[nginx-ingress-controller] JWT and Client SSL Verify

[dnascimento]

NGINX can handle JWT token validation to provide authentication on APIs.
Verify Client SSL Certificate should also be possible.

It requires to change the spec in kubernetes project to add:

 jwt:
    - hosts:
        - XXXXXX
 client-verify:
     - hosts:
         - XXXXX

[aledbf]

@dnascimento the NGINX ingress controller is just an implementation of Ingress spec.
Please open a proposal in the kubernetes/features repository to add JWT token validation.

[aledbf]

@dnascimento I forgot to add that we can add this feature just for the nginx ingress controller using 2 annotations

[dnascimento]

What about the following changes to the spec:

1. JWT: Per host or per-location
2. ClientVerify: Per host
3. TLS as host property too, instead of an array.
4. Specify ports on hostname.
5. Support regex on hostname (nginx)
6. Allow to mount a lua script and exec on host

This is great when combined with ELB! Great job!

[fejta-bot]

Issues go stale after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

Prevent issues from auto-closing with an /lifecycle frozen comment.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or @fejta.
/lifecycle stale

[fejta-bot]

Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or @fejta.
/lifecycle rotten
/remove-lifecycle stale

[fejta-bot]

Rotten issues close after 30d of inactivity.
Reopen the issue with /reopen.
Mark the issue as fresh with /remove-lifecycle rotten.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/close