Commit graph

6221 commits

Author SHA1 Message Date
besha100
48c0742d3c
Fixed modsecurity default file only if Modsecurity snippet present
Fixed if condition  Modsecurity snippet present have modsecurity default config file
2021-12-09 10:45:46 +01:00
besha100
bcda35ef6b
Remove unnecessary comments
Only have the default Modsecurity conf settings in case Modsecurity configuration snippet is not present and remove unnecessary comments
2021-12-08 23:28:01 +01:00
besha100
f9b6e70d01
Disabled default modsecurity_rules_file if modsecurity-snippet is specifed
The default modsecurity_rules_file overwrites the ModSecurity-snippet if it is specified with custom config settings like "SecRuleEngine On". This will not let Modsecurity be in blocking mode even if "SecRuleEngine On" is specified in the ModSecurity-snippet configuration
2021-12-08 13:45:58 +01:00
Alex Sears
84db822a94
Add newline indenting to admission webhook annotations (#8015)
Signed-off-by: Alex Sears <me@alexsears.com>
2021-12-07 11:26:37 -08:00
Yecheng Fu
5cff197bc5
add canary-weight-total annotation (#6338) 2021-12-07 08:40:00 -08:00
Ana Claudia Riekstin
6163231ef6
fix to really execute plugins in order (#8018) 2021-12-07 08:01:02 -08:00
Jennifer Kirsch
3f9d443b1e
Add link to example error page manifest (#8014)
Without this change it was a bit difficult to find the manifest so users might not know that there is one.
2021-12-06 12:01:33 -08:00
Daniel Sim
f7a5704be8
Add relabelings in controller-servicemonitor.yaml (#8008)
* Add relabelings above metricRelabelings in controller-servicemonitor.yaml

* Bump chart version to 4.0.13, Add to CHANGELOG

* Rename PR/CHANGELOG
2021-12-06 05:50:32 -08:00
Jedidiah Park
2b499d9c86
Fix spelling in documentation and top-level files (#8009)
* fix typos in docs

* fix typos in top-level files
2021-12-06 05:46:33 -08:00
Jérôme Petazzoni
bc4c86a791
Minor improvements (formatting, consistency) in install guide (#8003)
Small changes, mostly:
- formatting (especially in lists, since mkdocs doesn't seem
  to support nested lists)
- use the same level of warning when it makes sense
  (intead of "danger", "failure", etc)
- improve wording in a few places
- re-order a few operations
- move a few sentences that were out of place
2021-12-03 20:28:31 -08:00
Jintao Zhang
e621c6e973
fix: go-grpc Dockerfile (#8001)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2021-11-30 17:35:18 -08:00
Ansil H
a03895d91e
Add ssl_reject_handshake to defaul server (#7977)
* Add ssl_reject_handshake to defaul server

* Added SSLRejectHandshake to NewDefault

* Added documentation
2021-11-29 08:33:23 -08:00
Alex Co
ea1099abc9
allow set annotations for admission Jobs (#7979)
* allow set annotations for admission Jobs

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Bump chart version & update CHANGELOG

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Bump chart version again

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Add example

Signed-off-by: Alex Co <tuanclq@gmail.com>
2021-11-29 03:33:22 -08:00
Masa
27037a1919
Fix command in index.md (#7935)
* Fix command in index.md

* Fix command in index.md

* Update index.md
2021-11-28 18:39:22 -08:00
Kamil Hristov
042e426b01
Improve admission e2e-tests (#7953)
Check if the message equals an expected value for checks without errors.
2021-11-28 18:33:22 -08:00
Reinhard Nägele
e9c297e74d
Fix names in documentation (#7940)
* Fix names in documentation

This fixes the documentation to reflect the name change from
`nginx-ingress` to `ingress-nginx`.

Signed-off-by: Reinhard Nägele <unguiculus@gmail.com>

* Revert accidental changelog update

Signed-off-by: Reinhard Nägele <unguiculus@gmail.com>
2021-11-28 13:11:22 -08:00
TJ Saunders
b615a6808d
Fix a couple of misspellings in the annotations documentation. (#7983) 2021-11-27 16:31:21 -08:00
Anton Holovin
5a5bff1fb9
Making Kube service appProtocol field optional (#7873) 2021-11-26 02:36:52 -08:00
James Strong
cabc6ec144
Merge pull request #7975 from kubernetes/strongjz-patch-3
add legacy version update v0.50.0 to main changelog
2021-11-24 15:28:57 -05:00
James Strong
51bc8725a4
add legacy version update v0.50.0
add legacy version update v0.50.0
2021-11-24 15:27:56 -05:00
Kundan Kumar
77a63c6855
updated service upstream definition (#7972) 2021-11-24 10:20:21 -08:00
Yang Li
0122aba44d
admission: improved log messages for ingress name (#7944) 2021-11-23 15:35:45 -08:00
Sven Schliesing
dbf3689c5e
add documentation for "force-ssl-redirect" (#7957)
See #4628
2021-11-23 15:27:45 -08:00
James Strong
843a16a8f8
Release updates for v1.1.0 (#7964) 2021-11-23 15:07:46 -08:00
James Strong
cacbee86b6
Merge pull request #7962 from kubernetes/strongjz-patch-2
Start Release process for v1.1.0
2021-11-23 16:31:12 -05:00
Ricardo Katz
c0814c6f78
Change sanitization message from error to warning (#7963)
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-11-23 18:25:20 -03:00
James Strong
46e044af07
Start Release process for v1.1.0
Start Release process for v1.1.0
2021-11-23 16:11:43 -05:00
James Strong
d4a6ade65f
update default block list,docs, tests (#7942)
* update default block list,docs, tests

* fix config for admin test

* gofmt

* remove the err return
2021-11-23 09:06:17 -08:00
Steve Griffith
e57d2f63fa
applied allowPrivilegeEscalation=false (#7948) 2021-11-20 12:52:59 -08:00
Muhammad Hamza Zaib
30c0d2260d
[Helm] Add labels to resources (#6992)
* Add labels to RBAC resources

* Add labels to all resources

* Fix labels indentaton in patch jobs

* Add controller and default backend labels to pods

Signed-off-by: Muhammad Hamza Zaib <hamzazaib3202@gmail.com>

* Bump chart version and update changelog

Signed-off-by: Muhammad Hamza Zaib <hamzazaib3202@gmail.com>
2021-11-19 06:52:52 -08:00
James Strong
8c722557f0
update build for darwin arm64 (#7941) 2021-11-17 15:49:05 -08:00
Ted
0545986293
update doc for patched status (#7930)
the BASE_IMAGE `k8s.gcr.io/ingress-nginx/nginx:v20210915-g498892514@sha256:8c1e48123e64e3f2b90ed32a53babd9b5f5431dad26beecdcb8fc185ded3b6dd` was alreday patched
2021-11-17 13:41:58 -08:00
Ricardo Katz
8e210b21e2
Force helm v4.0.8 release (#7928) 2021-11-16 09:43:27 -03:00
Ricardo Katz
727f4cb925
Release v1.0.5 documents (#7924)
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-11-15 17:11:26 -08:00
Ricardo Katz
7ce96cbcf6
Prepare for v1.0.5 release (#7923)
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-11-15 20:51:50 -03:00
Ricardo Katz
15567b07c0
Trim spaces from badword items (#7921) 2021-11-15 20:37:29 -03:00
Nithya
7d17ff35fa
helm chart: choice option for internal/external loadbalancer type service (#7806) 2021-11-15 15:13:52 -08:00
Ricardo Katz
b08d4278ad
Try to improve test speed (#7922) 2021-11-15 14:34:48 -08:00
Robert Steele
b7ac27a671
Update Bare Metal anchor link (#7914) 2021-11-15 13:58:48 -08:00
dependabot[bot]
b2f1357638
Bump sigs.k8s.io/controller-runtime from 0.9.5 to 0.10.3 (#7917)
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.9.5 to 0.10.3.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.9.5...v0.10.3)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-15 13:56:48 -08:00
Adam Graves
6299c39842
Allow setting of container securityContext (#7533)
Currently this blocks deployments on clusters with global PodSecurityPolicies set

Signed-off-by: Adam Graves <adam.graves85@gmail.com>
2021-11-15 13:54:49 -08:00
Mac Chaffee
3c08f002f9
Rewrite multiple-ingress.md to work with v1 (#7608)
* Rewrite multiple-ingress.md to work with v1

* Fix --controller-class flag docs
2021-11-15 12:20:49 -08:00
agile6v
ab4fa42467
fix compling kubectl-ingress_nginx error and add some descriptions for build command. (#7903) 2021-11-12 11:46:35 -08:00
zryfish
7203a0b8bd
support watch namespaces matched namespace selector (#7472)
skip caching namespaces at cluster scope if only watching single namespace

add --watch-namespace-selector in user guide

add e2e test
2021-11-12 11:46:28 -08:00
Ricardo Katz
67e13bf692
Add option to sanitize annotation inputs (#7874)
* Add option to sanitize annotation inputs

* Fix e2e tests after string sanitization

* Add proxy_pass and serviceaccount as denied values
2021-11-12 11:40:30 -08:00
James Strong
8333c8c127
update docs with a warning about cert chain order (#7908) 2021-11-12 11:34:29 -08:00
Christopher Larivière
100057d0c5
fix missing \- in regex expression for CORS wildcard domain (#7904) 2021-11-11 10:26:08 -08:00
sandipanpanda
af232df1af
Update anchor links of Nodeport from #nodeport to #type-nodeport (#7899)
* Update anchor link from #nodeport to #type-nodeport in baremetal.md

* Update anchor link from #nodeport to #type-nodeport in baremetal.md
2021-11-11 09:42:09 -08:00
Gerald Pape
017e1ecde3
Fix Ingress resources in docs (#7579)
* fix Ingress resources in docs

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* move to ingressClassName

* fix more Ingress resource examples

* empty commit

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* make NOTES.txt aware of version + add notice about ingress version to examples main page

* add link to legacy documentation

Signed-off-by: Gerald Pape <gerald@giantswarm.io>
2021-11-09 07:43:49 -08:00
James Strong
b7b2714b69
Update proxy-set-header example (#7898)
The Example was directed to the repo markdown and not the site. 

/kind documentation
2021-11-08 22:15:39 -08:00