Commit graph

297 commits

Author SHA1 Message Date
Kevin Pollet d3ff0c2cd4
fix: do not require a TLS client cert when InsecureSkipVerify is false
Co-authored-by: Tom Moulard <tom.moulard@traefik.io>
2021-10-26 10:54:11 +02:00
Aaron Raff 25e12aee14
kubernetes: normalize middleware names in ingress route config 2021-10-07 15:40:05 +02:00
Kevin Pollet 126b32c579
fix: add missing RequireAnyClientCert value to TLSOption CRD 2021-09-24 11:32:07 +02:00
Tom Moulard 6906a022ca
Add cross namespace verification in Kubernetes CRD 2021-09-20 12:54:05 +02:00
Kevin Pollet bda0dba131
fix: add peerCertURI config to k8s crd provider
Co-authored-by: Jean-Baptiste Doumenjou <925513+jbdoumenjou@users.noreply.github.com>
2021-09-17 08:56:07 +02:00
Romain 76867e39ea
Fix ServersTransport reference from IngressRoute service definition
Co-authored-by: Jean-Baptiste Doumenjou <925513+jbdoumenjou@users.noreply.github.com>
2021-09-16 15:12:13 +02:00
Simon Stender Boisen 6f8e8ea252
Ensure disableHTTP2 works with k8s crd 2021-09-16 12:18:08 +02:00
Ludovic Fernandez 6f4a7fb604
chore: upgrade linter 2021-09-16 09:16:07 +02:00
Tom Moulard a72d124551
Fix certChan defaulting on consul catalog provider 2021-09-14 17:12:12 +02:00
Romain 287cebb498
Fix CRDs code and manifests generation 2021-09-02 14:40:08 +02:00
Romain 2644c1f598
Makes ALPN protocols configurable 2021-08-20 18:20:06 +02:00
romain 78180a5fa7 Merge current v2.4 into v2.5 2021-08-19 11:45:19 +02:00
Jean-Baptiste Doumenjou 187ec26d8e Merge current v2.4 into v2.5 2021-08-05 18:09:23 +02:00
Jean-Baptiste Doumenjou 32d88a977d
Avoid unauthorized midlleware cross namespace reference
Co-authored-by: Mathieu Lonjaret <mathieu.lonjaret@gmail.com>
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2021-08-05 17:42:08 +02:00
Romain 7f307d60c4
Kubernetes: detect changes for resources other than endpoints 2021-07-30 15:08:10 +02:00
romain a5b169c563 Merge current v2.4 into v2.5 2021-07-20 14:06:13 +02:00
Romain bc5e621683
Get Kubernetes server version early 2021-07-20 13:02:10 +02:00
Daniel Tomcej c2c4dc9b58
Don't remove ingress config on API call failure 2021-07-19 20:06:07 +02:00
romain bd3271aff0 Merge current v2.4 into v2.5 2021-07-19 15:18:38 +02:00
Daniel Tomcej 8d4620dc53
check if defaultcertificate is defined in store 2021-07-19 09:58:14 +02:00
Jean-Baptiste Doumenjou 16f65f669b
Update Gateway API version to v0.3.0
Co-authored-by: Tom Moulard <tom.moulard@traefik.io>
2021-07-15 17:20:08 +02:00
Mohammad Gufran 7e43e5615e
Add Support for Consul Connect
Co-authored-by: Florian Apolloner <apollo13@users.noreply.github.com>
2021-07-15 14:02:11 +02:00
romain 3a180e2afc Merge current v2.4 into v2.5 2021-07-13 18:12:29 +02:00
Jean-Baptiste Doumenjou e1f5866989
Detect certificates content modifications
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
Co-authored-by: Mathieu Lonjaret <mathieu.lonjaret@gmail.com>
2021-07-13 14:14:35 +02:00
Daniel Tomcej 3c1ed0d9b2
Disable ExternalName Services by default on Kubernetes providers 2021-07-13 12:54:09 +02:00
Daniel Tomcej 3072354ca5
Disable Cross-Namespace by default for IngressRoute provider 2021-07-13 10:48:05 +02:00
romain fc69f882c5 Merge current v2.4 into master 2021-06-28 10:07:17 +02:00
mpl 838a8e18d3
healthcheck: add support at the load-balancers of services level
Co-authored-by: Dmitry Sharshakov <d3dx12.xx@gmail.com>
Co-authored-by: Julien Salleyron <julien.salleyron@gmail.com>
Co-authored-by: Jean-Baptiste Doumenjou <925513+jbdoumenjou@users.noreply.github.com>
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
Co-authored-by: Tom Moulard <tom.moulard@traefik.io>
2021-06-25 21:08:11 +02:00
Romain cd68cbd3ea
Fix: malformed Kubernetes resource names and references in tests 2021-06-24 17:32:07 +02:00
romain ce2e02b690 Merge current v2.4 into master 2021-06-22 14:44:56 +02:00
Wei Lun dca348359b
add permissionsPolicy and deprecate featurePolicy 2021-06-21 15:16:13 +02:00
Tom Moulard c9df233d24
Changing default file format for the snippets from TOML to YAML 2021-06-19 00:08:08 +02:00
Rio Kierkels 0a3e40332a
Improve CA certificate loading from kubernetes secret 2021-06-14 18:06:10 +02:00
Richard Kojedzinszky f15d05b22f
tls Manager: do not build a default certificate for ACME challenges store
Co-authored-by: Mathieu Lonjaret <mathieu.lonjaret@gmail.com>
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2021-06-14 10:06:05 +02:00
Romain fc9f41b955
Add TCP Middlewares support 2021-06-11 15:30:05 +02:00
Jean-Baptiste Doumenjou b1fd3b8fc7 fix for review 2021-05-28 17:38:46 +02:00
Wouter Dullaert 456df0fc19 feat: Add ServersTransport annotation to k8s ingress provider 2021-05-28 17:38:46 +02:00
Tom Moulard 526f493e12
Removes headers middleware options 2021-05-28 09:24:14 +02:00
Jakub Coufal 1680f00091
Fix incorrect behaviour with multi-port endpoint subsets 2021-05-28 00:58:07 +02:00
Ludovic Fernandez 21c0195d29
fix: ACME preferred chain. 2021-05-20 15:08:12 +02:00
Tom Moulard 56f845c71a
gatewayapi: adding support for TCPRoute and TLSRoute
Co-authored-by: Jean-Baptiste Doumenjou <925513+jbdoumenjou@users.noreply.github.com>
2021-05-20 11:50:12 +02:00
Manuel Zapf e1e1fd640c
Upgrade IngressClass to use v1 over v1Beta on Kube 1.19+ 2021-05-17 16:50:09 +02:00
Henning de2437cfec
kubernetes: remove logging of changed object with cast 2021-05-10 09:42:06 +02:00
Luca Berneking 32e08f3510
Add k8s provider option to create services without endpoints 2021-05-06 18:12:10 +02:00
Joel Berger 70a02158e5
Add wildcard hostname rule to kubernetes gateway 2021-04-29 17:18:04 +02:00
Henning ab71dad51a
[kubernetes] ignore empty endpoint changes 2021-04-29 16:20:03 +02:00
Tom Moulard ac486d3d1d Merge current branch v2.4 into master 2021-04-21 11:39:53 +02:00
Martin Vizvary 5814ba5322
Kubernetes ingress provider to search via all endpoints 2021-04-15 18:16:04 +02:00
Jean-Baptiste Doumenjou cb4fb973b2 Merge current branch v2.4 into master 2021-03-31 09:43:04 +02:00
Tom Moulard 513f6e9a68
Remove error when HTTProutes is empty
Co-authored-by: Jean-Baptiste Doumenjou <925513+jbdoumenjou@users.noreply.github.com>
2021-03-30 16:32:03 +02:00