Commit graph

6783 commits

Author SHA1 Message Date
Robert Steele
b7ac27a671
Update Bare Metal anchor link (#7914) 2021-11-15 13:58:48 -08:00
dependabot[bot]
b2f1357638
Bump sigs.k8s.io/controller-runtime from 0.9.5 to 0.10.3 (#7917)
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.9.5 to 0.10.3.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.9.5...v0.10.3)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-15 13:56:48 -08:00
Adam Graves
6299c39842
Allow setting of container securityContext (#7533)
Currently this blocks deployments on clusters with global PodSecurityPolicies set

Signed-off-by: Adam Graves <adam.graves85@gmail.com>
2021-11-15 13:54:49 -08:00
Mac Chaffee
3c08f002f9
Rewrite multiple-ingress.md to work with v1 (#7608)
* Rewrite multiple-ingress.md to work with v1

* Fix --controller-class flag docs
2021-11-15 12:20:49 -08:00
agile6v
ab4fa42467
fix compling kubectl-ingress_nginx error and add some descriptions for build command. (#7903) 2021-11-12 11:46:35 -08:00
zryfish
7203a0b8bd
support watch namespaces matched namespace selector (#7472)
skip caching namespaces at cluster scope if only watching single namespace

add --watch-namespace-selector in user guide

add e2e test
2021-11-12 11:46:28 -08:00
Ricardo Katz
67e13bf692
Add option to sanitize annotation inputs (#7874)
* Add option to sanitize annotation inputs

* Fix e2e tests after string sanitization

* Add proxy_pass and serviceaccount as denied values
2021-11-12 11:40:30 -08:00
James Strong
8333c8c127
update docs with a warning about cert chain order (#7908) 2021-11-12 11:34:29 -08:00
Christopher Larivière
100057d0c5
fix missing \- in regex expression for CORS wildcard domain (#7904) 2021-11-11 10:26:08 -08:00
sandipanpanda
af232df1af
Update anchor links of Nodeport from #nodeport to #type-nodeport (#7899)
* Update anchor link from #nodeport to #type-nodeport in baremetal.md

* Update anchor link from #nodeport to #type-nodeport in baremetal.md
2021-11-11 09:42:09 -08:00
Gerald Pape
017e1ecde3
Fix Ingress resources in docs (#7579)
* fix Ingress resources in docs

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* move to ingressClassName

* fix more Ingress resource examples

* empty commit

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* make NOTES.txt aware of version + add notice about ingress version to examples main page

* add link to legacy documentation

Signed-off-by: Gerald Pape <gerald@giantswarm.io>
2021-11-09 07:43:49 -08:00
James Strong
b7b2714b69
Update proxy-set-header example (#7898)
The Example was directed to the repo markdown and not the site. 

/kind documentation
2021-11-08 22:15:39 -08:00
Jennifer
72ec0e290e
Remove double spacing (#7830) 2021-11-05 13:54:40 -07:00
Jérôme Petazzoni
ce165f9078
Try to improve the installation guide (#7757)
* move generic instructions to the beginning of the file
* add an example of ingress resource creation
* simplify a few commands to make them shorter and simpler
* add short paragraphs about PROXY protocol and traffic policy

This tries to address the concerns I expressed in #7701.
2021-11-05 13:50:40 -07:00
Sablu Miah
62ab435958
Fix Formatting/Typo (#7894)
Quick simple typo/formatting fix to keep consistency with direct sections below
2021-11-05 13:34:41 -07:00
Long Wu Yuan
d1ff845f4f
changed text and added command (#7889) 2021-11-05 06:41:53 -07:00
Hu Shuai
b8e62019bc
Fix typos in ISSUE_TRIAGE.md (#7863)
Signed-off-by: Hu Shuai <hus.fnst@cn.fujitsu.com>
2021-11-04 04:52:03 -07:00
Christopher Larivière
65b8eeddec
Support cors-allow-origin with multiple origins (#7614)
* Add Initial support for multiple cors origins in nginx

- bump cluster version for `make dev-env`
- add buildOriginRegex function in nginx.tmpl
- add e2e 4 e2e tests for cors.go
- refers to feature request #5496

* add tests + use search to identify '*' origin

* add tests + use search to identify '*' origin

Signed-off-by: Christopher Larivière <lariviere.c@gmail.com>

* fix "should enable cors test" looking at improper values

* Modify tests and add some logic for origin validation

- add origin validation in cors ingress annotations
- add extra tests to validate regex
- properly escape regex using "QuoteMeta"
- fix some copy/paste errors

* add TrimSpace and length validation before adding a new origin

* modify documentation for cors and remove dangling comment

* add support for optional port mapping on origin

* support single-level wildcard subdomains + tests

* Remove automatic `*` fonctionality from incorrect origins

- use []string instead of basic string to avoid reparsing in template.go
- fix typo in docs
- modify template to properly enable only if the whole block is enabled
- modify cors parsing
- test properly by validating that the value returned is the proper
  origin
- update unit tests and annotation tests

* Re-add `*` when no cors origins are supplied + fix tests

- fix e2e tests to allow for `*`
- re-add `*` to cors parsing if trimmed cors-allow-origin is empty
(supplied but empty) and if it wasn't supplied at all.

* remove unecessary logic for building cors origin + remove comments

- add some edge cases in e2e tests
- rework logic for building cors origin

there was no need for logic in template.go for buildCorsOriginRegex
if there is a `*` it ill be short-circuited by first if.

if it's a wildcard domain or any domain (without a wildcard), it MUST
match the main/cors.go regex format.

if there's a star in a wildcard domain, it must be replaced with
`[A-Za-z0-9]+`

* add missing check in e2e tests
2021-11-02 12:31:42 -07:00
FBLGit
a5bab6a715
feature: added AdmissionController metrics (#7711)
* feature: added AdmissionController metrics

* fix: flag control on admissionCollector

* fix: admission collector disclaimer year and linting
2021-11-02 10:54:34 -07:00
zhengtianbao
43c22c4914
remove build-plugin extra quote (#7870) 2021-11-02 10:46:59 -07:00
Rahil Patel
c8ab4dc307
add brotli-min-length configuration option (#7854)
* add `brotli-min-length` configuration option

* add e2e tests for brotli

* include check for expected content type

* fix header and format
2021-11-02 04:52:59 -07:00
counter2015
ed34f6c93d
fix ingress syntax. (#7867) 2021-11-01 17:12:58 -07:00
dependabot[bot]
e34ca93ad6
Bump github.com/ncabatoff/process-exporter from 0.7.5 to 0.7.9 (#7865)
Bumps [github.com/ncabatoff/process-exporter](https://github.com/ncabatoff/process-exporter) from 0.7.5 to 0.7.9.
- [Release notes](https://github.com/ncabatoff/process-exporter/releases)
- [Changelog](https://github.com/ncabatoff/process-exporter/blob/master/cloudbuild.release.yaml)
- [Commits](https://github.com/ncabatoff/process-exporter/compare/v0.7.5...v0.7.9)

---
updated-dependencies:
- dependency-name: github.com/ncabatoff/process-exporter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-01 17:10:59 -07:00
Paul McDonald
8467124c24
Update upgrade.md (#7828)
Updated to the same release name in the installation guide
2021-10-27 10:05:25 -07:00
Jessica Andersson
4da87d128d
improves text format for readability (#7855)
Small text format changes to section "I have more than one controller running in my cluster, and I want to use the new spec?" to allow for better readability.
2021-10-27 06:31:26 -07:00
Vladimir Varankin
987a721723
update documentation and templates for aws nlb (#7662) 2021-10-25 10:47:02 -07:00
Mateusz Gozdek
1d1e89eb9b
Add myself as a reviewer to images/kube-webhook-certgen (#7845)
* OWNERS_ALIASES: add ingress-nginx-kube-webhook-certgen-reviewers

For extra kube-webhook-certgen reviewers.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>

* images/kube-webhook-certgen: add separate owners

To add myself as a reviewer as discussed in #7641.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
2021-10-25 07:04:24 -07:00
WMP
5b94d83aeb
priorityClassName should be in " " (#7512)
* priorityClassName should be in " "

Example:  https://github.com/helm/charts/blob/master/stable/k8s-spot-rescheduler/templates/deployment.yaml#L28

* Update charts/ingress-nginx/templates/controller-deployment.yaml

Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>

Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>
2021-10-24 15:28:21 -07:00
Jens Reimann
880ea6dba8
fix: fix thread synchronization issue #6245 (#7800) 2021-10-24 15:10:21 -07:00
Thibault Guittet
6b9865c607
Update Bare-metal NodePort URL anchor (#7687) 2021-10-24 14:38:21 -07:00
Matthew Silverman
7d5452d00b
configmap: option to not trust incoming tracing spans (#7045)
* validate the sender of tracing spans

* add location-specific setting
2021-10-24 14:36:21 -07:00
James Callahan
e4001df41e
ServiceMonitor namespaceSelector defaults to current namespace (#7001) 2021-10-24 14:28:21 -07:00
Davide Icardi
c6adeb8f8c
improve basic usage documentation (#7661) 2021-10-24 12:20:21 -07:00
Noah Ispas
57585df4d4
add more guidance for the right labeling when creating doc related issue (#7842) 2021-10-24 12:14:21 -07:00
Damien Mathieu
eb482db5b3
disable opentelemetry on arm (#7831) 2021-10-24 12:12:21 -07:00
Mara Sophie Grosch
21bab108f4
mention CVE-2021-25742 in annotations doc (#7843)
Referring to CVE-2021-25742 in the annotations doc at the description of `configuration-snippet`.
2021-10-24 12:08:22 -07:00
Zhiwei Liu
af7d9581f4
Remove deprecated annotation in helm chart example (#7813) 2021-10-22 10:34:38 -07:00
Long Wu Yuan
0b24ade145
fixed issue 7807 (#7814) 2021-10-22 10:30:38 -07:00
Maxence Boutet
8611ecb7c9
Fix not rendered markdown list (#7825) 2021-10-19 20:37:57 -07:00
Noah Ispas
abb05135bb
add some information about triaging pull requests (#7822) 2021-10-19 06:52:39 -07:00
Mmadu Manasseh
5a52d99ae8
Refactor: update DaemonSet and Deployment command params to use templates (#7689)
* Refactor: update DaemonSet and Deployment command parameters to use helm templates

* Fix whitespace issues
2021-10-14 01:23:19 -07:00
Ricardo Katz
14f6b32032
Release v1.0.4 (#7805)
Signed-off-by: Ricardo Pchevuzinske Katz <rkatz@vmware.com>
2021-10-12 20:25:48 -07:00
Ricardo Katz
9b78b6c197
Prepare for v1.0.4 release (#7804)
Signed-off-by: Ricardo Pchevuzinske Katz <rkatz@vmware.com>
2021-10-12 15:35:49 -07:00
Mateusz Gozdek
d74fa2f538
Update ingress-nginx/kube-webhook-certgen image to latest v1.1.1 (#7793)
We skip version v1.1 as it had a regression.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
2021-10-12 14:17:59 -07:00
Mathieu Corbin
f5b9d9c512
Exoscale: use HTTP healthcheck mode (#7798)
The Exoscale LoadBalancer service uses "externalTrafficPolicy:
Local".
It's better to use the HTTP healthcheck in this mode instead of the
TCP one.
2021-10-12 13:54:00 -07:00
dependabot[bot]
96acb8580f
Bump github.com/json-iterator/go from 1.1.11 to 1.1.12 (#7792)
Bumps [github.com/json-iterator/go](https://github.com/json-iterator/go) from 1.1.11 to 1.1.12.
- [Release notes](https://github.com/json-iterator/go/releases)
- [Commits](https://github.com/json-iterator/go/compare/v1.1.11...v1.1.12)

---
updated-dependencies:
- dependency-name: github.com/json-iterator/go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-10-12 13:49:59 -07:00
João Henri
001ce778b7
Support ipFamilyPolicy and ipFamilies fields in Helm Chart (#7651)
* Add support to ipFamilyPolicy and ipFamilies fields in Helm chart

As stated in the prerequisites' session of https://kubernetes.io/docs/concepts/services-networking/dual-stack/, in order to use Kubernetes IPv4/IPv6 dual stack, v1.20 is needed. This commit aims in supporting these dual-stack-ness in ingress-nginx's chart.

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Standardize documentation with two '#'s

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Bump Helm chart version to 4.1.0

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Update Helm Chart changelog with 4.1.0 description

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>

* Revert Helm Chart bump and remove CHANGELOG

As there will be more things in the release, in the review of this PR, it was asked to revert the bumps:
https://github.com/kubernetes/ingress-nginx/pull/7651#pullrequestreview-757311449

Signed-off-by: jaehnri <joao.henri.cr@gmail.com>
2021-10-12 13:38:00 -07:00
Damien Mathieu
9da4d87d0c
Properly check whether we can install opentelemetry, and switch it back to main repo (#7803)
* check for the exact value of USE_OPENTELEMETRY

* use latest commit from the main opentelemetry-cpp-contrib repo
2021-10-12 12:16:34 -07:00
Mateusz Gozdek
54523641a8
images/kube-webhook-certgen/rootfs: add missing tests and fix regression (#7801)
* images/kube-webhook-certgen/rootfs: improve tests objects creation

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>

* images/kube-webhook-certgen/rootfs: use context with deadline for tests

So in case some operations are taking more time, we respect -timeout
flag.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>

* images/kube-webhook-certgen/rootfs: add missing tests implementation

It should've been added in 9acf62d867.

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>

* images/kube-webhook-certgen/rootfs: fix patching only mutating webhook

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
2021-10-12 10:07:47 -07:00
Noah Ispas
068eccb607
fix reference to contributing.md in issue-triage.md (#7802) 2021-10-12 07:45:48 -07:00