Commit graph

7623 commits

Author SHA1 Message Date
dependabot[bot]
4212af3143
Bump github.com/prometheus/common from 0.54.0 to 0.55.0 (#11522)
* Bump github.com/prometheus/common from 0.54.0 to 0.55.0

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.54.0 to 0.55.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)
- [Commits](https://github.com/prometheus/common/compare/v0.54.0...v0.55.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Go: Fix build.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-16 06:07:00 -07:00
Christian
6de184668c
remove modsecurity coreruleset test files from nginx image (#11617) 2024-07-16 06:00:59 -07:00
James Strong
a6727d81e7
unskip the ocsp tests and update images to fix cfssl bug (#11606)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-16 00:01:10 -07:00
dependabot[bot]
125ffd47b1
Bump the all group with 5 updates (#11611)
Bumps the all group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go) | `5.0.1` | `5.0.2` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.1.0` | `5.1.1` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.3.3` | `4.3.4` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.25.11` | `3.25.12` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.23.0` | `0.24.0` |


Updates `actions/setup-go` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](cdcb360436...0a12ed9d6a)

Updates `actions/setup-python` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](82c7e631bb...39cd14951b)

Updates `actions/dependency-review-action` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](72eb03d02c...5a2ce3f5b9)

Updates `github/codeql-action` from 3.25.11 to 3.25.12
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b611370bb5...4fa2a79536)

Updates `aquasecurity/trivy-action` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](7c2007bcb5...6e7b7d1fd3)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 07:39:11 -07:00
apiwat-chantawibul
60bb8b351c
Fix indent in YAML for example pod (#11598) 2024-07-12 00:47:03 -07:00
Marco Ebert
cee3fb3b13
Images: Bump test-runner. (#11600) 2024-07-11 06:44:55 -07:00
Marco Ebert
a86ddb5f03
Images: Bump NGINX_BASE to v0.0.9. (#11599) 2024-07-11 05:59:05 -07:00
James Strong
90fa3b9823
revert module upgrade (#11594)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-10 16:30:30 -07:00
Marco Ebert
988ebd9a0f
README: Fix support matrix. (#11586) 2024-07-09 16:34:47 -07:00
Marco Ebert
cb2cdde10e
Repository: Add changelogs from release-v1.10. (#11587) 2024-07-09 00:32:49 -07:00
James Strong
52c50467d6
Merge pull request #11585 from strongjz/release-1.11.0
Release Notes 1.11.0 and chart 4.11.0
2024-07-08 15:29:48 -04:00
James Strong
b6fa279c0c Release Notes 1.11.0 and chart 4.11.0
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-08 14:28:53 -04:00
Marco Ebert
e564e831c5
Images: Bump kube-webhook-certgen. (#11578) 2024-07-08 11:10:59 -07:00
James Strong
886956e572
Merge pull request #11567 from Gacko/guurz
Mage: Stop mutating release notes.
2024-07-08 14:04:29 -04:00
dependabot[bot]
76172046d3
Bump golang.org/x/crypto from 0.24.0 to 0.25.0 (#11572)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.24.0 to 0.25.0.
- [Commits](https://github.com/golang/crypto/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-08 06:56:22 -07:00
Marco Ebert
2d67ec2935 Mage: Stop mutating release notes. 2024-07-08 14:02:41 +02:00
Marco Ebert
dbe499437e Mage: Implement static check recommendations. 2024-07-08 14:02:41 +02:00
dependabot[bot]
c6a481763e
Bump google.golang.org/grpc from 1.64.0 to 1.65.0 (#11571)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.64.0 to 1.65.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.64.0...v1.65.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-08 04:56:22 -07:00
dependabot[bot]
1dfb73a0df
Bump the all group with 4 updates (#11570)
Bumps the all group with 4 updates: [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `docker/setup-qemu-action` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](68827325e0...5927c834f5)

Updates `docker/setup-buildx-action` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](d70bba72b1...4fd812986e)

Updates `actions/upload-artifact` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](65462800fd...0b2256b8c0)

Updates `actions/download-artifact` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](65a9edc588...fa0a91b85d)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-08 04:54:11 -07:00
James Strong
973c1c92fb
Merge pull request #11526 from strongjz/k8s-1.30
add k8s 1.30 to ci build
2024-07-03 17:54:39 -04:00
James Strong
60ea35c447
update test runner to latest build (#11547)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-03 14:19:14 -07:00
James Strong
e434652fe3
Update .github/workflows/ci.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-03 14:32:49 -04:00
James Strong
195ce186ad
Merge pull request #11546 from strongjz/test-image-v0.0.4
update test runner go base to 3.20
2024-07-03 14:07:37 -04:00
James Strong
84b8270bd6 update test runner go base to 3.20
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-03 14:05:23 -04:00
James Strong
74a1046ead
Merge pull request #11545 from strongjz/test-image-v0.0.4
tag new test runner image with new nginx base 0.0.8
2024-07-03 14:02:28 -04:00
James Strong
21d6a773d1 tag new test runner image with new nginx base 0.0.8
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-03 13:59:01 -04:00
James Strong
351574aed6
Merge pull request #11540 from tao12345666333/nginx-125-v0.0.8-build
bump NGINX_BASE to v0.0.8
2024-07-03 13:25:28 -04:00
James Strong
809142c89c correct the 1.30 version
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-03 12:04:16 -04:00
James Strong
42394cadd6
Merge branch 'kubernetes:main' into k8s-1.30 2024-07-03 11:22:26 -04:00
Jintao Zhang
d34ed895cb
bump NGINX_BASE to v0.0.8
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2024-07-03 01:18:34 +08:00
Jintao Zhang
b90dd919e0
trigger build for NGINX-1.25 v0.0.8 (#11533)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2024-07-02 09:02:00 -07:00
Olivier Wenger
773590f791
bump alpine version to 3.20 to custom-error-pages (#11530) 2024-07-02 08:47:59 -07:00
Jon Carl
7de28cfcdb
add ssl patches to nginx-1.25 image for coroutines to work in lua client hello and cert ssl blocks (#11485)
* feat: add ssl patches for coroutines to work in lua ssl blocks

Signed-off-by: Jon Carl <grounded042@joncarl.com>

* switch to include more patches

Signed-off-by: Jon Carl <grounded042@joncarl.com>

---------

Signed-off-by: Jon Carl <grounded042@joncarl.com>
2024-07-02 06:25:59 -07:00
wdullaer
bcb98c0c8d
fix: Ensure changes in MatchCN annotation are detected (#11173) 2024-07-01 13:48:24 -07:00
James Strong
5957cfb112 force all ci to run on workflow dispatch
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-01 11:37:55 -04:00
James Strong
607130912b add k8s 1.30 to ci build
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-01 11:24:18 -04:00
Stepan Paksashvili
6a111a974b
Docs: Add information about HTTP/3 support. (#11513)
* [docs] update README to add information about HTTP/3 support

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

* Apply suggestions from code review

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* Apply suggestions from code review

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* [docs] update README

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

---------

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-01 13:51:02 +02:00
dependabot[bot]
891f1f5067
Bump the all group with 2 updates (#11523)
Bumps the all group with 2 updates: [actions/add-to-project](https://github.com/actions/add-to-project) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/add-to-project` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](9bfe908f2e...244f685bbc)

Updates `github/codeql-action` from 3.25.10 to 3.25.11
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](23acc5c183...b611370bb5)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-01 03:37:18 -07:00
dependabot[bot]
f8b66b45eb
Bump k8s.io/klog/v2 from 2.130.0 to 2.130.1 in the all group (#11499)
Bumps the all group with 1 update: [k8s.io/klog/v2](https://github.com/kubernetes/klog).


Updates `k8s.io/klog/v2` from 2.130.0 to 2.130.1
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes/klog/compare/v2.130.0...v2.130.1)

---
updated-dependencies:
- dependency-name: k8s.io/klog/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-01 12:12:58 +02:00
kiblik
f0787c3027
Docs: Specify ingressClass for multi-controller setup. (#11493) 2024-07-01 11:11:46 +02:00
Marco
0abc9eaff1
Docs: Improve default certificate usage. (#11504) 2024-07-01 11:09:09 +02:00
JesseBot
6087e04cb1
Upgrade OWASP_MODSECURITY_CRS_VERSION 3.3.5 to 4.4.0 and update docs (#11511)
Signed-off-by: jessebot <jessebot@linux.com>
2024-07-01 11:05:15 +02:00
dependabot[bot]
f228895130
Bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 in the all group (#11497)
Bumps the all group with 1 update: [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action).


Updates `aquasecurity/trivy-action` from 0.22.0 to 0.23.0
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](595be6a0f6...7c2007bcb5)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-24 06:34:58 -07:00
Adzin Zhalifunnas
8691884033
docs: Update Ingress-NGINX v1.10.1 compatibility with Kubernetes v1.30 (#11495) 2024-06-24 06:32:58 -07:00
g1franc
5784be2784
Update getting-started.md with new prerequisites (#11486) 2024-06-19 02:20:42 -07:00
Stepan Paksashvili
44849cb302
[feature] bump nginx to 1.25.5 and add http3 module (#11470)
* [feature] bump nginx to 1.25.5, add http3 module, and update lua-stream, lua_ngx, mimaloc, opentelemetry_cpp, opentelemetry_proto and opentelemtry_contrib

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

* [feature] revert opentelemetry and owasp updates

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

---------

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
2024-06-18 12:29:37 -07:00
Yoofi Quansah
e3750b78de
Fix boolean configuration (#11483)
* chore: fix booleans to all have quotes around their values

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>

* Revert "chore: fix booleans to all have quotes around their values"

This reverts commit 7d91e4d9ed.

* chore: fix default values for boolean configuration

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>

---------

Signed-off-by: Yoofi Quansah <ybquansah@gmail.com>
2024-06-18 09:38:39 -07:00
Marco Ebert
e084ad0a5e
Chores: Align security contacts & chart maintainers to actual owners. (#11465) 2024-06-17 05:25:38 -07:00
dependabot[bot]
5ac6f77503
Bump k8s.io/klog/v2 from 2.120.1 to 2.130.0 (#11475)
Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.120.1 to 2.130.0.
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes/klog/compare/v2.120.1...v2.130.0)

---
updated-dependencies:
- dependency-name: k8s.io/klog/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-17 05:21:08 -07:00
dependabot[bot]
6bb19ea698
Bump the all group with 3 updates (#11474)
Bumps the all group with 3 updates: [github.com/opencontainers/runc](https://github.com/opencontainers/runc), [github.com/spf13/cobra](https://github.com/spf13/cobra) and [k8s.io/component-base](https://github.com/kubernetes/component-base).


Updates `github.com/opencontainers/runc` from 1.1.12 to 1.1.13
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.12...v1.1.13)

Updates `github.com/spf13/cobra` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.8.0...v1.8.1)

Updates `k8s.io/component-base` from 0.30.1 to 0.30.2
- [Commits](https://github.com/kubernetes/component-base/compare/v0.30.1...v0.30.2)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-17 04:19:52 -07:00