Commit graph

244 commits

Author SHA1 Message Date
Damien Mathieu
15b0aba03b
First sidecar module: OpenTelemetry (#8013)
* remove opentelemetry from main nginx image

* add opentelemetry sidecar image

* handle extra modules in helm chart

* fix running helm chart

* mount the modules volume in the init container

* merge the mounted folder

* fix the otel image

* fix licence year

* fix cloudbuild image

* use the same nginx version as in the main image

* only retrieve /etc/nginx/modules for now
2022-01-16 13:33:28 -08:00
Long Wu Yuan
fc38b9f2aa
changes for release v1.1.1 (#8125) 2022-01-12 08:48:37 -08:00
Scott Crooks
71de8e1a23
docs(charts): using helm-docs for chart (#8061)
This enables the use of the `helm-docs` tool on the Helm chart located in `charts/ingress-nginx`. This will make it possible to automatically document new variables in the `values.yaml` file.

Signed-off-by: Scott Crooks <scott.crooks@gmail.com>
2022-01-08 02:53:04 -08:00
Alex Sears
84db822a94
Add newline indenting to admission webhook annotations (#8015)
Signed-off-by: Alex Sears <me@alexsears.com>
2021-12-07 11:26:37 -08:00
Daniel Sim
f7a5704be8
Add relabelings in controller-servicemonitor.yaml (#8008)
* Add relabelings above metricRelabelings in controller-servicemonitor.yaml

* Bump chart version to 4.0.13, Add to CHANGELOG

* Rename PR/CHANGELOG
2021-12-06 05:50:32 -08:00
Alex Co
ea1099abc9
allow set annotations for admission Jobs (#7979)
* allow set annotations for admission Jobs

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Bump chart version & update CHANGELOG

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Bump chart version again

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Add example

Signed-off-by: Alex Co <tuanclq@gmail.com>
2021-11-29 03:33:22 -08:00
Anton Holovin
5a5bff1fb9
Making Kube service appProtocol field optional (#7873) 2021-11-26 02:36:52 -08:00
James Strong
843a16a8f8
Release updates for v1.1.0 (#7964) 2021-11-23 15:07:46 -08:00
Steve Griffith
e57d2f63fa
applied allowPrivilegeEscalation=false (#7948) 2021-11-20 12:52:59 -08:00
Muhammad Hamza Zaib
30c0d2260d
[Helm] Add labels to resources (#6992)
* Add labels to RBAC resources

* Add labels to all resources

* Fix labels indentaton in patch jobs

* Add controller and default backend labels to pods

Signed-off-by: Muhammad Hamza Zaib <hamzazaib3202@gmail.com>

* Bump chart version and update changelog

Signed-off-by: Muhammad Hamza Zaib <hamzazaib3202@gmail.com>
2021-11-19 06:52:52 -08:00
Ricardo Katz
8e210b21e2
Force helm v4.0.8 release (#7928) 2021-11-16 09:43:27 -03:00
Ricardo Katz
727f4cb925
Release v1.0.5 documents (#7924)
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-11-15 17:11:26 -08:00
Nithya
7d17ff35fa
helm chart: choice option for internal/external loadbalancer type service (#7806) 2021-11-15 15:13:52 -08:00
Adam Graves
6299c39842
Allow setting of container securityContext (#7533)
Currently this blocks deployments on clusters with global PodSecurityPolicies set

Signed-off-by: Adam Graves <adam.graves85@gmail.com>
2021-11-15 13:54:49 -08:00
zryfish
7203a0b8bd
support watch namespaces matched namespace selector (#7472)
skip caching namespaces at cluster scope if only watching single namespace

add --watch-namespace-selector in user guide

add e2e test
2021-11-12 11:46:28 -08:00
Gerald Pape
017e1ecde3
Fix Ingress resources in docs (#7579)
* fix Ingress resources in docs

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* move to ingressClassName

* fix more Ingress resource examples

* empty commit

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* make NOTES.txt aware of version + add notice about ingress version to examples main page

* add link to legacy documentation

Signed-off-by: Gerald Pape <gerald@giantswarm.io>
2021-11-09 07:43:49 -08:00
Jennifer
72ec0e290e
Remove double spacing (#7830) 2021-11-05 13:54:40 -07:00
WMP
5b94d83aeb
priorityClassName should be in " " (#7512)
* priorityClassName should be in " "

Example:  https://github.com/helm/charts/blob/master/stable/k8s-spot-rescheduler/templates/deployment.yaml#L28

* Update charts/ingress-nginx/templates/controller-deployment.yaml

Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>

Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>
2021-10-24 15:28:21 -07:00
James Callahan
e4001df41e
ServiceMonitor namespaceSelector defaults to current namespace (#7001) 2021-10-24 14:28:21 -07:00
Zhiwei Liu
af7d9581f4
Remove deprecated annotation in helm chart example (#7813) 2021-10-22 10:34:38 -07:00
Mmadu Manasseh
5a52d99ae8
Refactor: update DaemonSet and Deployment command params to use templates (#7689)
* Refactor: update DaemonSet and Deployment command parameters to use helm templates

* Fix whitespace issues
2021-10-14 01:23:19 -07:00
Ricardo Katz
14f6b32032
Release v1.0.4 (#7805)
Signed-off-by: Ricardo Pchevuzinske Katz <rkatz@vmware.com>
2021-10-12 20:25:48 -07:00
Mateusz Gozdek
d74fa2f538
Update ingress-nginx/kube-webhook-certgen image to latest v1.1.1 (#7793)
We skip version v1.1 as it had a regression.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
2021-10-12 14:17:59 -07:00
João Henri
001ce778b7
Support ipFamilyPolicy and ipFamilies fields in Helm Chart (#7651)
* Add support to ipFamilyPolicy and ipFamilies fields in Helm chart

As stated in the prerequisites' session of https://kubernetes.io/docs/concepts/services-networking/dual-stack/, in order to use Kubernetes IPv4/IPv6 dual stack, v1.20 is needed. This commit aims in supporting these dual-stack-ness in ingress-nginx's chart.

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Standardize documentation with two '#'s

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Bump Helm chart version to 4.1.0

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Update Helm Chart changelog with 4.1.0 description

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Revert Helm Chart bump and remove CHANGELOG

As there will be more things in the release, in the review of this PR, it was asked to revert the bumps:
https://github.com/kubernetes/ingress-nginx/pull/7651#pullrequestreview-757311449

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>
2021-10-12 13:38:00 -07:00
Long Wu Yuan
766345e2bb
added ingressClassName field in example ingress (#7797) 2021-10-11 19:39:47 -07:00
Léopold Jacquot
a6ef52da9d
Add service-metrics port protocol (#7782) 2021-10-10 13:34:37 -07:00
James Strong
07e54431ff
bump the version to fix the build issues (#7751) 2021-10-04 16:21:50 -07:00
Ricardo Katz
bdea0c8e46
Release v1.0.3 (#7743)
Signed-off-by: Ricardo Pchevuzinske Katz <rkatz@vmware.com>
2021-10-04 07:17:09 -07:00
Ricardo Katz
3eb5ec28fe
Release v1.0.2 (#7709)
* Release v1.0.2

* Apply suggestions from code review

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

* Fix changelog

Co-authored-by: Jintao Zhang <tao12345666333@163.com>
2021-09-27 00:25:27 -03:00
Noah Ispas
f66f87fc21
preparing release v1.0.1 (#7681)
* preparing release v1.0.1

* update shas to newest promoted image

* update changelog of helm chart

* change requests from PR
2021-09-22 05:12:02 -07:00
Ricardo Katz
4fc57dcc49
Change enable-snippet to allow-snippet-annotation (#7670)
Signed-off-by: Ricardo Pchevuzinske Katz <rkatz@vmware.com>
2021-09-20 16:52:23 -07:00
Ricardo Katz
5e6ab651ec
Add option to force enabling snippet directives (#7665)
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-09-19 12:40:08 -07:00
Ricardo Katz
cda59ccc9c
Add new flag to watch ingressclass by name instead of spec (#7609) 2021-09-10 10:14:01 -07:00
Bhumij Gupta
8b3a6f0252
Helm notes outputs non nil value for ingress.class annotation (#7611)
Signed-off-by: bhumijgupta <bhumijgupta@gmail.com>
2021-09-08 02:17:20 -07:00
pierre-yves
f182b317ba
fix charts README.md to give additional detail on prometheus metrics … (#7601)
* fix charts README.md to give additional detail on prometheus metrics configuration

* charts readme.md remove blank line
2021-09-07 06:47:15 -07:00
Aivars Sterns
9dda37c130
add same tcp and udp ports to internal load balancer (#7511) 2021-09-02 00:54:09 -07:00
Maksim Nabokikh
4c4013904a
Add a flag to specify address to bind the healthz server (#7541)
* Add a flag to specify address to bind the healthz server

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>

* Add healthz host to the helm chart

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>

* Apply suggestions from code review

Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>

Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2021-08-26 05:13:23 -07:00
Neha Lohia
f207702c30
release v1.0.0 (#7535)
Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com>
2021-08-24 08:31:14 -07:00
Emily L Shepherd
623436ef65
Add appProtocol field to all ServicePorts (#7493)
Minor update to the helm chart to set the [appProtocol][1] field on all
http / https ports defined in the various services created by the helm
chart:

- http and https for controller-service
- http and https for controller-service-internal
- https for controler-service-webhook
- http for default-backend-service

These are only added in kubernetes >= 1.20, which is when this feature
became stable.

[1]: https://kubernetes.io/docs/concepts/services-networking/service/#application-protocol
2021-08-23 10:08:01 -07:00
amirschw
605c243d7a
[Helm] Make HPA behavior configurable (#7203)
Signed-off-by: amirschw <24677563+amirschw@users.noreply.github.com>
2021-08-22 12:05:59 -07:00
Ricardo Katz
90c79689c4
Release v1 (#7470)
* Drop v1beta1 from ingress nginx (#7156)

* Drop v1beta1 from ingress nginx

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Fix intorstr logic in controller

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* fixing admission

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* more intorstr fixing

* correct template rendering

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Fix e2e tests for v1 api

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Fix gofmt errors

* This is finally working...almost there...

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Re-add removed validation of AdmissionReview

* Prepare for v1.0.0-alpha.1 release

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Update changelog and matrix table for v1.0.0-alpha.1 (#7274)

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* add docs for syslog feature (#7219)

* Fix link to e2e-tests.md in developer-guide (#7201)

* Use ENV expansion for namespace in args (#7146)

Update the DaemonSet namespace references to use the `POD_NAMESPACE` environment variable in the same way that the Deployment does.

* chart: using Helm builtin capabilities check (#7190)

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* Update proper default value for HTTP2MaxConcurrentStreams in Docs (#6944)

It should be 128 as documented in https://github.com/kubernetes/ingress-nginx/blob/master/internal/ingress/controller/config/config.go#L780

* Fix MaxWorkerOpenFiles calculation on high cores nodes (#7107)

* Fix MaxWorkerOpenFiles calculation on high cores nodes

* Add e2e test for rlimit_nofile

* Fix doc for max-worker-open-files

* ingress/tcp: add additional error logging on failed (#7208)

* Add file containing stable release (#7313)

* Handle named (non-numeric) ports correctly (#7311)

Signed-off-by: Carlos Panato <ctadeu@gmail.com>

* Updated v1beta1 to v1 as its deprecated (#7308)

* remove mercurial from build (#7031)

* Retry to download maxmind DB if it fails (#7242)

* Retry to download maxmind DB if it fails.

Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>

* Add retries count arg, move retry logic into DownloadGeoLite2DB function

Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>

* Reorder parameters in DownloadGeoLite2DB

Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>

* Remove hardcoded value

Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com>

* Release v1.0.0-alpha.1

* Add changelog for v1.0.0-alpha.2

* controller: ignore non-service backends (#7332)

* controller: ignore non-service backends

Signed-off-by: Carlos Panato <ctadeu@gmail.com>

* update per feedback

Signed-off-by: Carlos Panato <ctadeu@gmail.com>

* fix: allow scope/tcp/udp configmap namespace to altered (#7161)

* Lower webhook timeout for digital ocean (#7319)

* Lower webhook timeout for digital ocean

* Set Digital Ocean value controller.admissionWebhooks.timeoutSeconds to 29

* update OWNERS and aliases files (#7365) (#7366)

Signed-off-by: Carlos Panato <ctadeu@gmail.com>

* Downgrade Lua modules for s390x (#7355)

Downgrade Lua modules to last known working version.

* Fix IngressClass logic for newer releases (#7341)

* Fix IngressClass logic for newer releases

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Change e2e tests for the new IngressClass presence

* Fix chart and admission tests

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Fix helm chart test

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>

* Fix reviews

* Remove ingressclass code from admission

* update tag to v1.0.0-beta.1

* update readme and changelog for v1.0.0-beta.1

* Release v1.0.0-beta.1 - helm and manifests (#7422)

* Change the order of annotation just to trigger a new helm release (#7425)

* [cherry-pick] Add dev-v1 branch into helm releaser (#7428)

* Add dev-v1 branch into helm releaser (#7424)

* chore: add link for artifacthub.io/prerelease annotations

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>

* k8s job ci pipeline for dev-v1 br v1.22.0 (#7453)

* k8s job ci pipeline for dev-v1 br v1.22.0

Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com>

* k8s job ci pipeline for dev-v1 br v1.21.2

Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com>

* remove v1.21.1 version

Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com>

* Add controller.watchIngressWithoutClass config option (#7459)

Signed-off-by: Akshit Grover <akshit.grover2016@gmail.com>

* Release new helm chart with certgen fixed (#7478)

* Update go version, modules and remove ioutil

* Release new helm chart with certgen fixed

* changed appversion, chartversion, TAG, image (#7490)

* Fix CI conflict

* Fix CI conflict

* Fix build.sh from rebase process

* Fix controller_test post rebase

Co-authored-by: Tianhao Guo <rggth09@gmail.com>
Co-authored-by: Ray <61553+rctay@users.noreply.github.com>
Co-authored-by: Bill Cassidy <cassid4@gmail.com>
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
Co-authored-by: Sathish Ramani <rsathishx87@gmail.com>
Co-authored-by: Mansur Marvanov <nanorobocop@gmail.com>
Co-authored-by: Matt1360 <568198+Matt1360@users.noreply.github.com>
Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
Co-authored-by: Kundan Kumar <kundan.kumar@india.nec.com>
Co-authored-by: Tom Hayward <thayward@infoblox.com>
Co-authored-by: Sergey Shakuto <sshakuto@infoblox.com>
Co-authored-by: Tore <tore.lonoy@gmail.com>
Co-authored-by: Bouke Versteegh <info@boukeversteegh.nl>
Co-authored-by: Shahid <shahid@us.ibm.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Long Wu Yuan <longwuyuan@gmail.com>
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Neha Lohia <nehapithadiya444@gmail.com>
Co-authored-by: Akshit Grover <akshit.grover2016@gmail.com>
2021-08-21 13:42:00 -07:00
Jintao Zhang
f3c50698d9
Prepare for v0.49.0 release (#7509)
* Changelog for v0.49

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* helm: bump version to v0.49.0

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* docs: bumper version to v0.49.0

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* explicitly call out details for Changelogs

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2021-08-21 09:49:59 -07:00
Jonas Kello
2fe8270302
Add linux node selector as default (#7481) 2021-08-12 12:39:51 -07:00
kayrus
e53a11e839
Add hostname value to override pod's hostname (#7386) 2021-08-09 06:45:31 -07:00
Ricardo Katz
2d90ba14f5
Change all master reference to main (#7369) 2021-08-06 17:07:29 -07:00
Bhumij Gupta
6f0401fc73
Helm - Enable configuring request and limit for containers in webhook jobs (#7434)
* helm: add feature to configure request and limit for container in createSecret and patchWebhook job

Signed-off-by: Bhumij Gupta <bhumijgupta@gmail.com>

* Remove empty line in helm template

Signed-off-by: Bhumij Gupta <bhumijgupta@gmail.com>

* Add test for admission webhook job container resources

Signed-off-by: Bhumij Gupta <bhumijgupta@gmail.com>

* Add new line character at the end of charts ci file

Signed-off-by: Bhumij Gupta <bhumijgupta@gmail.com>
2021-08-05 15:31:41 -07:00
Maikel
46be93808b
Add scope configuration check. (#6864) 2021-08-05 06:23:22 -07:00
Swift
b1a71adb74
Bump PDB API version to v1 (#7421)
* update pdb to v1

Signed-off-by: yuswift <yuswift2018@gmail.com>

* validate the version in PDB

Signed-off-by: yuswift <yuswift2018@gmail.com>
2021-08-05 05:23:22 -07:00
Long Wu Yuan
499ed16cc8
Fixed chart version (#7423) 2021-08-03 07:34:49 -07:00
Steven Harms
a82ea7d617
aws-load-balancer-internal is a boolean value (#7353)
* aws-load-balancer-internal is a boolean value

* Update to string true

* Update to string true

* Update to string true
2021-07-26 05:40:33 -07:00