Samuel Arogbonlo
fe91e8e422
Chart: Add controller.service.external.labels & controller.service.internal.labels. ( #12704 )
2025-01-21 23:58:37 -08:00
Marco Ebert
f246d43e4c
Chart: Bump Kube Webhook CertGen. ( #12693 )
2025-01-13 00:22:32 -08:00
Aofei Sheng
506ded73b1
Chart: Add controller.service.trafficDistribution. ( #12571 )
2025-01-09 23:40:34 -08:00
Marco Ebert
cb53d76a16
Release controller v1.12.0/v1.11.4/v1.10.6 & chart v4.12.0/v4.11.4/v4.10.6. ( #12619 )
2025-01-03 01:44:14 +01:00
Marco Ebert
29513e8564
Chart: Bump Kube Webhook CertGen. ( #12602 )
2024-12-25 20:28:11 +01:00
James Strong
bd3ee3ed3f
Repository: Update owners. ( #12519 )
2024-12-21 23:36:09 +01:00
Marco Ebert
57b4a14af5
rikatz is stepping down ( #12515 )
2024-12-16 20:37:26 +01:00
Felix Dobler
be8abe7a5c
Chart: Add service cluster IPs. ( #12333 )
2024-11-12 21:26:46 +00:00
yypastushenko
260976b8d8
Chart: Implement ServiceMonitor limits. ( #12251 )
2024-10-29 22:49:25 +00:00
Marco Ebert
d0a04308c8
Chart: Rework ServiceMonitor. ( #12267 )
2024-10-29 22:45:51 +01:00
Aran Shavit
e07f0f6890
Chart: Set automountServiceAccountToken in workloads. ( #12247 )
...
Signed-off-by: Aran Shavit <Aranshavit@gmail.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-10-29 20:55:25 +00:00
Aran Shavit
bd76cf8f05
Chart: Add ServiceAccount tests. ( #12261 )
...
Signed-off-by: Aran Shavit <Aranshavit@gmail.com>
2024-10-29 17:46:57 +00:00
Aran Shavit
6608eb23b0
CI: Fix chart testing. ( #12257 )
...
Signed-off-by: Aran Shavit <Aranshavit@gmail.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-10-29 13:42:18 +01:00
m00lecule
0edf16ff6b
Chart: Suggest matchLabelKeys in Topology Spread Constraints. ( #12201 )
2024-10-16 06:09:02 +01:00
Hung Tran
1c0f4fa8b2
Docs: Add Pod Security Admission. ( #12174 )
...
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-10-15 14:56:22 +01:00
Marco Ebert
8b9abd207b
Release controller v1.12.0-beta.0/v1.11.3/v1.10.5 & chart v4.12.0-beta.0/v4.11.3/v4.10.5. ( #12166 )
2024-10-15 10:48:22 +01:00
Marco Ebert
75c77e5dc3
Metrics: Disable by default. ( #12095 )
2024-10-07 20:34:22 +01:00
Marco Ebert
657393e7b3
Chart: Bump Kube Webhook CertGen. ( #12119 )
2024-10-06 08:50:03 +01:00
Myst
f3bfa56c61
Chart: Add controller.metrics.service.enabled. ( #12056 )
2024-10-01 06:21:49 +01:00
Marco Ebert
45fc8860cf
Chart: Add global.image.registry. ( #12028 )
2024-09-30 09:26:04 +01:00
Marco Ebert
3f6e6aef78
Images: Remove OpenTelemetry. ( #12024 )
2024-09-29 17:31:04 +02:00
Marco Ebert
f369ffb073
Chart: Improve CI. ( #12003 )
2024-09-28 14:40:02 +01:00
Marco Ebert
24a9f972ff
Chart: Extend image tests. ( #12025 )
2024-09-28 13:03:35 +02:00
Trond
7b8d293d9b
Chart: Add controller.progressDeadlineSeconds. ( #12017 )
2024-09-27 11:14:01 +01:00
chengjoey
17209eb3a9
Chart: Implement unhealthyPodEvictionPolicy. ( #11992 )
2024-09-20 14:34:38 +02:00
Marco Ebert
43a7d8d5fe
Chart: Add defaultBackend.maxUnavailable. ( #11995 )
2024-09-20 14:25:03 +02:00
Marco Ebert
b2bc9618d3
Chart: Test controller.minAvailable & controller.maxUnavailable. ( #12000 )
2024-09-20 14:19:54 +02:00
Marco Ebert
435d5365b4
Chart: Align default backend PodDisruptionBudget. ( #11993 )
2024-09-20 14:04:48 +02:00
Marco Ebert
027603927b
Chart: Remove Pod Security Policy. ( #11971 )
2024-09-15 17:03:24 +02:00
Marco Ebert
61f56cb490
Chart: Improve default backend service account. ( #11972 )
2024-09-15 15:49:14 +01:00
Nathan Baulch
4f23049374
Fix minor typos ( #11935 )
2024-09-06 15:59:43 +01:00
Ramiro Algozino
a647bc1b7a
Chart: Implement controller.admissionWebhooks.service.servicePort. ( #11931 )
2024-09-04 22:11:01 +01:00
Adrian Berger
3cde7770dd
Chart: Add controller.metrics.prometheusRule.annotations. ( #11849 )
2024-08-27 00:35:17 +01:00
Marco Ebert
5d457c7daa
Chart: Add tests for PrometheusRule & ServiceMonitor. ( #11883 )
2024-08-27 00:04:17 +02:00
Marco Ebert
f6595f554a
Chart: Use generic values for ConfigMap test. ( #11877 )
2024-08-26 22:30:48 +02:00
Marco Ebert
e9f6c8e8f2
Security: Follow-up on recent changes. ( #11874 )
2024-08-26 21:09:16 +01:00
Seonghyeon Cho
8b20427d02
Update maxmind post link about geolite2 license changes ( #11861 )
...
Signed-off-by: Seonghyeon Cho <seonghyeoncho96@gmail.com>
2024-08-25 21:12:02 +01:00
Ricardo Katz
21cd966d1c
Remove global-rate-limit feature ( #11851 )
2024-08-25 21:03:29 +01:00
Ricardo Katz
7b4e4e2fa1
Enable security features by default ( #11819 )
2024-08-23 04:45:51 +01:00
Marco Ebert
d70b849d25
Release controller v1.11.2/v1.10.4 & chart v4.11.2/v4.10.4. ( #11816 )
2024-08-16 09:25:07 +02:00
Marco Ebert
593f05ed57
Chart: Bump Kube Webhook CertGen & OpenTelemetry. ( #11809 )
2024-08-15 13:33:14 +02:00
Marco Ebert
e972a35e98
Chart: Remove isControllerTagValid. ( #11710 )
2024-08-01 00:28:12 -07:00
Gerald Pape
36df47fcc4
Chart: Explicitly set runAsGroup. ( #11679 )
...
* Chart: Explicitly set `runAsGroup`.
Set a default value for the runAsGroup in container securityContexts of
the controller and default backend.
Also set the runAsGroup for opentelemetry and webhook Job container
securityContexts.
Signed-off-by: Gerald Pape <gerald@giantswarm.io>
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
---------
Signed-off-by: Gerald Pape <gerald@giantswarm.io>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-29 06:27:15 -07:00
Marco Ebert
56dbba3288
Release controller v1.11.1/v1.10.3 & chart v4.11.1/v4.10.3. ( #11654 )
2024-07-18 23:31:10 +02:00
Marco Ebert
cb2cdde10e
Repository: Add changelogs from release-v1.10. ( #11587 )
2024-07-09 00:32:49 -07:00
James Strong
b6fa279c0c
Release Notes 1.11.0 and chart 4.11.0
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-08 14:28:53 -04:00
Marco Ebert
e084ad0a5e
Chores: Align security contacts & chart maintainers to actual owners. ( #11465 )
2024-06-17 05:25:38 -07:00
TheRealNoob
af9e5246ad
Chart: Make pod affinity templatable. ( #11453 )
...
* [helm] template pod affinity
* update README
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* revert Chart.yaml version bump
* add unittests
* add docs defaultBackend.affinity
* add README section to values
* fix README syntax
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/values.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* update formatting of unittests + add README examples
* fix affinity labels on default-backend
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* remove double quotes on string
---------
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-06-14 02:13:44 -07:00
Marco Ebert
90ef45852c
Chart: Fix IngressClass annotations. ( #11416 )
2024-06-03 03:12:58 -07:00
Reddysekhar Gaduputi
0c17748c44
Chart: Make admission webhook patch job RBAC configurable. ( #11376 )
...
* Add an option to skip rbac resources creation in helm chart for admission-webhooks (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Add an option to skip rbac resources creation in helm chart update README (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Add an option to skip serviceAccount resources creation in helm chart for admission-webhooks (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Add helm chart tests for admission-webhooks (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Chart make admission webhook patch job RBAC configurable (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/clusterrole_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/clusterrolebinding_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/role_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/rolebinding_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/serviceaccount_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
---------
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-06-03 02:17:23 -07:00
