When using multiple values for the `serviceAccount.annotations` values, the first line ends up indented 2 further than the following lines, resulting in a invalid yaml
* fix: do not apply job-patch psp on Kubernetes 1.25 and newer
Signed-off-by: wilmarguida <w.denouden@guida.nl>
* fix: bump kubernetes version for helm chart CI to 1.25.0
Signed-off-by: wilmarguida <w.denouden@guida.nl>
Signed-off-by: wilmarguida <w.denouden@guida.nl>
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
We removed the use of configmap as an election lock, so we will use the
Lease API to complete the election.
Before this, we used `MultiLock` to facilitate smooth migration of
existing users of ingress-nginx from configmap to LeaseLock.
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* support extraEnvs for job resources in helm chart
Signed-off-by: Li, Eric <Xiannan.li@fmr.com>
* Update helm doc
* Update helm doc
* Updated helm doc - add controller.admissionWebhooks.extraEnvs
* Added some test data for webhook controller.admissionWebhooks.extraEnvs
* added new line at the end of deployment-webhook-extraEnvs-values.yaml
* Fixed helm chart test issue
* Initial work on chrooting nginx process
* More improvements in chroot
* Fix charts and some file locations
* Fix symlink on non chrooted container
* fix psp test
* Add e2e tests to chroot image
* Fix logger
* Add internal logger in controller
* Fix overlay for chrooted tests
* Fix tests
* fix boilerplates
* Fix unittest to point to the right pid
* Fix PR review
* release 1.1.3 details
fix the readme with right sha and version
remove helm label
fix issue 8329
fix the 1.20 service after the fix for ipv6
udpate readme and change for patches
* update helm doc
Signed-off-by: James Strong <strong.james.e@gmail.com>
* added fsGroup to admission createSecret and patchWebhook job
* added fsGroup to admission createSecret and patchWebhook job
* modified helm/README.md to add value for fsGroup
* fixed patch job values ordering
* remove manually edited README for replacement with helm-docs generated version
* re-adding charts/README.md generated by helm-docs
* remove opentelemetry from main nginx image
* add opentelemetry sidecar image
* handle extra modules in helm chart
* fix running helm chart
* mount the modules volume in the init container
* merge the mounted folder
* fix the otel image
* fix licence year
* fix cloudbuild image
* use the same nginx version as in the main image
* only retrieve /etc/nginx/modules for now
* allow set annotations for admission Jobs
Signed-off-by: Alex Co <tuanclq@gmail.com>
* Bump chart version & update CHANGELOG
Signed-off-by: Alex Co <tuanclq@gmail.com>
* Bump chart version again
Signed-off-by: Alex Co <tuanclq@gmail.com>
* Add example
Signed-off-by: Alex Co <tuanclq@gmail.com>
* Add labels to RBAC resources
* Add labels to all resources
* Fix labels indentaton in patch jobs
* Add controller and default backend labels to pods
Signed-off-by: Muhammad Hamza Zaib <hamzazaib3202@gmail.com>
* Bump chart version and update changelog
Signed-off-by: Muhammad Hamza Zaib <hamzazaib3202@gmail.com>
* fix Ingress resources in docs
Signed-off-by: Gerald Pape <gerald@giantswarm.io>
* move to ingressClassName
* fix more Ingress resource examples
* empty commit
Signed-off-by: Gerald Pape <gerald@giantswarm.io>
* make NOTES.txt aware of version + add notice about ingress version to examples main page
* add link to legacy documentation
Signed-off-by: Gerald Pape <gerald@giantswarm.io>
* priorityClassName should be in " "
Example: https://github.com/helm/charts/blob/master/stable/k8s-spot-rescheduler/templates/deployment.yaml#L28
* Update charts/ingress-nginx/templates/controller-deployment.yaml
Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>
* Add support to ipFamilyPolicy and ipFamilies fields in Helm chart
As stated in the prerequisites' session of https://kubernetes.io/docs/concepts/services-networking/dual-stack/, in order to use Kubernetes IPv4/IPv6 dual stack, v1.20 is needed. This commit aims in supporting these dual-stack-ness in ingress-nginx's chart.
Signed-off-by: jaehnri <joao.henri.cr@gmail.com>
* Standardize documentation with two '#'s
Signed-off-by: jaehnri <joao.henri.cr@gmail.com>
* Bump Helm chart version to 4.1.0
Signed-off-by: jaehnri <joao.henri.cr@gmail.com>
* Update Helm Chart changelog with 4.1.0 description
Signed-off-by: jaehnri <joao.henri.cr@gmail.com>
* Revert Helm Chart bump and remove CHANGELOG
As there will be more things in the release, in the review of this PR, it was asked to revert the bumps:
https://github.com/kubernetes/ingress-nginx/pull/7651#pullrequestreview-757311449
Signed-off-by: jaehnri <joao.henri.cr@gmail.com>
