* update path type validation to be false and update e2e test scripts
Signed-off-by: James Strong <strong.james.e@gmail.com>
* update to make tests clear
Signed-off-by: James Strong <strong.james.e@gmail.com>
* update test params
Signed-off-by: James Strong <strong.james.e@gmail.com>
* Adding else per pr comments
Signed-off-by: James Strong <james.strong@chainguard.dev>
---------
Signed-off-by: James Strong <strong.james.e@gmail.com>
Signed-off-by: James Strong <james.strong@chainguard.dev>
* fix(hpa): deprecated api version, bump to v2
* chore(hpa): abstract hpa apiVersion to helm value
* feat(hpa): add controller.autoscaling.apiVersion docs in README
* docs(hpa): quotes around apiVersion string type
* chore(hpa): run helm-docs in repo
* chore(hpa): remove local helm-docs module install and output
* docs(helm): add hpa controller.autoscaling.apiVersion description
* docs(hpa): remove autoscaling.apiVersion description as it fails ci
* Automatically generate electionID from the fullname or use the set value.
* Updated the chart readme to include the new empty default.
* Rebuilt the Helm readme with helm-docs.
When using multiple values for the `serviceAccount.annotations` values, the first line ends up indented 2 further than the following lines, resulting in a invalid yaml
* fix: do not apply job-patch psp on Kubernetes 1.25 and newer
Signed-off-by: wilmarguida <w.denouden@guida.nl>
* fix: bump kubernetes version for helm chart CI to 1.25.0
Signed-off-by: wilmarguida <w.denouden@guida.nl>
Signed-off-by: wilmarguida <w.denouden@guida.nl>
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
We removed the use of configmap as an election lock, so we will use the
Lease API to complete the election.
Before this, we used `MultiLock` to facilitate smooth migration of
existing users of ingress-nginx from configmap to LeaseLock.
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* support extraEnvs for job resources in helm chart
Signed-off-by: Li, Eric <Xiannan.li@fmr.com>
* Update helm doc
* Update helm doc
* Updated helm doc - add controller.admissionWebhooks.extraEnvs
* Added some test data for webhook controller.admissionWebhooks.extraEnvs
* added new line at the end of deployment-webhook-extraEnvs-values.yaml
* Fixed helm chart test issue
* Initial work on chrooting nginx process
* More improvements in chroot
* Fix charts and some file locations
* Fix symlink on non chrooted container
* fix psp test
* Add e2e tests to chroot image
* Fix logger
* Add internal logger in controller
* Fix overlay for chrooted tests
* Fix tests
* fix boilerplates
* Fix unittest to point to the right pid
* Fix PR review
* release 1.1.3 details
fix the readme with right sha and version
remove helm label
fix issue 8329
fix the 1.20 service after the fix for ipv6
udpate readme and change for patches
* update helm doc
Signed-off-by: James Strong <strong.james.e@gmail.com>
* added fsGroup to admission createSecret and patchWebhook job
* added fsGroup to admission createSecret and patchWebhook job
* modified helm/README.md to add value for fsGroup
* fixed patch job values ordering
* remove manually edited README for replacement with helm-docs generated version
* re-adding charts/README.md generated by helm-docs
* remove opentelemetry from main nginx image
* add opentelemetry sidecar image
* handle extra modules in helm chart
* fix running helm chart
* mount the modules volume in the init container
* merge the mounted folder
* fix the otel image
* fix licence year
* fix cloudbuild image
* use the same nginx version as in the main image
* only retrieve /etc/nginx/modules for now
* allow set annotations for admission Jobs
Signed-off-by: Alex Co <tuanclq@gmail.com>
* Bump chart version & update CHANGELOG
Signed-off-by: Alex Co <tuanclq@gmail.com>
* Bump chart version again
Signed-off-by: Alex Co <tuanclq@gmail.com>
* Add example
Signed-off-by: Alex Co <tuanclq@gmail.com>
