1430 Commits

Author SHA1 Message Date
Sebastiaan van Stijn
756e91acdd
Bump github.com/klauspost/compress v1.18.4 and fix TestNegotiation 2026-04-07 10:48:05 +02:00
kevinpollet
1b2e82453c
Merge branch v2.11 into v3.6 2026-03-26 10:12:28 +01:00
jv
7816ed8e34
Fix comment and unnecessary allocation in withRoutingPath 2026-03-26 09:40:05 +01:00
Michael
25ab6f46d0
Fix allow colons and tildes in api.basePath validation 2026-03-24 17:32:05 +01:00
Gina A.
f19aaa769c
Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-03-24 17:06:05 +01:00
Michael
30d5258c75
Fix postgres STARTTLS with TLS termination 2026-03-24 11:18:05 +01:00
Michael
930ff2aa09
Fix auth-response-headers whitespace trimming in ingress-nginx provider 2026-03-23 14:14:04 +01:00
Julien Salleyron
51f6b0435f
Prevent duplicate user headers in basic and digest auth middleware 2026-03-20 16:24:05 +01:00
romain
b1b520b186 Merge branch v2.11 into v3.6 2026-03-18 15:51:33 +01:00
LBF38
f79caa5717
Fix proxy-ssl-verify annotation 2026-03-18 09:08:04 +01:00
Romain
122175ac2f
Make basic auth check timing constant
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-17 15:36:05 +01:00
Gina A.
11d251415a
Fix ingress router's rule
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-03-17 15:12:05 +01:00
Alexander
69a738ccf0
Fix incorrect hostname matching between listener and route 2026-03-16 16:42:05 +01:00
Michael
d7cc334238
Add OTel-conformant trace context attributes to access logs 2026-03-16 11:52:57 +01:00
Romain
832f48d9bf
Support fragmented TLS client hello
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-11 13:56:06 -03:00
Gina A.
b460351f7e
Add maxResponseBodySize configuration on HTTP provider 2026-03-11 10:24:05 -03:00
Jesper Noordsij
c7d5507462
Use modern WaitGroup.Go function in additional places 2026-03-06 11:22:06 -03:00
Kevin Pollet
9ab7fb860d
Bump github.com/valyala/fasthttp to v1.69.0 2026-03-06 11:00:12 -03:00
mmatur
10992086b8
Merge current v2.11 into v3.6 2026-03-06 10:11:25 +01:00
Michael
fc32e6dc0b
Fix priority display in dashboard and ACME bypass redirect 2026-03-06 06:04:05 -03:00
Michael
1268d9bc22
Bump Docker and OpenTelemetry dependencies 2026-03-05 11:52:04 -03:00
Romain
c662b9ac6b
Remove path parsing with grpc healthcheck 2026-03-05 11:00:06 -03:00
Romain
ef1d71f786
Fix Gateway API router's rules
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-05 06:02:07 -03:00
Varun Chawla
7a95bac64f
Fix HasSecureHeadersDefined returning false when stsSeconds is 0 2026-03-03 12:12:05 -03:00
Sebastiaan van Stijn
c605e5e139
Replace uses of hashicorp/go-multierror with stdlib errors.Join 2026-03-03 06:00:17 -03:00
Mathieu Parent
734cc21fb4
Remove unused context import from test file 2026-03-03 05:26:04 -03:00
Gina A.
a0654afa97
Fix basePath validation for dashboard template 2026-02-25 17:12:15 +01:00
mmatur
13dc9a6892
Merge v2.11 into v3.6 2026-02-23 17:34:52 +01:00
Julien Salleyron
7a3ffcc3d9
Fix TLS handshake error handling 2026-02-23 14:06:05 +01:00
Gina A.
4595c7a920
Add maxResponseBodySize configuration to forwardAuth middleware 2026-02-23 11:30:06 +01:00
Jesper Noordsij
288e4e2e2b
Upgrade golangci-lint 2026-02-23 11:04:04 +01:00
LBF38
7494b5c9ff
Fix case sensitivity on x-forwarded headers for Connection 2026-02-23 10:04:10 +01:00
Andreas
b8fca6e460
Handle empty/missing User-Agent header 2026-02-12 15:36:05 +01:00
Romain
f6ce751a06
Reject absolute URL in healthcheck path configuration 2026-02-11 16:10:05 +01:00
mmatur
a28da8a226
Merge v2.11 into v3.6 2026-02-11 14:45:21 +01:00
Romain
31e566e9f1
Remove conn deadline after STARTTLS negociation
Co-authored-by: Michael <michael.matur@gmail.com>
2026-02-11 09:48:05 +01:00
Michael
72e2454e42
Cap TLS record length to RFC 8446 limit in ClientHello peeking 2026-02-11 09:22:04 +01:00
Romain
0beed101ec
Validate healthcheck path configuration
Co-authored-by: Michael <michael.matur@gmail.com>
2026-02-10 14:52:05 +01:00
Kevin Pollet
4b3c971ea3
Use url.Parse to validate X-Forwarded-Prefix value 2026-02-10 14:48:06 +01:00
Michael
d337748873
Fix ObservabilityConfig SetDefaults 2026-02-09 10:48:05 +01:00
Evgenii Domashenkin
29d1c751c1
Use ParentBased sampler to respect parent span sampling decision 2026-02-02 15:20:05 +01:00
mmatur
f2b68f29a1
Merge v2.11 into v3.6 2026-02-02 05:33:16 +01:00
Jesper Noordsij
c320bb4adb
Bump to go1.25 2026-01-30 17:30:05 +01:00
Kevin Pollet
7d13368150
Remove number prefix in ingress-nginx fixtures 2026-01-29 11:56:04 +01:00
Michael
f32d58c577
Fix flakiness unit tests 2026-01-29 11:42:06 +01:00
Kevin Pollet
3678d2332f
Fix verifyServerCertMatchesURI function behavior
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-01-28 12:04:05 +01:00
mmatur
fb54793b93
Merge v2.11 into v3.6 2026-01-26 17:20:11 +01:00
Julien Salleyron
85cd5485b7
Avoid recursion with services 2026-01-26 10:28:04 +01:00
Julien Salleyron
139b59def9
Remove invalid private key in log 2026-01-21 10:26:04 +01:00
Benjamin Schwartz
ef5d040fd6
Alter TLS renewal period 2026-01-21 09:38:04 +01:00