1523 Commits

Author SHA1 Message Date
Michael
211ec53661
Restore default cipher suites when serversTransport has no explicit cipherSuites 2026-04-17 10:40:06 +02:00
Michael
eb22d72b48
Resolve NGINX variables in ingress-nginx upstream-vhost annotation 2026-04-16 12:14:10 +02:00
Gina A.
7cacf027a1
Avoid 302 redirect when rewrite-target value is not an absolute URL for ingress-nginx provider 2026-04-16 11:54:07 +02:00
LBF38
036114bf17
Fix custom headers annotation with 503 Service Unavailable 2026-04-16 11:34:05 +02:00
LBF38
4b678ce9fd
Fix app-root with query params redirect 2026-04-16 10:40:10 +02:00
Kevin Pollet
2b9ffc4261
Use QuoteMeta for cookie name when building canary rules 2026-04-14 09:48:05 +02:00
romain
5ab893f01d Merge current branch v3.6 into v3.7 2026-04-07 12:12:01 +02:00
LBF38
081818f537
Fix rewrite-target annotation handling of empty path and non-regex path 2026-04-07 12:00:09 +02:00
Romain
64495e424c
Add Kubernetes Ingress logs fields
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-04-07 11:23:10 +02:00
Sebastiaan van Stijn
756e91acdd
Bump github.com/klauspost/compress v1.18.4 and fix TestNegotiation 2026-04-07 10:48:05 +02:00
Morten Victor Nordbye
d31ce5df13
Support multiple certificateRefs in Gateway API listeners 2026-04-07 10:46:07 +02:00
holomekc
8b17fc1667
Add certificates menu and overview 2026-04-07 10:10:05 +02:00
Kevin Pollet
0cbb4a99bb
Add secret support for BackendTLSPolicy caCertificateRefs
Co-authored-by: Steven Goodstein <sgoodstein@medallia.com>
2026-04-03 09:00:08 +02:00
Omar
f964291f02
Support nginx.ingress.kubernetes.io/enable-access-log 2026-04-02 11:50:07 +02:00
Julien Salleyron
9d9f0d465d
Add providers routing precedence configuration
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-04-02 09:08:05 +02:00
Kangmin Kim
ea7f300c85
feat(provider/k8s/ingress-nginx): add limit-burst-multiplier annotation support 2026-03-31 17:24:07 +02:00
Julien Salleyron
ea92a3e150
Add wildcard host in Host and HostSNI matchers 2026-03-31 16:14:06 +02:00
Alexander Babenko
f15b836c86
Support NGINX global auth annotation 2026-03-27 14:42:06 +01:00
kevinpollet
b4aa35e0fb
Merge branch v3.6 into v3.7 2026-03-26 11:19:51 +01:00
kevinpollet
1b2e82453c
Merge branch v2.11 into v3.6 2026-03-26 10:12:28 +01:00
jv
7816ed8e34
Fix comment and unnecessary allocation in withRoutingPath 2026-03-26 09:40:05 +01:00
LBF38
30b442a363
Fix TLS behavior in ingress-nginx provider
Co-authored-by: Gina A. <70909035+gndz07@users.noreply.github.com>
2026-03-26 09:38:05 +01:00
Mathieu Parent
28fc23d656
Handle empty rewrite-target like unset rewrite-target 2026-03-25 09:18:07 +01:00
Gina A.
6a61ff5965
Fix rewrite-target to handle full URL 2026-03-24 17:50:06 +01:00
Gina A.
14c489b77c
Fix rewrite directive in configuration-snippet to trim quotes 2026-03-24 17:34:05 +01:00
Michael
25ab6f46d0
Fix allow colons and tildes in api.basePath validation 2026-03-24 17:32:05 +01:00
Gina A.
f19aaa769c
Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-03-24 17:06:05 +01:00
Michael
30d5258c75
Fix postgres STARTTLS with TLS termination 2026-03-24 11:18:05 +01:00
Michael
930ff2aa09
Fix auth-response-headers whitespace trimming in ingress-nginx provider 2026-03-23 14:14:04 +01:00
Julien Salleyron
51f6b0435f
Prevent duplicate user headers in basic and digest auth middleware 2026-03-20 16:24:05 +01:00
Julien Salleyron
2ab0514034
Fix panic with Failover services in Kubernetes 2026-03-20 15:02:04 +01:00
LBF38
444e096d3c
Change default maxRequestBodyBytes option value of retry middleware 2026-03-19 15:52:06 +01:00
Harold Ozouf
6c7c056b28
Preserve health check status updater when service has middlewares 2026-03-19 14:16:07 +01:00
kevinpollet
86db5c2777
Merge branch v3.6 into v3.7 2026-03-19 11:29:37 +01:00
romain
b1b520b186 Merge branch v2.11 into v3.6 2026-03-18 15:51:33 +01:00
LBF38
f79caa5717
Fix proxy-ssl-verify annotation 2026-03-18 09:08:04 +01:00
Julien Salleyron
a06eca2b99
Add support for auth-snippet
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-03-18 09:06:05 +01:00
Michael
4fe0bea069
Bump sigs.k8s.io/gateway-api to v1.5.1 2026-03-17 17:10:12 +01:00
Romain
122175ac2f
Make basic auth check timing constant
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-17 15:36:05 +01:00
Gina A.
11d251415a
Fix ingress router's rule
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-03-17 15:12:05 +01:00
romain
d1a6841275 Merge branch v3.6 into v3.7 2026-03-16 16:44:07 +01:00
Alexander
69a738ccf0
Fix incorrect hostname matching between listener and route 2026-03-16 16:42:05 +01:00
Michael
d7cc334238
Add OTel-conformant trace context attributes to access logs 2026-03-16 11:52:57 +01:00
Gina A.
c16988ebf3
Fix use-regex annotation behavior and add strictValidatePathType config for ingress-nginx provider 2026-03-16 11:38:06 +01:00
Michael
67c64ed9b2
Prepare release v3.7.0-ea.1 2026-03-12 07:26:04 -03:00
Romain
832f48d9bf
Support fragmented TLS client hello
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-11 13:56:06 -03:00
Gina A.
b460351f7e
Add maxResponseBodySize configuration on HTTP provider 2026-03-11 10:24:05 -03:00
Julien Salleyron
b9739c20f9
Add an extension point for mod-sec annotations 2026-03-11 05:58:10 -03:00
Harold Ozouf
d82bcf3c74
Service failover support in TraefikService CRD 2026-03-09 12:54:05 -03:00
Adam Jacques
b8132e00ad
Allow entry points to be specified on Nginx Ingresses 2026-03-09 07:52:10 -03:00