Commit graph

7251 commits

Author SHA1 Message Date
k8s-infra-cherrypick-robot
2da06b266b
[release-1.9] change MODSECURITY_VERSION_LIB to 3.0.11 (#10879)
* feat: change MODSECURITY_VERSION_LIB to 3.0.11

* use sha commit instead of tag

---------

Co-authored-by: iliuta <adrian.papusoi@gmail.com>
2024-01-19 17:44:21 +01:00
k8s-infra-cherrypick-robot
83b49fdff8
Bump github.com/opencontainers/runc from 1.1.10 to 1.1.11 (#10878)
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.10 to 1.1.11.
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.11/CHANGELOG.md)
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.10...v1.1.11)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-19 17:32:39 +01:00
k8s-infra-cherrypick-robot
69febed4c5
Include SECLEVEL and STRENGTH as part of ssl-cipher list validation (#10871)
Co-authored-by: Kyle Brown <kyle.brown@getweave.com>
2024-01-19 15:50:12 +01:00
James Strong
f3d3d713e3
Merge pull request #10793 from k8s-infra-cherrypick-robot/cherry-pick-9677-to-release-1.9
[release-1.9] Add controller.metrics.serviceMonitor.annotations in Helm chart
2023-12-21 10:02:07 +01:00
James Strong
0a2c4c8ad3
Merge pull request #10791 from k8s-infra-cherrypick-robot/cherry-pick-10317-to-release-1.9
[release-1.9] fix(labels): use complete labels variable on default-backend deployment
2023-12-21 09:59:32 +01:00
Mathieu Parent
855aa609f8 Add controller.metrics.serviceMonitor.annotations in Helm chart
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
2023-12-20 22:09:29 +00:00
Joshua Sleeper
e6f8c95487 fix(labels): use complete labels variable on default-backend deployment 2023-12-20 20:51:42 +00:00
James Strong
f503c4bb5f
Merge pull request #10790 from kubernetes/1.9.5-build
start 1.9.5 build
2023-12-20 21:49:27 +01:00
James Strong
c7a592d523
start 1.9.5 build 2023-12-20 21:46:52 +01:00
James Strong
ec6c405294
Merge pull request #10786 from Gacko/qubj1
Chart: Copy changes from `main`.
2023-12-20 21:44:51 +01:00
Marco Ebert
2965582bbb Revert 4.8.4. 2023-12-20 19:35:44 +01:00
Marco Ebert
22a8fabf8c Chart: Copy changes from main. 2023-12-20 19:35:44 +01:00
James Strong
f8295b638d
Merge pull request #10788 from strongjz/golang-update
Golang update
2023-12-20 18:54:53 +01:00
James Strong
6ba8dad3f8 go mod tidy
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-20 17:52:48 +01:00
James Strong
3906486007 srevert some e2e changes 2023-12-20 17:51:02 +01:00
James Strong
f2664dfff7 srevert some e2e changes 2023-12-20 17:50:51 +01:00
James Strong
520709111c sget a nginx build as well 2023-12-20 17:50:37 +01:00
James Strong
ea9f375b35 sfix all golang lint ci errors 2023-12-20 17:50:20 +01:00
James Strong
34c11c30b9 supgrade golang lint ci to v1.55.2 2023-12-20 17:49:49 +01:00
James Strong
6ddaee58b8 update golang gha
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-20 17:49:12 +01:00
James Strong
a4c58e5bd3 upgrade go 1.21.5
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-20 17:48:39 +01:00
James Strong
a5672c4362
Merge pull request #10785 from k8s-infra-cherrypick-robot/cherry-pick-10650-to-release-1.9
[release-1.9] [charts] add controller.admissionWebhooks.networkPolicyEnabled
2023-12-20 16:38:01 +01:00
Jmnote
52bd583fee .Values.controller.admissionWebhooks.patch.networkPolicy.enabled 2023-12-20 15:32:26 +00:00
Jmnote
d7e84e8722 add controller.admissionWebhooks.networkPolicyEnabled
Signed-off-by: Jmnote <opcore@gmail.com>
2023-12-20 15:32:26 +00:00
James Strong
f18a66dca4
update nginx build (#10781)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-20 15:24:54 +01:00
James Strong
ca91adaad6
update images from golang upgrade (#10762)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-15 21:14:24 +01:00
k8s-infra-cherrypick-robot
7100fecafb
fix: remove tcpproxy copy error handling (#10715)
Co-authored-by: Zadkiel Aharonian <hello@zadkiel.fr>
2023-12-01 17:25:56 +01:00
James Strong
6e21bfd7a6
Merge pull request #10703 from k8s-infra-cherrypick-robot/cherry-pick-10565-to-release-1.9
[release-1.9] Chart: Improve #10539.
2023-11-29 14:57:46 -05:00
Marco Ebert
a4f3cb0067 Templates: Add forgotten namespace definitions. 2023-11-29 19:55:36 +00:00
Marco Ebert
c34bd82d5b KEDA: Remove comment. 2023-11-29 19:55:36 +00:00
Marco Ebert
c89114a62a Admission Webhooks/Validating Webhook: Make use of ingress-nginx.namespace. 2023-11-29 19:55:36 +00:00
Marco Ebert
15ce4fc172 Templates: Remove quotes.
In alignment to others. Also does not make sense as `namespace` must conform to DNS.
2023-11-29 19:55:36 +00:00
Marco Ebert
78ffac9766 Helpers: Align ingress-nginx.namespace to ingress-nginx.name. 2023-11-29 19:55:36 +00:00
James Strong
af04aa5fa9
Merge pull request #10702 from k8s-infra-cherrypick-robot/cherry-pick-10523-to-release-1.9
[release-1.9] Admission Webhook: Truncate name.
2023-11-29 14:53:15 -05:00
Marco Ebert
a49ca2e90b Admission Webhook: Truncate name. 2023-11-29 19:52:11 +00:00
James Strong
a911a88bd0
Merge pull request #10701 from k8s-infra-cherrypick-robot/cherry-pick-10594-to-release-1.9
[release-1.9] Fix minor typo in Helm chart values
2023-11-29 14:43:06 -05:00
James Strong
1192b01278
Merge pull request #10700 from k8s-infra-cherrypick-robot/cherry-pick-10255-to-release-1.9
[release-1.9] DOCS Remove support for running Both
2023-11-29 14:42:49 -05:00
Roberto Devesa
358d1fb18e Fix typo 2023-11-29 19:42:11 +00:00
James Strong
68901bcec1
Merge pull request #10699 from k8s-infra-cherrypick-robot/cherry-pick-10539-to-release-1.9
[release-1.9] helm feat: add namespace overrides
2023-11-29 14:35:00 -05:00
Matt Clegg
32cdec4cb9 DOCS Remove support for running Both 2023-11-29 19:33:05 +00:00
jasine
bf5d30922f fix: set max length and trim last "-" 2023-11-29 19:22:46 +00:00
jasine
d9aac9e35f fix: description in value 2023-11-29 19:22:46 +00:00
jasine
e6f07254fb fix: readme description 2023-11-29 19:22:46 +00:00
jasine
e4ebc3de57 add value in readme 2023-11-29 19:22:46 +00:00
jasine
8c8577cafc feat: add namespace overrides 2023-11-29 19:22:46 +00:00
James Strong
bc2bc3d037
Merge pull request #10696 from k8s-infra-cherrypick-robot/cherry-pick-10663-to-release-1.9
[release-1.9] Fix typo in yaml
2023-11-29 13:40:45 -05:00
k8s-infra-cherrypick-robot
aa3609046b
Ignore fake certificate for NGINXCertificateExpiry (#10694)
The fake certificate is only a fallback and it is okay-ish if it
expires.

Do not alert for its expiration.

Co-authored-by: Leonardo Taccari <leonardo@faire.ai>
2023-11-29 18:03:10 +01:00
k8s-infra-cherrypick-robot
7764e00ab4
Comment NGINXCertificateExpiry alert label matcher (#10692)
If a valid certificate is passed via `--default-ssl-certificate` it is
probably desiderable that we check its expiration!

Add a comment to explain that.

Co-authored-by: Leonardo Taccari <leonardo@faire.ai>
2023-11-29 18:00:46 +01:00
k8s-infra-cherrypick-robot
cd59304e25
chart: allow setting allocateLoadBalancerNodePorts (#10693)
Signed-off-by: Philipp Born <git@pborn.eu>
Co-authored-by: Philipp Born <git@pborn.eu>
2023-11-29 17:58:09 +01:00
k8s-infra-cherrypick-robot
0392e38a74
[release-1.9] feat(helm): add documentation about metric args (#10695)
* feat(helm): add documentation about metric args

This helps documenting this issue:
https://github.com/kubernetes/ingress-nginx/issues/8233

and relates to this documentation:
https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/monitoring.md#histogram-buckets

* fix

---------

Co-authored-by: Pierre Ozoux <pierre@ozoux.net>
2023-11-29 17:55:40 +01:00