Merge pull request #796 from ssurenr/v1.7.1

V1.7.1 Bug fix release
F5Networks · Dec 6, 2018 · e84da82 · e84da82
2 parents 94ee805 + 2f11186
commit e84da82
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 2 deletions.
diff --git a/docs/RELEASE-NOTES.rst b/docs/RELEASE-NOTES.rst
@@ -1,6 +1,22 @@
 Release Notes for BIG-IP Controller for Kubernetes
 ==================================================
 
+v1.7.1
+------
+
+Vulnerability Addresses
+```````````````````````
++------------------+----------------------------------------------------------------+
+| CVE              | Comments                                                       |
++==================+================================================================+
+| CVE-2018-1002105 | Validated against Kubernetes 1.12.3                            |
++------------------+----------------------------------------------------------------+
+
+Bug fixes
+`````````
+* :issues:`789` - Controller properly creates https redirect for child paths in k8s Ingress.
+* Fixes an issue in openshift where communication breaks with clients with no SNI support.
+
 v1.7.0
 ------
 

diff --git a/pkg/appmanager/routing.go b/pkg/appmanager/routing.go
@@ -359,7 +359,7 @@ func httpRedirectIRule(port int32) string {
 				set redir 0
 				foreach s [split $paths "|"] {
 					# See if the request path starts with the prefix
-					append prefix "^" $s "($|/)"
+					append prefix "^" $s "($|/*)"
 					if {[HTTP::path] matches_regex $prefix} {
 						set redir 1
 						break
@@ -557,7 +557,7 @@ func sslPassthroughIRule() string {
 
 		when SERVER_CONNECTED {
 			set svrssl_class "/%[1]s/ssl_reencrypt_serverssl_dg"
-			if { [class exists $svrssl_class] } {
+			if { [info exists servername_lower] and [class exists $svrssl_class] } {
 				set profile [class match -value $servername_lower equals $svrssl_class]
 				if { not ($profile equals "") } {
 					SSL::profile $profile