Commit graph

7263 commits

Author SHA1 Message Date
James Strong
68901bcec1
Merge pull request #10699 from k8s-infra-cherrypick-robot/cherry-pick-10539-to-release-1.9
[release-1.9] helm feat: add namespace overrides
2023-11-29 14:35:00 -05:00
Matt Clegg
32cdec4cb9 DOCS Remove support for running Both 2023-11-29 19:33:05 +00:00
jasine
bf5d30922f fix: set max length and trim last "-" 2023-11-29 19:22:46 +00:00
jasine
d9aac9e35f fix: description in value 2023-11-29 19:22:46 +00:00
jasine
e6f07254fb fix: readme description 2023-11-29 19:22:46 +00:00
jasine
e4ebc3de57 add value in readme 2023-11-29 19:22:46 +00:00
jasine
8c8577cafc feat: add namespace overrides 2023-11-29 19:22:46 +00:00
James Strong
bc2bc3d037
Merge pull request #10696 from k8s-infra-cherrypick-robot/cherry-pick-10663-to-release-1.9
[release-1.9] Fix typo in yaml
2023-11-29 13:40:45 -05:00
k8s-infra-cherrypick-robot
aa3609046b
Ignore fake certificate for NGINXCertificateExpiry (#10694)
The fake certificate is only a fallback and it is okay-ish if it
expires.

Do not alert for its expiration.

Co-authored-by: Leonardo Taccari <leonardo@faire.ai>
2023-11-29 18:03:10 +01:00
k8s-infra-cherrypick-robot
7764e00ab4
Comment NGINXCertificateExpiry alert label matcher (#10692)
If a valid certificate is passed via `--default-ssl-certificate` it is
probably desiderable that we check its expiration!

Add a comment to explain that.

Co-authored-by: Leonardo Taccari <leonardo@faire.ai>
2023-11-29 18:00:46 +01:00
k8s-infra-cherrypick-robot
cd59304e25
chart: allow setting allocateLoadBalancerNodePorts (#10693)
Signed-off-by: Philipp Born <git@pborn.eu>
Co-authored-by: Philipp Born <git@pborn.eu>
2023-11-29 17:58:09 +01:00
k8s-infra-cherrypick-robot
0392e38a74
[release-1.9] feat(helm): add documentation about metric args (#10695)
* feat(helm): add documentation about metric args

This helps documenting this issue:
https://github.com/kubernetes/ingress-nginx/issues/8233

and relates to this documentation:
https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/monitoring.md#histogram-buckets

* fix

---------

Co-authored-by: Pierre Ozoux <pierre@ozoux.net>
2023-11-29 17:55:40 +01:00
k8s-infra-cherrypick-robot
c61bcf35e7
chore(dep): change lua-resty-cookie's repo (#10691)
since cloudflare has archived the upstream repo,
we choose a more active forked repo to use.

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-11-29 17:53:12 +01:00
Ana Claudia Riekstin
b23926b930 Add missing dash
Add missing dash
2023-11-29 15:56:10 +00:00
k8s-infra-cherrypick-robot
63af10b419
annotation validation - extended URLWithNginxVariableRegex from alphaNumericChars to extendedAlphaNumeric (#10656)
Co-authored-by: Filip Havlíček <filip.havlicek@livesport.eu>
2023-11-15 19:03:47 +01:00
k8s-infra-cherrypick-robot
8bd6acd597
fix: adjust unfulfillable validation check for session-cookie-samesite annotation (#10604)
Co-authored-by: Simon Wessel <9195792+simon-wessel@users.noreply.github.com>
2023-11-02 21:04:45 +01:00
k8s-infra-cherrypick-robot
967d5a6f76
fix: Validate x-forwarded-prefix annotation with RegexPathWithCapture (#10603)
Co-authored-by: Matt Dainty <matt@bodgit-n-scarper.com>
2023-11-02 08:58:44 +01:00
k8s-infra-cherrypick-robot
6f12689e65
Increase HSTS max-age to default to one year (#10580)
Co-authored-by: Michael Dreher <migg@migg.net>
2023-11-01 13:33:12 +01:00
Ricardo Katz
846d251814
Cherry pick fcgi fix and release v1.9.4 (#10544)
* Fix fcgi configmap value parsing (#10528)

* Tidy on cherrypick

* Release v1.9.4
2023-10-22 23:10:38 +02:00
Ricardo Katz
be93503b57
Bump x/net (#10517) 2023-10-12 14:40:07 +02:00
Ricardo Katz
4cbdbfae2e
Release v1.9.2 (#10511) 2023-10-11 23:10:48 -03:00
k8s-infra-cherrypick-robot
ee82a126e3
[release-1.9] update nginx base, httpbun, e2e, helm webhook cert gen (#10507)
* update nginx base, httpbun, e2e, helm webhook cert gen

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix helm docs

Signed-off-by: James Strong <strong.james.e@gmail.com>

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2023-10-12 01:02:59 +02:00
k8s-infra-cherrypick-robot
ed85ea100b
[release-1.9] add upstream patch for CVE-2023-44487 (#10499)
* add upstream patch

* add source

* remove auto-added depend

---------

Co-authored-by: Mark Dalton Gray <markdaltongray@gmail.com>
2023-10-11 10:16:56 +02:00
k8s-infra-cherrypick-robot
8ac7f23171
fix brotli build issues (#10468)
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2023-10-01 14:02:44 -07:00
k8s-infra-cherrypick-robot
4f07ab1add
upgrade owasp modsecurity core rule set to v3.3.5 (#10437)
Co-authored-by: Rashad Mammadli <mammadli.reshad@gmail.com>
2023-10-01 11:12:44 -07:00
Ricardo Katz
3538107c07
Start v1.9.1 release (#10463) 2023-09-29 20:07:57 -07:00
k8s-infra-cherrypick-robot
5952fc3dba
Accept backend protocol on any case (#10461)
Co-authored-by: Ricardo Katz <ricardo.katz@gmail.com>
2023-09-28 19:30:41 -07:00
k8s-infra-cherrypick-robot
da6a0f2c00
Chart: Rework network policies. (#10438)
Co-authored-by: Marco Ebert <marco@giantswarm.io>
2023-09-28 10:14:34 -07:00
k8s-infra-cherrypick-robot
7745d00bdc
Bump google.golang.org/grpc from 1.58.0 to 1.58.1 (#10436)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.0 to 1.58.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.0...v1.58.1)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-23 15:20:56 -07:00
James Strong
4bd3d6b8a0
release 1.9.0
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-09-19 10:13:18 -04:00
k8s-infra-cherrypick-robot
b3992ab560
Rework mage (#10418)
Co-authored-by: Ricardo Katz <rkatz@vmware.com>
2023-09-17 19:22:30 -07:00
Ricardo Katz
940e6ac8ca
Start release of v1.9.0 beta0 (#10407) 2023-09-11 11:28:14 -07:00
dependabot[bot]
300cff1437
Bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.12.0 (#10355)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.9.5 to 2.12.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.9.5...v2.12.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 09:56:11 -07:00
Ricardo Katz
c7c5407efb
Update k8s versions on CI (#10406) 2023-09-11 08:36:11 -07:00
dependabot[bot]
14b8979d5a
Bump golang.org/x/crypto from 0.12.0 to 0.13.0 (#10399)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.12.0 to 0.13.0.
- [Commits](https://github.com/golang/crypto/compare/v0.12.0...v0.13.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 06:50:13 -07:00
Chen Chen
d96b3f0082
Add a flag to enable or disable aio_write (#10394)
* Add a flag to enable or disable aio_write

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix e2e test for aio_write

Signed-off-by: z1cheng <imchench@gmail.com>

* Remove redundant spaces to fix the 2e test

Signed-off-by: z1cheng <imchench@gmail.com>

---------

Signed-off-by: z1cheng <imchench@gmail.com>
2023-09-11 05:56:12 -07:00
dependabot[bot]
ac2923bf44
Bump actions/setup-go from 4.0.1 to 4.1.0 (#10403)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4.0.1...93397bea11091df50f3d7e59dc26a7711a8bcfbe)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 05:52:12 -07:00
dependabot[bot]
06a0aa3b6e
Bump goreleaser/goreleaser-action from 4.4.0 to 4.6.0 (#10402)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.4.0 to 4.6.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](3fa32b8bb5...5fdedb94ab)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 05:50:14 -07:00
Mathieu Benoit
1bb8a9bba0
Update external-articles.md - advanced setup with GKE/Cloud Armor/IAP (#10372)
* Update external-articles.md

* Update external-articles.md - article publicly available
2023-09-11 05:48:11 -07:00
dependabot[bot]
5be7302b51
Bump actions/upload-artifact from 3.1.2 to 3.1.3 (#10404)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](0b7f8abb15...a8a3f3ad30)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 05:44:11 -07:00
dependabot[bot]
082266e7a2
Bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 (#10400)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](639cd343e1...3a91952989)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 05:42:11 -07:00
dependabot[bot]
2bbf7b19cb
Bump google.golang.org/grpc from 1.57.0 to 1.58.0 (#10398)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.57.0 to 1.58.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.57.0...v1.58.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 05:40:11 -07:00
dependabot[bot]
adfb27af8d
Bump actions/dependency-review-action from 3.0.8 to 3.1.0 (#10401)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.0.8 to 3.1.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](f6fff72a32...6c5ccdad46)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 05:00:11 -07:00
Chen Chen
3d69d9a88b
Fix e2e test suite doc (#10396)
* Fix e2e test suite doc

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix doc script and regenerate

Signed-off-by: z1cheng <imchench@gmail.com>

* Add skip files to the script and regenerate

Signed-off-by: z1cheng <imchench@gmail.com>

---------

Signed-off-by: z1cheng <imchench@gmail.com>
2023-09-11 01:24:11 -07:00
Ricardo Katz
cf889c6c47
Disable user snippets per default (#10393)
* Disable user snippets per default

* Enable snippet on tests
2023-09-10 20:02:10 -07:00
Marco Ebert
2d03da6334
Deployment/DaemonSet: Fix templating & value. (#10240) 2023-09-10 07:20:09 -07:00
Chen Chen
93e006c2ce
Fix deferInLoop error (#10387)
Signed-off-by: z1cheng <imchench@gmail.com>
2023-09-10 06:48:10 -07:00
Chen Chen
fb7f92a7d5
Remove gofmt (#10385)
Signed-off-by: z1cheng <imchench@gmail.com>
2023-09-10 05:46:09 -07:00
Marco Ebert
4869c8b462
Deployment/DaemonSet: Template topologySpreadConstraints. (#10259) 2023-09-10 05:38:10 -07:00
James Strong
da9c5730f6
release notes 1.8.2 (#10389)
* release notes 1.8.2

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix yaml error

Signed-off-by: James Strong <strong.james.e@gmail.com>

* supdate docs

* Rolling back to v1.21.1

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2023-09-09 08:44:09 -07:00