
Luis ValdésandGitHub e001b5a5b7 I found a typo :)
Change *onyl* to * only*
2020-02-27 23:05:37 -03:00
schaefecandLaszlo Janosi 141ea59b7f Allows overriding the server name used to verify the certificate of the proxied HTTPS server 2020-02-25 13:32:14 +01:00
Kubernetes Prow RobotandGitHub 35264d6e8f Merge pull request #5114 from whalecold/match
Feat: add header-pattern annotation.
2020-02-24 17:07:36 -08:00
Kubernetes Prow RobotandGitHub 6cd223558f Merge pull request #4981 from janosi/proxy-ssl-scope
Applying proxy-ssl-* directives on locations only
2020-02-24 15:53:36 -08:00
Lisheng Zheng 0b33650bb8 Feat: canary supports using specific match strategy to match header value. 2020-02-21 10:02:20 +08:00
James TaylorandGitHub f97599c189 Use correct spelling of "Original"
Fix the spelling of "original" in the annotations documentation
2020-02-20 16:45:26 +11:00
Jack LindamoodandGitHub a90452774a ingress-path-matching: doc typo
A small typo in the README describing the path matching.
2020-02-18 10:19:53 -08:00
Daniel Arifin d48d5a61ae Add gzip-min-length as a configurable 2020-02-14 13:29:51 +07:00
Manuel Alejandro de Brito FontesandGitHub 0365a7c172 Remove minikube and only use kind (#5059) 2020-02-12 20:19:57 -03:00
Manuel Alejandro de Brito FontesandGitHub 2c5819e1b3 Add flag to allow custom ingress status update intervals (#5050) 2020-02-10 16:52:50 -03:00
Kubernetes Prow RobotandGitHub 5e54f66ab2 Merge pull request #5040 from BrianKopp/samesite-followup
Update documentation and remove hack fixed by upstream cookie library
2020-02-10 10:25:53 -08:00
Manuel Alejandro de Brito FontesandGitHub 34b6d083b8 Cleanup docs (#5043) 2020-02-09 20:50:27 -03:00
BrianKopp 34b194c770 Update documentation and remove hack fixed by upstream cookie library 2020-02-08 11:54:52 -07:00
Manuel Alejandro de Brito Fontes b3146354d4 Refactor mirror feature 2020-02-05 10:39:55 -03:00
Kubernetes Prow RobotandGitHub beef9fae2d Merge pull request #4949 from BrianKopp/same-site
Add SameSite support - omit None for old browsers
2020-01-31 03:50:21 -08:00
Herr-SeppandGitHub 3f4da0fa0f added hint why regular expressions might not be accepted
Kubernetes validates all regular expressions using RE2 which does not support the full syntax of PCRE which uses NGINX.

see: #4989
2020-01-30 19:22:41 +01:00
Brian Kopp 1b523390bb Add SameSite=None support and conditionally omit SameSite=None for backwards compatibility 2020-01-29 14:30:00 -07:00
Laszlo Janosi bc79fe1532 Add: documentation for proxy-ssl-location-only 2020-01-29 10:00:55 +01:00
Manuel Alejandro de Brito FontesandGitHub 74944b99e9 Enable download of GeoLite2 databases (#4896) 2020-01-08 19:46:43 -03:00
Sungmin LeeandSungmin Lee d7be5db7de Support sample rate and global sampling configuration for Datadog in ConfigMap 2020-01-07 16:59:59 -08:00
Denis Boulas 8bf155d0d7 Fixed documentation for FCGI annotation. 2019-12-19 03:48:55 +03:00
Manuel Alejandro de Brito Fontes 0dce5be743 Migrate ingress definitions from extensions to networking.k8s.io 2019-12-12 21:25:00 -03:00
Sablu MiahandGitHub 010ec6f159 Remove extra annotation when Enabling ModSecurity
Since version 0.25, if you try to use both annotations of:

nginx.ingress.kubernetes.io/modsecurity-snippet: |
Include /etc/nginx/owasp-modsecurity-crs/nginx-modsecurity.conf
Include /etc/nginx/modsecurity/modsecurity.conf

and 

nginx.ingress.kubernetes.io/enable-modsecurity: "true"

it breaks nginx config and you will not catch it unless you have nginx admission controller enabled. 

You do not need the annotation of `Include /etc/nginx/modsecurity/modsecurity.conf` from version 0.25
2019-11-28 15:16:09 +00:00
Kubernetes Prow RobotandGitHub b286c2a336 Merge pull request #4732 from willthames/enable-opentracing-annotation
Allow enabling/disabling opentracing for ingresses
2019-11-26 17:31:21 -08:00
Will Thames 0ae463a5f3 Provide annotation to control opentracing
By default you might want opentracing off, but on for a particular
ingress.

Similarly, you might want opentracing globally on, but disabled for
a specific endpoint. To achieve this, `opentracing_propagate_context`
cannot be set when combined with `opentracing off`

A new annotation, `enable-opentracing` allows more fine grained control
of opentracing for specific ingresses.
2019-11-27 11:07:26 +10:00
Matt Busche 6b0a6ec8b3 Fix extra word 2019-11-20 19:01:56 -06:00
Syunsuke KommaandGitHub 73aaf0ff28 Update annotations.md
Add links to proxy-buffering section
2019-11-13 12:54:42 +09:00
Syunsuke KommaandGitHub 0b38a48ac9 Update annotations.md
Add notes of limit-rate/limit-rate-after
2019-11-13 12:49:59 +09:00
Manuel Alejandro de Brito FontesandGitHub d1eea794e9 Fix broken links in documentation (#4746) 2019-11-08 16:22:52 -03:00
Kubernetes Prow RobotandGitHub 2771095b8c Merge pull request #4727 from nothinux/master
update docs, remove output in prometheus deploy command
2019-11-08 09:02:14 -08:00
Kubernetes Prow RobotandGitHub 0d244e1c41 Merge pull request #4730 from stamm/master
add configuration for http2_max_concurrent_streams
2019-11-08 07:12:29 -08:00
Kubernetes Prow RobotandGitHub a0dc3a9a51 Merge pull request #4695 from janosi/secure-verify-ca-secret
Removing secure-verify-ca-secret support
2019-11-08 07:12:21 -08:00
Rustam Zagirov d9cfad1894 add configuration for http2_max_concurrent_streams 2019-10-31 15:13:38 +03:00
nothinux d8c2d38a39 remove output in prometheus deploy command 2019-10-31 10:29:14 +07:00
Carlos Panato 40e0e5bef8 add proxy-max-temp-file-size doc 2019-10-23 09:55:46 +02:00
Kubernetes Prow RobotandGitHub bd4b62029d Merge pull request #4694 from panpan0000/add-remote-addr-into-l4-logs
Enhancement : add remote_addr in TCP access log
2019-10-20 19:39:37 -07:00
Peter Pan ee24bf1bbc Doc: Add remote_addr into default values in configmap for TCP logging format 2019-10-21 10:18:17 +08:00
Laszlo Janosi 31227d61c2 Removing secure-verify-ca-secret support and writing an error log if that annotation is used in an Ingress definition 2019-10-18 10:58:57 +02:00
Matthew Wickman ad17d71387 Adding some documentation about the use of metrics-per-host and enable-metrics cmd line flags 2019-10-17 17:22:49 -06:00
Kubernetes Prow RobotandGitHub fb025ab501 Merge pull request #4087 from MRoci/master
Define Modsecurity Snippet via ConfigMap
2019-09-30 15:19:32 -07:00
Manuel Alejandro de Brito FontesandGitHub d5d2b4037c Fix ports collision when hostNetwork=true (#4617) 2019-09-28 17:30:57 -03:00
MRoci 72c4ffa8b5 add modsecurity-snippet key 2019-09-28 09:54:07 +02:00
Manuel Alejandro de Brito Fontes 6715108d8a Release 0.26.0 2019-09-27 10:23:12 -03:00
Kubernetes Prow RobotandGitHub 50b6715f06 Merge pull request #4604 from aledbf/2353
Change default for proxy-add-original-uri-header
2019-09-25 07:28:00 -07:00
Manuel Alejandro de Brito Fontes 2bd8121338 Change default for proxy-add-original-uri-header 2019-09-25 10:57:31 -03:00
Kubernetes Prow RobotandGitHub ceddec4ea0 Merge pull request #4588 from multi-io/patch-1
tls user guide --default-ssl-certificate clarification
2019-09-25 06:14:00 -07:00
Manuel Alejandro de Brito Fontes ea5add6f5c Rollback change of ModSecurity setting SecAuditLog 2019-09-24 14:53:44 -03:00
A Gardner 786a3b6862 Add support for configmap of headers to be sent to external auth service 2019-09-24 10:53:23 -04:00
Kubernetes Prow RobotandGitHub f6c2f5fb97 Merge pull request #4514 from alexmaret/4475-stickyness-mode
Added new affinity mode for maximum session stickyness.
2019-09-24 05:09:27 -07:00