Commit Graph
581 Commits
Author SHA1 Message Date
Kubernetes Prow RobotandGitHub 75d65bbd15 Merge pull request #4327 from leki75/proxyssl
Add proxy_ssl_* directives
2019-08-18 09:14:04 -07:00
Gabor Lekeny 65b9e2c574 Merge branch 'master' of https://github.com/kubernetes/ingress-nginx into proxyssl 2019-08-16 06:21:53 +02:00
Elvin Efendi a8a68dd3f5 implementation proposal for zone aware routing 2019-08-15 23:31:47 -04:00
Elvin Efendi d9de505341 KEP: availability zone aware routing 2019-08-15 19:46:36 -04:00
Kubernetes Prow RobotandGitHub 0b375989f3 Merge pull request #4412 from Shopify/ssl-early-data
Add nginx ssl_early_data option support
2019-08-15 10:08:35 -07:00
Kubernetes Prow RobotandGitHub 6948cd7d65 Merge pull request #4351 from aledbf/static-mode
KEP: Remove static SSL configuration mode
2019-08-14 21:26:33 -07:00
Elvin Efendi b21c721196 lua-shared-dicts improvements, fixes and documentation 2019-08-14 22:10:56 -04:00
Kubernetes Prow RobotandGitHub 0d690fba1a Merge pull request #4356 from aledbf/only-dynamic-mode
Only support SSL dynamic mode
2019-08-14 17:08:35 -07:00
Kubernetes Prow RobotandGitHub adef152db8 Merge pull request #4379 from diazjf/mirror
Allow Requests to be Mirrored to different backends
2019-08-13 17:52:24 -07:00
Manuel Alejandro de Brito Fontes 80bd481abb Only support SSL dynamic mode 2019-08-13 17:33:34 -04:00
Pierrick CharronandCharle Demers f459515d0d Add quote function in template
Co-authored-by: Charle Demers <charle.demers@gmail.com>
2019-08-09 15:47:29 -04:00
Kubernetes Prow RobotandGitHub 8c472190d1 Merge pull request #4086 from jeroen92/issue-4038
Resolve #4038, move X-Forwarded-Port variable to the location context
2019-08-09 08:07:25 -07:00
Manuel Alejandro de Brito Fontes 4a9b02bc03 Remove dynamic TLS records 2019-08-08 15:52:56 -04:00
Maxime Ginters 7219130da4 Add nginx ssl_early_data option support 2019-08-07 16:04:09 -04:00
Jeroen Schutrup 39144bb987 Add documentation on how to build the Docker image for end-to-end testing 2019-08-06 17:00:56 +02:00
Manuel Alejandro de Brito FontesandGitHub 041a8457aa Fix docs build due to an invalid link (#4389) 2019-08-01 19:57:09 -04:00
Fernando Diaz 386486e969 Allow Requests to be Mirrored to different backends
Add a feature which allows traffic to be mirrored to
additional backends. This is useful for testing how
requests will behave on different "test" backends.

See https://nginx.org/en/docs/http/ngx_http_mirror_module.html
2019-08-01 11:53:58 -05:00
Kubernetes Prow RobotandGitHub 292aca7c7a Merge pull request #4329 from steakunderscore/update-oauth2_proxy-docs
Update references to oauth2_proxy
2019-08-01 06:58:15 -07:00
otnielvh 3b34d56c92 Add support for psp 2019-08-01 09:45:58 +03:00
Kubernetes Prow RobotandGitHub c8a3710fb8 Merge pull request #4344 from Nuglif/fastcgi-backend-support
Add FastCGI backend support (#2982)
2019-07-31 11:20:14 -07:00
Charle DemersandPierrick Charron 72271e9313 FastCGI backend support (#2982)
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
Manuel Alejandro de Brito Fontes 1abc11af90 Remove static SSL configuration mode 2019-07-25 09:19:06 -04:00
Kubernetes Prow RobotandGitHub e1f062dd53 Merge pull request #4348 from aledbf/kep
KEP process
2019-07-24 18:39:51 -07:00
Manuel Alejandro de Brito Fontes cb33c4ed26 Start using KEPs for new features or breaking changes 2019-07-24 21:08:07 -04:00
Oguzhan InanandGitHub cbc5d3a917 duplicate argument "--disable-catch-all" 2019-07-22 14:48:23 +03:00
Jude ZhuandGitHub 5e64b6834c Add [$proxy_alternative_upstream_name]
https://github.com/kubernetes/ingress-nginx/pull/4246
2019-07-19 07:36:13 +08:00
Henry Jenkins b8cedabbff Update references to oauth2_proxy
The custodian of the project has been shifted from [bitly] to [pusher].
So this diff updates these references.

[bitly]: https://github.com/bitly/oauth2_proxy
[pusher]: https://github.com/pusher/oauth2_proxy
2019-07-18 07:59:22 +01:00
Gabor Lekeny def13fc06c Add proxy_ssl_* directives
Add support for backends which require client certificate (eg. NiFi)
authentication. The `proxy-ssl-secret` k8s annotation references a
secret which is used to authenticate to the backend server. All other
directives fine tune the backend communication.

The following annotations are supported:
* proxy-ssl-secret
* proxy-ssl-ciphers
* proxy-ssl-protocol
* proxy-ssl-verify
* proxy-ssl-verify-depth
2019-07-18 03:21:52 +02:00
Kubernetes Prow RobotandGitHub 589c9a20f9 Merge pull request #4278 from moolen/feat/auth-req-cache
feat: auth-req caching
2019-07-17 12:06:12 -07:00
Moritz Johner 23504db770 feat: auth-req caching
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.

[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
Kautilya TripathiandGitHub d9c0ede20a Update how-it-works.md
Changed text to link
2019-07-12 14:12:15 +05:30
E. Stuart Hicks 3b0c523e49 added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends 2019-07-08 14:32:00 -04:00
Elvin Efendi cd25a0c17a adjust docs 2019-07-01 10:24:09 -04:00
Roemer HendrikxandGitHub ef3ebbeab5 Add notes on timeouts while using long GRPC streams
GRPC streams longer than 60s hit multiple timeouts that NGINX has defined. Not all of them are easy to find, so I added some notes to the GRPC example to warn users of setting the correct timeouts if the wish their stream to not be aborted after 60 seconds.
2019-06-25 10:29:39 +02:00
Tristan MatthewsandGitHub ef4b560499 Update annotations.md 2019-06-20 20:19:11 -04:00
Manuel Alejandro de Brito Fontes 84102eec2b Migrate to new networking.k8s.io/v1beta1 package 2019-06-13 11:32:39 -04:00
Kubernetes Prow RobotandGitHub e76418cd99 Merge pull request #4162 from stramel/patch-1
Add "text/javascript" to compressible MIME types
2019-06-06 11:35:34 -07:00
Michael StramelandMichael Stramel 686f2310e4 Add "text/javascript" to compressible MIME types
Based on the HTML Standard, https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguages, servers _should_ use `text/javascript`.
2019-06-06 13:11:56 -05:00
Kubernetes Prow RobotandGitHub 286ff13af2 Merge pull request #4048 from fedunineyu/change-upstream-on-error-with-sticky-session
Change upstream on error when sticky session balancer is used
2019-06-06 07:22:17 -07:00
Manuel Alejandro de Brito FontesandGitHub 78d6ce6e6e Partially revert usage of kustomize for installation (#4159) 2019-06-05 10:59:38 -04:00
Nikolas Skoufis 4a913fac2a Add clarification on how to enable path matching
The fact that you need to explicitly add the annotation is easy to miss.
This makes this more explicit, while leaving the finer details to the
linked annotations document.
2019-06-05 11:14:50 +10:00
Chuan LongandGitHub 30d3505e7e Update README.md for external-auth Test 4
Title for Test 4 should be `secure service with valid auth header`. The current one is the same as Test 3.
2019-05-29 13:23:20 -05:00
Eugene FeduninandVladimir Grishin 254629cf16 Added support for annotation session-cookie-change-on-failure
1. Session cookie is updated on previous attempt failure when `session-cookie-change-on-failure = true` (default value is `false`).
2. Added tests to check both cases.
3. Updated docs.

Co-Authored-By: Vladimir Grishin <yadolov@users.noreply.github.com>
2019-05-27 13:00:07 +03:00
Kubernetes Prow RobotandGitHub dfa7f10fc9 Merge pull request #4055 from nicknovitski/kustomize
Rearrange deployment files into kustomizations
2019-05-25 14:43:50 -07:00
MMeentandGitHub 73c70e28b4 Clear up some inconsistent / unclear wording
IPv6 enabled/disabled working was confusing or contradicting itself. This updates the wording to what is expected, based on the default values in the table above, and the behaviour that I could find in code.
2019-05-21 15:27:58 +02:00
reynaldi.wijaya 616b1e239a UPT: Opentracing configmap documentation 2019-05-21 18:14:33 +08:00
reynaldi.wijaya d468cd5ec5 UPT: Modify configmap to include jaeger sampler host and jaeger sampler port 2019-05-21 17:54:29 +08:00
Nick Novitski 51ad0bc54b Rearrange deployment files into kustomizations 2019-05-19 12:35:54 -07:00
Kubernetes Prow RobotandGitHub 19501b217d Merge pull request #4089 from alanjcastonguay/docs/use-gzip-configmap-defaults
Docs: configmap: use-gzip
2019-05-18 04:09:14 -07:00
Kubernetes Prow RobotandGitHub c12059bff5 Merge pull request #4098 from kevinsimper/patch-1
Update configmap about adding custom locations
2019-05-18 03:39:12 -07:00