Merge branch 'main' into fix/caSecret

Author: shaun-nx

.github/workflows/ci.yml

@@ -73,7 +73,7 @@ jobs:
       - name: Run Tests
         run: make cover
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@40a12dcee2df644d47232dde008099a3e9e4f865 # v3.1.2
+        uses: codecov/codecov-action@894ff025c7b54547a9a2a1e9f228beae737ad3c2 # v3.1.3
         with:
           files: ./coverage.txt
 

.pre-commit-config.yaml

@@ -45,7 +45,7 @@ repos:
       - id: golangci-lint
         args: [--new-from-patch=/tmp/diff.patch]
   - repo: https://github.com/asottile/pyupgrade
-    rev: v3.3.1
+    rev: v3.3.2
     hooks:
       - id: pyupgrade
   - repo: https://github.com/PyCQA/isort

deployments/common/crds/k8s.nginx.org_virtualservers.yaml

@@ -86,6 +86,8 @@ spec:
                       format: int64
                     recordType:
                       type: string
+                gunzip:
+                  type: string
                 host:
                   type: string
                 http-snippets:

deployments/helm-chart/crds/k8s.nginx.org_virtualservers.yaml

@@ -86,6 +86,8 @@ spec:
                       format: int64
                     recordType:
                       type: string
+                gunzip:
+                  type: string
                 host:
                   type: string
                 http-snippets:

docs/content/configuration/virtualserver-and-virtualserverroute-resources.md

@@ -26,6 +26,7 @@ spec:
   host: cafe.example.com
   tls:
     secret: cafe-secret
+  gunzip: on
   upstreams:
   - name: tea
     service: tea-svc
@@ -53,6 +54,7 @@ spec:
 | ---| ---| ---| --- |
 |``host`` | The host (domain name) of the server. Must be a valid subdomain as defined in RFC 1123, such as ``my-app`` or ``hello.example.com``. When using a wildcard domain like ``*.example.com`` the domain must be contained in double quotes.  The ``host`` value needs to be unique among all Ingress and VirtualServer resources. See also [Handling Host and Listener Collisions](/nginx-ingress-controller/configuration/handling-host-and-listener-collisions). | ``string`` | Yes |
 |``tls`` | The TLS termination configuration. | [tls](#virtualservertls) | No |
+|``gunzip`` | Enables or disables [decompression](https://docs.nginx.com/nginx/admin-guide/web-server/compression/) of gzipped responses for clients. Allowed values are: "on" or "off". If the ``gunzip`` value is not set, it defaults to ``off``.   | ``string`` | No |
 |``externalDNS`` | The externalDNS configuration for a VirtualServer. | [externalDNS](#virtualserverexternaldns) | No |
 |``dos`` | A reference to a DosProtectedResource, setting this enables DOS protection of the VirtualServer. | ``string`` | No |
 |``policies`` | A list of policies. | [[]policy](#virtualserverpolicy) | No |

internal/configs/version2/http.go

@@ -79,6 +79,7 @@ type Server struct {
 	VSNamespace               string
 	VSName                    string
 	DisableIPV6               bool
+	Gunzip                    string
 }
 
 // SSL defines SSL configuration for a server.

internal/configs/version2/nginx-plus.virtualserver.tmpl

@@ -68,6 +68,7 @@ match {{ $m.Name }} {
 {{ end }}
 
 server {
+    {{ if (eq $s.Gunzip "on") }}gunzip {{ $s.Gunzip }};{{end}}
     listen 80{{ if $s.ProxyProtocol }} proxy_protocol{{ end }};
     {{ if not $s.DisableIPV6 }}listen [::]:80{{ if $s.ProxyProtocol }} proxy_protocol{{ end }};{{ end }}
 

internal/configs/version2/nginx.virtualserver.tmpl

@@ -40,6 +40,7 @@ limit_req_zone {{ $z.Key }} zone={{ $z.ZoneName }}:{{ $z.ZoneSize }} rate={{ $z.
 
 {{ $s := .Server }}
 server {
+    {{ if (eq $s.Gunzip "on") }}gunzip {{ $s.Gunzip }};{{end}}
     listen 80{{ if $s.ProxyProtocol }} proxy_protocol{{ end }};
     {{ if not $s.DisableIPV6 }}listen [::]:80{{ if $s.ProxyProtocol }} proxy_protocol{{ end }};{{ end }}