1455 commits

Author	SHA1	Message	Date
kevinpollet	72fcf30d6b	Merge branch v2.11 into v3.6	2026-05-11 11:16:29 +02:00
Kevin Pollet	83cc8fee5d	Make resolveReference method as a function	2026-05-11 11:14:06 +02:00
romain	fc482fda97	Merge branch v2.11 into v3.6	2026-05-11 09:35:34 +02:00
Romain	36a565a599	Fix cross-provider ref check for Kubernetes CRD provider	2026-05-07 16:58:05 +02:00
romain	8c7634bcde	Merge branch v2.11 into v3.6	2026-05-07 11:47:33 +02:00
Romain	28604083a4	Add CrossProviderNamespaces option ... Co-authored-by: Gina A. <70909035+gndz07@users.noreply.github.com>	2026-05-06 14:49:23 +02:00
kevinpollet	9f3f1725d2	Merge branch v2.11 into v3.6	2026-05-05 15:01:52 +02:00
Michael	e4537f8b04	Migrate to github.com/moby/moby modules	2026-05-04 16:06:05 +02:00
Sebastiaan van Stijn	8f99bbcfba	Migrate to github.com/moby/moby modules	2026-05-04 15:50:05 +02:00
Romain	e6abf7c3c8	Remove cross-provider sanitization for Kubernetes service loading ... Co-authored-by: Gina A. <70909035+gndz07@users.noreply.github.com>	2026-05-04 11:12:05 +02:00
mliang2	80103b1db2	Fix typo in default CORS allowed headers	2026-05-04 10:28:05 +02:00
mmatur	59357eeaf8	Merge branch v2.11 into v3.6	2026-04-29 12:45:03 +02:00
Gina A.	0fdea20eb1	Add errorRequestHeaders option to Errors middleware	2026-04-24 14:40:06 +02:00
Kevin Pollet	28e655452c	Do not require a port for ExternalName services	2026-04-24 11:16:05 +02:00
Kevin Pollet	53752744d5	Deprecate ForwardAuth.TrustForwardHeader option	2026-04-21 11:00:07 +02:00
Kevin Pollet	13302a212e	Cleanup and make ForwardAuth logs consistent	2026-04-21 10:22:05 +02:00
mmatur	4aea15feea	Merge v2.11 into v3.6	2026-04-20 11:19:04 +02:00
Julien Salleyron	5e1de22584	Fix trustForwardHeader on forward auth middleware	2026-04-17 15:42:05 +02:00
Ludovic Fernandez	f4766d74c7	Bump github.com/go-acme/lego/v4 to v4.34.0	2026-04-16 15:36:06 +02:00
Kevin Pollet	1a43505387	Sanitize the request URL after stripping the prefix	2026-04-16 14:26:06 +02:00
Romain	df00d82fc7	Honor allowCrossNamespace with chain middleware CRD	2026-04-15 10:36:06 +02:00
Romain	61b5bc4ad1	Remove untrusted X headers with underscores	2026-04-14 16:38:06 +02:00
Romain	8c4fc89579	Remove map lookup making the basic auth notFoundSecret empty	2026-04-13 10:24:08 +02:00
Murat Aslan	091d13b5e4	Make SameSite cookie value case-insensitive	2026-04-09 17:10:13 +02:00
Vitor Hugo	210344f950	Downgrade log level for missing container on inspect	2026-04-09 11:42:07 +02:00
Sebastiaan van Stijn	756e91acdd	Bump github.com/klauspost/compress v1.18.4 and fix TestNegotiation	2026-04-07 10:48:05 +02:00
kevinpollet	1b2e82453c	Merge branch v2.11 into v3.6	2026-03-26 10:12:28 +01:00
jv	7816ed8e34	Fix comment and unnecessary allocation in withRoutingPath	2026-03-26 09:40:05 +01:00
Michael	25ab6f46d0	Fix allow colons and tildes in api.basePath validation	2026-03-24 17:32:05 +01:00
Gina A.	f19aaa769c	Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length ... Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>	2026-03-24 17:06:05 +01:00
Michael	30d5258c75	Fix postgres STARTTLS with TLS termination	2026-03-24 11:18:05 +01:00
Michael	930ff2aa09	Fix auth-response-headers whitespace trimming in ingress-nginx provider	2026-03-23 14:14:04 +01:00
Julien Salleyron	51f6b0435f	Prevent duplicate user headers in basic and digest auth middleware	2026-03-20 16:24:05 +01:00
romain	b1b520b186	Merge branch v2.11 into v3.6	2026-03-18 15:51:33 +01:00
LBF38	f79caa5717	Fix proxy-ssl-verify annotation	2026-03-18 09:08:04 +01:00
Romain	122175ac2f	Make basic auth check timing constant ... Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>	2026-03-17 15:36:05 +01:00
Gina A.	11d251415a	Fix ingress router's rule ... Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>	2026-03-17 15:12:05 +01:00
Alexander	69a738ccf0	Fix incorrect hostname matching between listener and route	2026-03-16 16:42:05 +01:00
Michael	d7cc334238	Add OTel-conformant trace context attributes to access logs	2026-03-16 11:52:57 +01:00
Romain	832f48d9bf	Support fragmented TLS client hello ... Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>	2026-03-11 13:56:06 -03:00
Gina A.	b460351f7e	Add maxResponseBodySize configuration on HTTP provider	2026-03-11 10:24:05 -03:00
Jesper Noordsij	c7d5507462	Use modern WaitGroup.Go function in additional places	2026-03-06 11:22:06 -03:00
Kevin Pollet	9ab7fb860d	Bump github.com/valyala/fasthttp to v1.69.0	2026-03-06 11:00:12 -03:00
mmatur	10992086b8	Merge current v2.11 into v3.6	2026-03-06 10:11:25 +01:00
Michael	fc32e6dc0b	Fix priority display in dashboard and ACME bypass redirect	2026-03-06 06:04:05 -03:00
Michael	1268d9bc22	Bump Docker and OpenTelemetry dependencies	2026-03-05 11:52:04 -03:00
Romain	c662b9ac6b	Remove path parsing with grpc healthcheck	2026-03-05 11:00:06 -03:00
Romain	ef1d71f786	Fix Gateway API router's rules ... Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>	2026-03-05 06:02:07 -03:00
Varun Chawla	7a95bac64f	Fix HasSecureHeadersDefined returning false when stsSeconds is 0	2026-03-03 12:12:05 -03:00
Sebastiaan van Stijn	c605e5e139	Replace uses of hashicorp/go-multierror with stdlib errors.Join	2026-03-03 06:00:17 -03:00