DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deploy GitHub Pages

Browse source
This commit is contained in:
k8s-ci-robot 2023-10-24 01:41:44 +00:00
parent 2e497642a7
commit 03b7eb27a6
4 changed files with 67 additions and 67 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
search/search_index.json
View file

File diff suppressed because one or more lines are too long

128
sitemap.xml
View file

@ -2,322 +2,322 @@
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://kubernetes.github.io/ingress-nginx/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/e2e-tests/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/faq/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/how-it-works/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/kubectl-plugin/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/lua_tests/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/troubleshooting/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/baremetal/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/hardening-guide/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/rbac/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/deploy/upgrade/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/developer-guide/code-overview/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/developer-guide/getting-started/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/enhancements/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/enhancements/20190724-only-dynamic-ssl/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/enhancements/20190815-zone-aware-routing/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/enhancements/YYYYMMDD-kep-template/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/PREREQUISITES/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/affinity/cookie/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/basic/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/client-certs/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/external-auth/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/auth/oauth-external-auth/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/canary/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/configuration-snippets/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-configuration/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-errors/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/custom-headers/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/external-auth-headers/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/jwt/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/ssl-dh-param/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/customization/sysctl/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/docker-registry/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/grpc/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/multi-tls/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/openpolicyagent/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/psp/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/rewrite/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/static-ip/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/examples/tls-termination/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/basic-usage/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/cli-arguments/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/custom-errors/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/default-backend/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/exposing-tcp-udp-services/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/external-articles/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/fcgi-services/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/ingress-path-matching/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/k8s-122-migration/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/miscellaneous/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/monitoring/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/multiple-ingress/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/retaining-client-ipaddress/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/tls/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/custom-template/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/log-format/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/third-party-addons/modsecurity/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/third-party-addons/opentelemetry/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
<url>
<loc>https://kubernetes.github.io/ingress-nginx/user-guide/third-party-addons/opentracing/</loc>
<lastmod>2023-10-19</lastmod>
<lastmod>2023-10-24</lastmod>
<changefreq>daily</changefreq>
</url>
</urlset>

BIN
sitemap.xml.gz
View file

Binary file not shown.

4
troubleshooting/index.html
View file

@ -230,12 +230,12 @@ Do not move it without providing redirects.
<span class=w> </span><span class="p p-Indicator">-</span><span class=w> </span><span class=nt>key</span><span class=p>:</span><span class=w> </span><span class=s>&quot;node.kubernetes.io/unschedulable&quot;</span>
<span class=w> </span><span class=nt>operator</span><span class=p>:</span><span class=w> </span><span class=s>&quot;Exists&quot;</span>
<span class=w> </span><span class=nt>effect</span><span class=p>:</span><span class=w> </span><span class="l l-Scalar l-Scalar-Plain">NoSchedule</span>
</code></pre></div> * update the namespace if applicable/desired * replace <code>##_NODE_NAME_##</code> with the problematic node (or remove nodeSelector section if problem is not confined to one node) * replace <code>##_CONTROLLER_IMAGE_##</code> with the same image as in use by your ingress-nginx deployment * confirm the securityContext section matches what is in place for ingress-nginx-controller pods in your cluster</p> <p>Apply the YAML and open a shell into the pod. Try to manually run the controller process: <div class=highlight><pre><span></span><code><span class=gp>$ </span>/nginx-ingress-controller
</code></pre></div></p> <ul> <li>update the namespace if applicable/desired</li> <li>replace <code>##_NODE_NAME_##</code> with the problematic node (or remove nodeSelector section if problem is not confined to one node)</li> <li>replace <code>##_CONTROLLER_IMAGE_##</code> with the same image as in use by your ingress-nginx deployment</li> <li>confirm the securityContext section matches what is in place for ingress-nginx-controller pods in your cluster</li> </ul> <p>Apply the YAML and open a shell into the pod. Try to manually run the controller process: <div class=highlight><pre><span></span><code><span class=gp>$ </span>/nginx-ingress-controller
</code></pre></div> You should get the same error as from the ingress controller pod logs.</p> <p>Confirm the capabilities are properly surfacing into the pod: <div class=highlight><pre><span></span><code><span class=gp>$ </span>grep<span class=w> </span>CapBnd<span class=w> </span>/proc/1/status
<span class=go>CapBnd: 0000000000000400</span>
</code></pre></div> The above value has only net_bind_service enabled (per security context in YAML which adds that and drops all). If you get a different value, then you can decode it on another linux box (capsh not available in this container) like below, and then figure out why specified capabilities are not propagating into the pod/container. <div class=highlight><pre><span></span><code><span class=gp>$ </span>capsh<span class=w> </span>--decode<span class=o>=</span><span class=m>0000000000000400</span>
<span class=go>0x0000000000000400=cap_net_bind_service</span>
</code></pre></div></p> <h2 id=create-a-test-pod-as-root>Create a test pod as root<a class=headerlink href=#create-a-test-pod-as-root title="Permanent link"></a></h2> <p>(Note, this may be restricted by PodSecurityPolicy, PodSecurityAdmission/Standards, OPA Gatekeeper, etc. in which case you will need to do the appropriate workaround for testing, e.g. deploy in a new namespace without the restrictions.) To test further you may want to install additional utilities, etc. Modify the pod yaml by: * changing runAsUser from 101 to 0 * removing the "drop..ALL" section from the capabilities.</p> <p>Some things to try after shelling into this container:</p> <p>Try running the controller as the www-data (101) user: <div class=highlight><pre><span></span><code><span class=gp>$ </span>chmod<span class=w> </span><span class=m>4755</span><span class=w> </span>/nginx-ingress-controller
</code></pre></div></p> <h2 id=create-a-test-pod-as-root>Create a test pod as root<a class=headerlink href=#create-a-test-pod-as-root title="Permanent link"></a></h2> <p>(Note, this may be restricted by PodSecurityPolicy, PodSecurityAdmission/Standards, OPA Gatekeeper, etc. in which case you will need to do the appropriate workaround for testing, e.g. deploy in a new namespace without the restrictions.) To test further you may want to install additional utilities, etc. Modify the pod yaml by:</p> <ul> <li>changing runAsUser from 101 to 0</li> <li>removing the "drop..ALL" section from the capabilities.</li> </ul> <p>Some things to try after shelling into this container:</p> <p>Try running the controller as the www-data (101) user: <div class=highlight><pre><span></span><code><span class=gp>$ </span>chmod<span class=w> </span><span class=m>4755</span><span class=w> </span>/nginx-ingress-controller
<span class=gp>$ </span>/nginx-ingress-controller
</code></pre></div> Examine the errors to see if there is still an issue listening on the port or if it passed that and moved on to other expected errors due to running out of context.</p> <p>Install the libcap package and check capabilities on the file: <div class=highlight><pre><span></span><code><span class=gp>$ </span>apk<span class=w> </span>add<span class=w> </span>libcap
<span class="gp gp-VirtualEnv">(1/1)</span> <span class=go>Installing libcap (2.50-r0)</span>