ingress-nginx

ingress-nginx copied to clipboard

Intermittent TLS termination when using SSL passthrough after the target domain’s DNS has been invalid for some time

6

## **What happened**: **Multi-tenant Architecture in AWS EKS:** - One shared loadbalancer - One shared ingress controller - One Ingress resource per tenant - One ClusterIP Service per tenant -...

irugina1

External Authentication failure abruptly terminates the request

5

**What happened**: Started by upgrading from ingress-nginx v 1.9.4 to 1.12.1. Connections that used to fail authentication with an external authentication provider (using the global-auth-url annotation) are now being terminated...

richbern

Ingress-nginx-v-1.12.2- 400 issue

5

Hi, My EKS version is : 1.32. "I have updated to ingress-nginx version 1.12.2 and am currently facing a 400 error issue with my application. I have also updated the...

gokulapandi-idevopz

Add `persistent-drainable` option for `affinity-mode` ingress annotation to support draining sticky server sessions

1

## Background Legacy web applications that have sticky session affinity are likely to store important application information in memory on the web server associated with the session. This stateful nature...

gulachek

Add `persistent-drainable` option for `affinity-mode` ingress annotation to support draining sticky server sessions

6

## What this PR does / why we need it: Legacy web applications that have sticky session affinity are likely to store important application information in memory on the web...

gulachek

No logs or errors for invalid nginx.ingress.kubernetes.io/auth-tls-secret

1

**What happened**: Ingress had annotation with wrong secret name. Example: `nginx.ingress.kubernetes.io/auth-tls-secret: wrongNamespace/wrongSecretName` NGINX pod still reloads successfully and all traffic errors out with 403, regardless if `nginx.ingress.kubernetes.io/auth-tls-verify-client` is off It...

cattapan

Support multiple secrets for auth-tls-secret annotation

26

Currently the `nginx.ingress.kubernetes.io/auth-tls-secret` annotation takes a single secret with a key named `ca.crt` (https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/#client-certificate-authentication). Kubernetes secrets can at most be 1MB (https://github.com/kubernetes/kubernetes/issues/19781) so this leaves us with an upper limit...

hoeg

Location regex should respect Exact paths

6

If a location is marked as Exact, and the ingress uses regex matching, the resulting location block should respect this. ## What this PR does / why we need it:...

dacohen

fix(auth-proxy-set-headers): Validate authorization header values

5

## What this PR does / why we need it: Validate the values inside a config map linked by the `auth-proxy-set-headers` annotation. ## Types of changes - [x] Bug fix...

jkroepke

Use PCRE on proxy redirect property

13

NGINX accepts [PCRE](https://www.pcre.org/) patterns on the [proxy_redirect](https://nginx.org/en/docs/http/ngx_http_rewrite_module.html) property. This PR introduces URLWithNginxVariableRegex, a validation to make sure that both `proxy-redirect-from` and `proxy-redirect-to` annotations accept this pattern. Added e2e tests to...

leonardoramosantos