From b3574b21374f0f233b8c8ef915b83862601d23a6 Mon Sep 17 00:00:00 2001 From: Stef Graces Date: Thu, 9 Nov 2023 11:04:11 +0100 Subject: [PATCH] Add strict-validate-path-type arg to chart params Signed-off-by: stgrace --- charts/ingress-nginx/Chart.yaml | 2 +- charts/ingress-nginx/templates/_params.tpl | 3 +++ charts/ingress-nginx/values.yaml | 4 ++++ 3 files changed, 8 insertions(+), 1 deletion(-) diff --git a/charts/ingress-nginx/Chart.yaml b/charts/ingress-nginx/Chart.yaml index 30ca8afaa..b664a6714 100644 --- a/charts/ingress-nginx/Chart.yaml +++ b/charts/ingress-nginx/Chart.yaml @@ -19,4 +19,4 @@ maintainers: name: ingress-nginx sources: - https://github.com/kubernetes/ingress-nginx -version: 4.8.3 +version: 4.8.4 diff --git a/charts/ingress-nginx/templates/_params.tpl b/charts/ingress-nginx/templates/_params.tpl index 47d024e85..b0ab69864 100644 --- a/charts/ingress-nginx/templates/_params.tpl +++ b/charts/ingress-nginx/templates/_params.tpl @@ -57,6 +57,9 @@ {{- if .Values.controller.enableTopologyAwareRouting }} - --enable-topology-aware-routing=true {{- end }} +{{- if .Values.controller.strictValidatePathType }} +- --strict-validate-path-type=true +{{- end }} {{- range $key, $value := .Values.controller.extraArgs }} {{- /* Accept keys without values or with false as value */}} {{- if eq ($value | quote | len) 2 }} diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml index cb50b9d07..1465846d4 100644 --- a/charts/ingress-nginx/values.yaml +++ b/charts/ingress-nginx/values.yaml @@ -92,6 +92,10 @@ controller: # -- Required for use with CNI based kubernetes installations (such as ones set up by kubeadm), # since CNI and hostport don't mix yet. Can be deprecated once https://github.com/kubernetes/kubernetes/issues/23920 # is merged + strictValidatePathType: false + # -- Set strict valdiation for paths + # When pathType is configured as `Exact` or `Prefix`, there should be a more strict validation, allowing only paths starting with "/" and + # containing only alphanumeric characters and "-", "_" and additional "/". hostNetwork: false ## Use host ports 80 and 443 ## Disabled by default