Commit graph

6236 commits

Author SHA1 Message Date
Ricardo Katz
5cbdc2276e Trim spaces from badword items (#7921) 2021-11-15 20:37:29 -03:00
Nithya
aadcf2814e helm chart: choice option for internal/external loadbalancer type service (#7806) 2021-11-15 15:13:52 -08:00
Ricardo Katz
b5c092d3c7 Try to improve test speed (#7922) 2021-11-15 14:34:48 -08:00
Robert Steele
fd3217d273 Update Bare Metal anchor link (#7914) 2021-11-15 13:58:48 -08:00
dependabot[bot]
50afceabbc Bump sigs.k8s.io/controller-runtime from 0.9.5 to 0.10.3 (#7917)
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.9.5 to 0.10.3.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.9.5...v0.10.3)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-15 13:56:48 -08:00
Adam Graves
1e440cb004 Allow setting of container securityContext (#7533)
Currently this blocks deployments on clusters with global PodSecurityPolicies set

Signed-off-by: Adam Graves <adam.graves85@gmail.com>
2021-11-15 13:54:49 -08:00
Mac Chaffee
53ce25888a Rewrite multiple-ingress.md to work with v1 (#7608)
* Rewrite multiple-ingress.md to work with v1

* Fix --controller-class flag docs
2021-11-15 12:20:49 -08:00
agile6v
3c651cac69 fix compling kubectl-ingress_nginx error and add some descriptions for build command. (#7903) 2021-11-12 11:46:35 -08:00
zryfish
1e1adefee9 support watch namespaces matched namespace selector (#7472)
skip caching namespaces at cluster scope if only watching single namespace

add --watch-namespace-selector in user guide

add e2e test
2021-11-12 11:46:28 -08:00
Ricardo Katz
bc9f0e9017 Add option to sanitize annotation inputs (#7874)
* Add option to sanitize annotation inputs

* Fix e2e tests after string sanitization

* Add proxy_pass and serviceaccount as denied values
2021-11-12 11:40:30 -08:00
James Strong
b136571073 update docs with a warning about cert chain order (#7908) 2021-11-12 11:34:29 -08:00
Christopher Larivière
c3ed2eff97 fix missing \- in regex expression for CORS wildcard domain (#7904) 2021-11-11 10:26:08 -08:00
sandipanpanda
07aa6445b2 Update anchor links of Nodeport from #nodeport to #type-nodeport (#7899)
* Update anchor link from #nodeport to #type-nodeport in baremetal.md

* Update anchor link from #nodeport to #type-nodeport in baremetal.md
2021-11-11 09:42:09 -08:00
Gerald Pape
b10b78ebdb Fix Ingress resources in docs (#7579)
* fix Ingress resources in docs

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* move to ingressClassName

* fix more Ingress resource examples

* empty commit

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* make NOTES.txt aware of version + add notice about ingress version to examples main page

* add link to legacy documentation

Signed-off-by: Gerald Pape <gerald@giantswarm.io>
2021-11-09 07:43:49 -08:00
James Strong
126bdc9dee Update proxy-set-header example (#7898)
The Example was directed to the repo markdown and not the site. 

/kind documentation
2021-11-08 22:15:39 -08:00
Jennifer
19109ea0ba Remove double spacing (#7830) 2021-11-05 13:54:40 -07:00
Jérôme Petazzoni
5786f4909d Try to improve the installation guide (#7757)
* move generic instructions to the beginning of the file
* add an example of ingress resource creation
* simplify a few commands to make them shorter and simpler
* add short paragraphs about PROXY protocol and traffic policy

This tries to address the concerns I expressed in #7701.
2021-11-05 13:50:40 -07:00
Sablu Miah
c43dc401d8 Fix Formatting/Typo (#7894)
Quick simple typo/formatting fix to keep consistency with direct sections below
2021-11-05 13:34:41 -07:00
Long Wu Yuan
f2eb9477da changed text and added command (#7889) 2021-11-05 06:41:53 -07:00
Hu Shuai
5ee038e028 Fix typos in ISSUE_TRIAGE.md (#7863)
Signed-off-by: Hu Shuai <hus.fnst@cn.fujitsu.com>
2021-11-04 04:52:03 -07:00
Christopher Larivière
13bf6657f8 Support cors-allow-origin with multiple origins (#7614)
* Add Initial support for multiple cors origins in nginx

- bump cluster version for `make dev-env`
- add buildOriginRegex function in nginx.tmpl
- add e2e 4 e2e tests for cors.go
- refers to feature request #5496

* add tests + use search to identify '*' origin

* add tests + use search to identify '*' origin

Signed-off-by: Christopher Larivière <lariviere.c@gmail.com>

* fix "should enable cors test" looking at improper values

* Modify tests and add some logic for origin validation

- add origin validation in cors ingress annotations
- add extra tests to validate regex
- properly escape regex using "QuoteMeta"
- fix some copy/paste errors

* add TrimSpace and length validation before adding a new origin

* modify documentation for cors and remove dangling comment

* add support for optional port mapping on origin

* support single-level wildcard subdomains + tests

* Remove automatic `*` fonctionality from incorrect origins

- use []string instead of basic string to avoid reparsing in template.go
- fix typo in docs
- modify template to properly enable only if the whole block is enabled
- modify cors parsing
- test properly by validating that the value returned is the proper
  origin
- update unit tests and annotation tests

* Re-add `*` when no cors origins are supplied + fix tests

- fix e2e tests to allow for `*`
- re-add `*` to cors parsing if trimmed cors-allow-origin is empty
(supplied but empty) and if it wasn't supplied at all.

* remove unecessary logic for building cors origin + remove comments

- add some edge cases in e2e tests
- rework logic for building cors origin

there was no need for logic in template.go for buildCorsOriginRegex
if there is a `*` it ill be short-circuited by first if.

if it's a wildcard domain or any domain (without a wildcard), it MUST
match the main/cors.go regex format.

if there's a star in a wildcard domain, it must be replaced with
`[A-Za-z0-9]+`

* add missing check in e2e tests
2021-11-02 12:31:42 -07:00
FBLGit
ab20153e4c feature: added AdmissionController metrics (#7711)
* feature: added AdmissionController metrics

* fix: flag control on admissionCollector

* fix: admission collector disclaimer year and linting
2021-11-02 10:54:34 -07:00
zhengtianbao
45ed9a874b remove build-plugin extra quote (#7870) 2021-11-02 10:46:59 -07:00
Rahil Patel
603f4eb6b0 add brotli-min-length configuration option (#7854)
* add `brotli-min-length` configuration option

* add e2e tests for brotli

* include check for expected content type

* fix header and format
2021-11-02 04:52:59 -07:00
counter2015
99c6d347c5 fix ingress syntax. (#7867) 2021-11-01 17:12:58 -07:00
dependabot[bot]
3b2a22b065 Bump github.com/ncabatoff/process-exporter from 0.7.5 to 0.7.9 (#7865)
Bumps [github.com/ncabatoff/process-exporter](https://github.com/ncabatoff/process-exporter) from 0.7.5 to 0.7.9.
- [Release notes](https://github.com/ncabatoff/process-exporter/releases)
- [Changelog](https://github.com/ncabatoff/process-exporter/blob/master/cloudbuild.release.yaml)
- [Commits](https://github.com/ncabatoff/process-exporter/compare/v0.7.5...v0.7.9)

---
updated-dependencies:
- dependency-name: github.com/ncabatoff/process-exporter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-01 17:10:59 -07:00
Paul McDonald
f5c57731d0 Update upgrade.md (#7828)
Updated to the same release name in the installation guide
2021-10-27 10:05:25 -07:00
Jessica Andersson
03dce1da4a improves text format for readability (#7855)
Small text format changes to section "I have more than one controller running in my cluster, and I want to use the new spec?" to allow for better readability.
2021-10-27 06:31:26 -07:00
Vladimir Varankin
44df9a44a5 update documentation and templates for aws nlb (#7662) 2021-10-25 10:47:02 -07:00
Mateusz Gozdek
75cce5c46d Add myself as a reviewer to images/kube-webhook-certgen (#7845)
* OWNERS_ALIASES: add ingress-nginx-kube-webhook-certgen-reviewers

For extra kube-webhook-certgen reviewers.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>

* images/kube-webhook-certgen: add separate owners

To add myself as a reviewer as discussed in #7641.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
2021-10-25 07:04:24 -07:00
WMP
25e6fc95c9 priorityClassName should be in " " (#7512)
* priorityClassName should be in " "

Example:  https://github.com/helm/charts/blob/master/stable/k8s-spot-rescheduler/templates/deployment.yaml#L28

* Update charts/ingress-nginx/templates/controller-deployment.yaml

Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>

Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>
2021-10-24 15:28:21 -07:00
Jens Reimann
5460f857cd fix: fix thread synchronization issue #6245 (#7800) 2021-10-24 15:10:21 -07:00
Thibault Guittet
1ecd517e38 Update Bare-metal NodePort URL anchor (#7687) 2021-10-24 14:38:21 -07:00
Matthew Silverman
21371f6af0 configmap: option to not trust incoming tracing spans (#7045)
* validate the sender of tracing spans

* add location-specific setting
2021-10-24 14:36:21 -07:00
James Callahan
6c6ad7dae4 ServiceMonitor namespaceSelector defaults to current namespace (#7001) 2021-10-24 14:28:21 -07:00
Davide Icardi
93d3f535f1 improve basic usage documentation (#7661) 2021-10-24 12:20:21 -07:00
Noah Ispas
6438bbab51 add more guidance for the right labeling when creating doc related issue (#7842) 2021-10-24 12:14:21 -07:00
Damien Mathieu
1a533bf8cb disable opentelemetry on arm (#7831) 2021-10-24 12:12:21 -07:00
Mara Sophie Grosch
84a7185e92 mention CVE-2021-25742 in annotations doc (#7843)
Referring to CVE-2021-25742 in the annotations doc at the description of `configuration-snippet`.
2021-10-24 12:08:22 -07:00
Zhiwei Liu
7635282591 Remove deprecated annotation in helm chart example (#7813) 2021-10-22 10:34:38 -07:00
Long Wu Yuan
c7344da4c4 fixed issue 7807 (#7814) 2021-10-22 10:30:38 -07:00
Maxence Boutet
265e19fc13 Fix not rendered markdown list (#7825) 2021-10-19 20:37:57 -07:00
Noah Ispas
dd65cdb1a6 add some information about triaging pull requests (#7822) 2021-10-19 06:52:39 -07:00
Mmadu Manasseh
3c3b281c32 Refactor: update DaemonSet and Deployment command params to use templates (#7689)
* Refactor: update DaemonSet and Deployment command parameters to use helm templates

* Fix whitespace issues
2021-10-14 01:23:19 -07:00
Ricardo Katz
23327750db Release v1.0.4 (#7805)
Signed-off-by: Ricardo Pchevuzinske Katz <rkatz@vmware.com>
2021-10-12 20:25:48 -07:00
Ricardo Katz
bf5224e899 Prepare for v1.0.4 release (#7804)
Signed-off-by: Ricardo Pchevuzinske Katz <rkatz@vmware.com>
2021-10-12 15:35:49 -07:00
Mateusz Gozdek
9921c21040 Update ingress-nginx/kube-webhook-certgen image to latest v1.1.1 (#7793)
We skip version v1.1 as it had a regression.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
2021-10-12 14:17:59 -07:00
Mathieu Corbin
dd857695fd Exoscale: use HTTP healthcheck mode (#7798)
The Exoscale LoadBalancer service uses "externalTrafficPolicy:
Local".
It's better to use the HTTP healthcheck in this mode instead of the
TCP one.
2021-10-12 13:54:00 -07:00
dependabot[bot]
c4c319cee8 Bump github.com/json-iterator/go from 1.1.11 to 1.1.12 (#7792)
Bumps [github.com/json-iterator/go](https://github.com/json-iterator/go) from 1.1.11 to 1.1.12.
- [Release notes](https://github.com/json-iterator/go/releases)
- [Commits](https://github.com/json-iterator/go/compare/v1.1.11...v1.1.12)

---
updated-dependencies:
- dependency-name: github.com/json-iterator/go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-10-12 13:49:59 -07:00
João Henri
cf8aa5ac38 Support ipFamilyPolicy and ipFamilies fields in Helm Chart (#7651)
* Add support to ipFamilyPolicy and ipFamilies fields in Helm chart

As stated in the prerequisites' session of https://kubernetes.io/docs/concepts/services-networking/dual-stack/, in order to use Kubernetes IPv4/IPv6 dual stack, v1.20 is needed. This commit aims in supporting these dual-stack-ness in ingress-nginx's chart.

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Standardize documentation with two '#'s

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Bump Helm chart version to 4.1.0

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Update Helm Chart changelog with 4.1.0 description

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Revert Helm Chart bump and remove CHANGELOG

As there will be more things in the release, in the review of this PR, it was asked to revert the bumps:
https://github.com/kubernetes/ingress-nginx/pull/7651#pullrequestreview-757311449

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>
2021-10-12 13:38:00 -07:00