Commit Graph

1456 Commits

Author SHA1 Message Date
Kaan f2b11cd50d fix(accesslog): escape double quotes in quoted log fields 2026-05-18 16:02:06 +02:00
kevinpollet 72fcf30d6b Merge branch v2.11 into v3.6 2026-05-11 11:16:29 +02:00
Kevin Pollet 83cc8fee5d Make resolveReference method as a function 2026-05-11 11:14:06 +02:00
romain fc482fda97 Merge branch v2.11 into v3.6 2026-05-11 09:35:34 +02:00
Romain 36a565a599 Fix cross-provider ref check for Kubernetes CRD provider 2026-05-07 16:58:05 +02:00
romain 8c7634bcde Merge branch v2.11 into v3.6 2026-05-07 11:47:33 +02:00
Romain 28604083a4 Add CrossProviderNamespaces option
Co-authored-by: Gina A. <70909035+gndz07@users.noreply.github.com>
2026-05-06 14:49:23 +02:00
kevinpollet 9f3f1725d2 Merge branch v2.11 into v3.6 2026-05-05 15:01:52 +02:00
Michael e4537f8b04 Migrate to github.com/moby/moby modules 2026-05-04 16:06:05 +02:00
Sebastiaan van Stijn 8f99bbcfba Migrate to github.com/moby/moby modules 2026-05-04 15:50:05 +02:00
Romain e6abf7c3c8 Remove cross-provider sanitization for Kubernetes service loading
Co-authored-by: Gina A. <70909035+gndz07@users.noreply.github.com>
2026-05-04 11:12:05 +02:00
mliang2 80103b1db2 Fix typo in default CORS allowed headers 2026-05-04 10:28:05 +02:00
mmatur 59357eeaf8 Merge branch v2.11 into v3.6 2026-04-29 12:45:03 +02:00
Gina A. 0fdea20eb1 Add errorRequestHeaders option to Errors middleware 2026-04-24 14:40:06 +02:00
Kevin Pollet 28e655452c Do not require a port for ExternalName services 2026-04-24 11:16:05 +02:00
Kevin Pollet 53752744d5 Deprecate ForwardAuth.TrustForwardHeader option 2026-04-21 11:00:07 +02:00
Kevin Pollet 13302a212e Cleanup and make ForwardAuth logs consistent 2026-04-21 10:22:05 +02:00
mmatur 4aea15feea Merge v2.11 into v3.6 2026-04-20 11:19:04 +02:00
Julien Salleyron 5e1de22584 Fix trustForwardHeader on forward auth middleware 2026-04-17 15:42:05 +02:00
Ludovic Fernandez f4766d74c7 Bump github.com/go-acme/lego/v4 to v4.34.0 2026-04-16 15:36:06 +02:00
Kevin Pollet 1a43505387 Sanitize the request URL after stripping the prefix 2026-04-16 14:26:06 +02:00
Romain df00d82fc7 Honor allowCrossNamespace with chain middleware CRD 2026-04-15 10:36:06 +02:00
Romain 61b5bc4ad1 Remove untrusted X headers with underscores 2026-04-14 16:38:06 +02:00
Romain 8c4fc89579 Remove map lookup making the basic auth notFoundSecret empty 2026-04-13 10:24:08 +02:00
Murat Aslan 091d13b5e4 Make SameSite cookie value case-insensitive 2026-04-09 17:10:13 +02:00
Vitor Hugo 210344f950 Downgrade log level for missing container on inspect 2026-04-09 11:42:07 +02:00
Sebastiaan van Stijn 756e91acdd Bump github.com/klauspost/compress v1.18.4 and fix TestNegotiation 2026-04-07 10:48:05 +02:00
kevinpollet 1b2e82453c Merge branch v2.11 into v3.6 2026-03-26 10:12:28 +01:00
jv 7816ed8e34 Fix comment and unnecessary allocation in withRoutingPath 2026-03-26 09:40:05 +01:00
Michael 25ab6f46d0 Fix allow colons and tildes in api.basePath validation 2026-03-24 17:32:05 +01:00
Gina A. f19aaa769c Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-03-24 17:06:05 +01:00
Michael 30d5258c75 Fix postgres STARTTLS with TLS termination 2026-03-24 11:18:05 +01:00
Michael 930ff2aa09 Fix auth-response-headers whitespace trimming in ingress-nginx provider 2026-03-23 14:14:04 +01:00
Julien Salleyron 51f6b0435f Prevent duplicate user headers in basic and digest auth middleware 2026-03-20 16:24:05 +01:00
romain b1b520b186 Merge branch v2.11 into v3.6 2026-03-18 15:51:33 +01:00
LBF38 f79caa5717 Fix proxy-ssl-verify annotation 2026-03-18 09:08:04 +01:00
Romain 122175ac2f Make basic auth check timing constant
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-17 15:36:05 +01:00
Gina A. 11d251415a Fix ingress router's rule
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-03-17 15:12:05 +01:00
Alexander 69a738ccf0 Fix incorrect hostname matching between listener and route 2026-03-16 16:42:05 +01:00
Michael d7cc334238 Add OTel-conformant trace context attributes to access logs 2026-03-16 11:52:57 +01:00
Romain 832f48d9bf Support fragmented TLS client hello
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-11 13:56:06 -03:00
Gina A. b460351f7e Add maxResponseBodySize configuration on HTTP provider 2026-03-11 10:24:05 -03:00
Jesper Noordsij c7d5507462 Use modern WaitGroup.Go function in additional places 2026-03-06 11:22:06 -03:00
Kevin Pollet 9ab7fb860d Bump github.com/valyala/fasthttp to v1.69.0 2026-03-06 11:00:12 -03:00
mmatur 10992086b8 Merge current v2.11 into v3.6 2026-03-06 10:11:25 +01:00
Michael fc32e6dc0b Fix priority display in dashboard and ACME bypass redirect 2026-03-06 06:04:05 -03:00
Michael 1268d9bc22 Bump Docker and OpenTelemetry dependencies 2026-03-05 11:52:04 -03:00
Romain c662b9ac6b Remove path parsing with grpc healthcheck 2026-03-05 11:00:06 -03:00
Romain ef1d71f786 Fix Gateway API router's rules
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-05 06:02:07 -03:00
Varun Chawla 7a95bac64f Fix HasSecureHeadersDefined returning false when stsSeconds is 0 2026-03-03 12:12:05 -03:00