aks-app-routing-operator

aks-app-routing-operator copied to clipboard

adding custom-http-errors field to crd

2

# Description These changes add access to the custom-http-errors configmap options via the CRD. This redirects the specified error codes to the default backend for handling (i.e. custom error pages)...

aamgayle

adding default-backend-service cli command to crd

1

# Description Please include a summary of the changes and the related issue. Please also include relevant motivation and context. List any dependencies that are required for this change. Fixes...

aamgayle

[external-dns] Private hosts in public DNZ zone

3

Hi, I'm trying to add internal ingress using instruction https://learn.microsoft.com/en-us/azure/aks/create-nginx-ingress-private-controller. Current controller implementation does not provide configuration options for external-dns controller. # Issue All hosts from Private DNS Zone `private.example.com`...

bonddim

Added link to video explaining the design

1

I've created this video to explain how it works on the Lightboard. I thought it would be useful to include it in the Readme file to help understand how it...

HoussemDellai

Bump golang.org/x/net from 0.17.0 to 0.23.0 in /testing/e2e

1

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0. Commits c48da13 http2: fix TestServerContinuationFlood flakes 762b58d http2: fix tipos in comment ba87210 http2: close connections when receiving too many headers ebc8168 all: fix...

dependabot[bot]

Bump golang.org/x/net from 0.17.0 to 0.23.0

1

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0. Commits c48da13 http2: fix TestServerContinuationFlood flakes 762b58d http2: fix tipos in comment ba87210 http2: close connections when receiving too many headers ebc8168 all: fix...

dependabot[bot]

Upgrade security context of controller container to be compatible with "Restricted" official pod security standard

1

Currently, only the "runAsUser" option is set in the controller's container securityContext. ```yaml securityContext: runAsUser: 101 ``` Official Azure policies expect "allowPrivilegeEscalation" to be declared false. [Kubernetes clusters should not...

gabor-one

Not able to add CSP Headers with single quotes

6

**Issue** We are not able to add CSP headers that contains single quotes. Example: nginx.ingress.kubernetes.io/configuration-snippet: > more_set_headers "Content-Security-Policy: upgrade-insecure-requests;default-src 'self';" ; ... I did remove ' from annotation-value-word-blocklist in nginx...

omeryesil

Affinity Possible

2

Hello, I had a quick look and I can't see a good way to set the affinity for the Ingress Controller Pods. Is this something that can be configured in...

validis-ad

add configmaps to watched nic resources

11

# Description Triggers a reconcile on nic resources when a managed configmap is updated. ## Type of change Please delete options that are not relevant. - [ ] Bug fix...

OliverMKing