Commit graph

6780 commits

Author SHA1 Message Date
Long Wu Yuan
5a6c87141a bumped ginkgo to v2.5.1 in testrunner (#9340) 2022-11-25 19:16:04 -08:00
Long Wu Yuan
86d840ea02 create nsswitch-conf if missing (#9339) 2022-11-25 01:28:06 -08:00
James Strong
996d9030e9 Merge pull request #9336 from longwuyuan/fix-multiple-ginkgo-versions
fixed multiple ginkgo versions
2022-11-24 20:13:19 -05:00
LongWuYuan
464af82688 fixed multiple ginkgo versions 2022-11-25 06:09:11 +05:30
aimuz
5b2811f7cb remove the configmap related permissions (#9310)
ref: https://github.com/kubernetes/ingress-nginx/pull/8921
We have used the Lease API for selection

Signed-off-by: aimuz <mr.imuz@gmail.com>

Signed-off-by: aimuz <mr.imuz@gmail.com>
2022-11-23 17:38:03 -08:00
Michael Weibel
7898312aa5 remove hardcoded datasource from grafana dashboard (#9284) 2022-11-22 05:56:15 -08:00
dependabot[bot]
37bd7678c1 Bump github.com/prometheus/client_golang from 1.13.1 to 1.14.0 (#9298)
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.13.1 to 1.14.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.13.1...v1.14.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-21 13:20:13 -08:00
caption
8eac7efc74 update gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b to 3.0.0 (#9277) 2022-11-21 13:18:17 -08:00
dependabot[bot]
717a207f57 Bump actions/dependency-review-action from 3.0.0 to 3.0.1 (#9319)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](30d5821115...11310527b4)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-21 13:14:12 -08:00
dependabot[bot]
04f7f03bde Bump golang.org/x/crypto from 0.1.0 to 0.3.0 (#9318)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.1.0 to 0.3.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.1.0...v0.3.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-21 13:12:13 -08:00
dependabot[bot]
97a30bfe44 Bump github.com/onsi/ginkgo/v2 from 2.4.0 to 2.5.1 (#9317)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.4.0 to 2.5.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.4.0...v2.5.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-21 04:22:31 -08:00
Ricardo Katz
15dc300899 Validate ingress path fields (#9309)
* Validate characters in path fields

* Add e2e tests for path validation

* Fix review comments
2022-11-17 04:24:40 -08:00
dependabot[bot]
aadaafcf83 Bump actions/dependency-review-action from 2.5.1 to 3.0.0 (#9301)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.5.1 to 3.0.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](0efb1d1d84...30d5821115)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-15 14:24:47 -08:00
dependabot[bot]
1c3e99c170 Bump k8s.io/component-base from 0.25.3 to 0.25.4 (#9300)
Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.25.3 to 0.25.4.
- [Release notes](https://github.com/kubernetes/component-base/releases)
- [Commits](https://github.com/kubernetes/component-base/compare/v0.25.3...v0.25.4)

---
updated-dependencies:
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-15 14:22:48 -08:00
Long Wu Yuan
bdb42d31b1 added SAN to cert create command (#9295) 2022-11-15 05:04:42 -08:00
Gabriel Gosselin
5c3b4724d6 Missing controller.ingressClass (#9304)
The missing controller.ingressClass would set the deployment to the default class but the controller.ingressClassResource.name would set the creation of a new IngressClass object.

For now this needs to be done twice, could be a fix in the chart later on.
2022-11-14 18:58:41 -08:00
Ehsan Saei
28244b8299 OpenTelemetry static linking (#9286)
* static otel lib

* clean

* nginx 1.21
2022-11-14 11:50:43 -08:00
Joseph Richardson
8d1d28890b Fixed indentation in commented-out autoscaling (#9225) 2022-11-13 11:29:56 -08:00
James Strong
e84b570010 run helm release on main only and when the chart/value changes only (#9290)
Signed-off-by: James Strong <strong.james.e@gmail.com>

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-11-11 07:00:10 -08:00
Michael Wittig
aea02c8230 fix broken annotation yaml (#9243) 2022-11-10 05:48:56 -08:00
Marco Ebert
5a689e567d PDB: Add maxUnavailable. (#9278) 2022-11-10 03:20:54 -08:00
pellmont
6fe4684f98 add containerSecurityContext to extraModules init containers (kubernetes#9016) (#9242) 2022-11-10 02:38:54 -08:00
James Strong
8fcc84880f udate readme, charts and static deploys for release 1.5.1 (#9280)
Signed-off-by: James Strong <strong.james.e@gmail.com>

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-11-09 17:08:54 -08:00
James Strong
b753c5fc14 Merge pull request #9275 from strongjz/release-1.5.1
Add CVE-2022-27664 #9273 in latest release
2022-11-08 17:21:41 -05:00
James Strong
cc573c80ad missed CVE-2022-27664 #9273 in 1.5.0 build
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-11-08 15:48:44 -05:00
James Strong
1cfefaf05d Merge pull request #9273 from esigo/fix-CVE-2022-27664
fix CVE-2022-27664
2022-11-08 15:32:29 -05:00
James Strong
dcaf1472f5 Merge pull request #9271 from strongjz/release-1.5.0
start 1.5.0 release
2022-11-08 11:55:59 -05:00
Oblivion
ca0510fcbb fix CVE-2022-27664 2022-11-08 16:46:53 +00:00
James Strong
6fa7980cbe start 1.5.0 release
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-11-08 10:24:58 -05:00
Njegos Railic
9d1d584e76 Adding support for disabling liveness and readiness probes in the Helm chart (#9238) 2022-11-08 06:44:25 -08:00
James Strong
b0d54fa1b1 Merge pull request #9261 from kubernetes/dependabot/go_modules/sigs.k8s.io/controller-runtime-0.13.1
Bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.13.1
2022-11-08 08:53:25 -05:00
dependabot[bot]
4b3c66e86d Bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.13.1
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.11.2 to 0.13.1.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.11.2...v0.13.1)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-08 00:00:34 +00:00
dependabot[bot]
44dae6e99f Bump aquasecurity/trivy-action from 0.7.1 to 0.8.0 (#9264)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.7.1 to 0.8.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](d63413b0a4...9ab158e859)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 15:52:16 -08:00
dependabot[bot]
f6b8f26c12 Bump github/codeql-action from 2.1.29 to 2.1.31 (#9263)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.29 to 2.1.31.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ec3cf9c605...c3b6fce4ee)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 15:50:16 -08:00
dependabot[bot]
f02f78bf7f Bump github.com/prometheus/client_golang from 1.13.0 to 1.13.1 (#9262)
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.13.0 to 1.13.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.13.1/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.13.0...v1.13.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 15:48:16 -08:00
Ehsan Saei
10ef59797f Fix CVE-2022-1996 (#9244)
* CVE-2022-1996

* clean

* fix

* fix
2022-11-07 15:46:17 -08:00
Ehsan Saei
d19744551a Fix CVE-2022-32149 (#9258)
* Fix CVE-2022-32149

* fix CI
2022-11-07 15:44:17 -08:00
James Strong
deb47c080e update base image of nginx to 1.21.6 (#9257)
* add workflow dispatch and update nginx base

Signed-off-by: James Strong <strong.james.e@gmail.com>

* e2e were failing, added a go mod tidy

Signed-off-by: James Strong <strong.james.e@gmail.com>

* e2e were failing, added a go mod tidy

Signed-off-by: James Strong <strong.james.e@gmail.com>

* push mod and sum from main

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Update NGINX_BASE

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
2022-11-06 15:36:16 -08:00
Tomas Hulata
10e6c6c6cd fix svc long name (#9245)
Signed-off-by: tombokombo <tombo@sysart.tech>

Signed-off-by: tombokombo <tombo@sysart.tech>
2022-11-05 14:22:15 -07:00
dependabot[bot]
ed68a07f50 Bump azure/setup-helm from 3.3 to 3.4 (#9235)
Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 3.3 to 3.4.
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Commits](b5b231a831...f382f75448)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-04 09:58:14 -07:00
dependabot[bot]
84a9962b51 Bump actions/upload-artifact from 3.1.0 to 3.1.1 (#9234)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](3cea537223...83fd05a356)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-04 09:56:14 -07:00
dependabot[bot]
6dee7b7317 Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#9233)
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.6.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-04 09:54:14 -07:00
dependabot[bot]
cab06dfdf2 Bump github/codeql-action from 2.1.28 to 2.1.29 (#9236)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.28 to 2.1.29.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](cc7986c02b...ec3cf9c605)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-04 09:52:15 -07:00
dependabot[bot]
267ea1d4e4 Bump actions/dependency-review-action from 2.5.0 to 2.5.1 (#9237)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](fd675ced9c...0efb1d1d84)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 09:24:45 -07:00
Jintao Zhang
fcf778d69d chore: update NGINX to 1.21.6 (#9231)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-10-31 07:10:45 -07:00
Jintao Zhang
6554400d2f chore: bump NGINX version v1.21.4 (#8889)
* chore: bump NGINX version v1.21.4

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* chore: bump all others

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* apply all patches

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* fix files hash

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* fix ajp module

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-10-28 16:40:39 -07:00
Jaen
6a8d09b366 Fix Markdown header level (#9210)
Cloud providers use level 4 headers.
2022-10-25 15:06:35 -07:00
Youssef Bel Mekki
c6b1e31fe4 add:(admission-webhooks) ability to set securityContext for job-containers createSecret and patchWebhook (#9186)
Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>

Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>
2022-10-25 14:14:36 -07:00
Thomas Güttler
e7f8845de6 fix typo in docs. (#9167) 2022-10-25 07:14:36 -07:00
dependabot[bot]
99a76f10c5 Bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 (#9200)
Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](https://github.com/prometheus/client_model/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_model
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-25 07:10:36 -07:00