sskserk
01b92b8b3a
Nginx v1.19.10 ( #8307 )
2022-03-14 08:55:57 -07:00
thomasbruggink
9180ef1ee4
Add the shareProcessNamespace as a configurable setting. ( #8287 )
2022-03-14 08:51:57 -07:00
Rodrigo Riccitelli Vieira
1fb0aea2c5
Update monitoring.md ( #8324 )
...
Added missing repo on "helm upgrade" command
2022-03-14 08:47:58 -07:00
Naveen
974d038c2a
Pinned GitHub workflows by SHA ( #8334 )
...
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for some of the actions. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
Dependabot can upgrade pinned version of actions.
2022-03-14 08:29:58 -07:00
Daniel Lim
e1eff78160
Names cannot contain _ (underscore)! So I changed it to -. ( #8300 )
...
* The name can't use _(underscore)! So fix it!
The name can't use _(underscore)! So fix it!
* Fix configMap name can't use _(underscore)
Fix configMap name can't use _(underscore)
2022-03-09 06:56:13 -08:00
hongkunyoo
5a9fe30a5d
Missing annotations ( #8288 )
...
Not quite sure but It seems that `nginx.ingress.kubernetes.io/canary-by-header` is missing.
2022-03-09 06:54:13 -08:00
James Strong
a43346d975
leaving it the git tag ( #8311 )
...
fixing the git tag for the image version, it is what it is .
2022-03-07 09:38:53 -08:00
Niclas Mietz
3bd32316ba
docs: fix changelog formatting ( #8302 )
2022-03-07 08:32:55 -08:00
Long Wu Yuan
fb72fcd817
release-v1.1.2-continued ( #8294 )
...
* v1.1.2 release
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* release-v1.1.2-continued
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-03-04 11:48:52 -08:00
James Strong
73ff3e2128
Merge pull request #8291 from kubernetes/strongjz-patch-6
...
remove git tag env from cloud build
2022-03-02 15:03:04 -05:00
James Strong
c5c35881c0
remove git tag env from cloud build
...
the latest git tag is from helm, so force the make file use of TAG ?=v$(shell date +%m%d%Y)-$(shell git rev-parse --short HEAD)
2022-03-02 14:49:01 -05:00
James Strong
6064a1cd72
update tag for image ( #8290 )
2022-03-02 11:07:13 -08:00
Damien Mathieu
7b96999eb9
Fix OpenTelemetry sidecar image build ( #8286 )
...
* fix wrong checksum for nginx image
* fix wrong platform. Arm64 has grpc, when arm doesn't
2022-03-02 08:39:14 -08:00
James Strong
49761416e1
force prow job by changing something in images/ot dir ( #8281 )
...
Images dir was merged in before the test-infra prow job, so the image was never built.
https://github.com/kubernetes/ingress-nginx/pull/8013 Jan 16
https://github.com/kubernetes/test-infra/pull/25344/files Prow job 4 days ago.
2022-03-01 09:35:55 -08:00
Maksim Nabokikh
1e2ce80846
fix: deny locations with invalid auth-url annotation ( #8256 )
...
* fix: deny locations with invalid auth-url annotation
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
* Delete duplicate test
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2022-03-01 02:13:51 -08:00
James Strong
f3698d0445
Add OpenSSF Best practices badge ( #8277 )
2022-02-28 20:27:47 -08:00
dylan-bitovi
4ecb3520c8
Add fsGroup value to admission-webhooks/job-patch charts ( #8267 )
...
* added fsGroup to admission createSecret and patchWebhook job
* added fsGroup to admission createSecret and patchWebhook job
* modified helm/README.md to add value for fsGroup
* fixed patch job values ordering
* remove manually edited README for replacement with helm-docs generated version
* re-adding charts/README.md generated by helm-docs
2022-02-28 07:10:57 -08:00
Jintao Zhang
bab0fbab0c
Start Release process for v1.1.2 ( #8275 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-02-27 06:45:18 -08:00
Indhu Kumar
fd87363b5e
Issue#8241 ( #8273 )
...
* replace daemon set for deployment manifest
* nit
2022-02-26 14:53:17 -08:00
Thibault Jamet
1e66a54974
Add a certificate info metric ( #8253 )
...
When the ingress controller loads certificates (new ones or following a
secret update), it performs a series of check to ensure its validity.
In our systems, we detected a case where, when the secret object is
compromised, for example when the certificate does not match the secret
key, different pods of the ingress controller are serving a different
version of the certificate.
This behaviour is due to the cache mechanism of the ingress controller,
keeping the last known certificate in case of corruption. When this
happens, old ingress-controller pods will keep serving the old one,
while new pods, by failing to load the corrupted certificates, would
use the default certificate, causing invalid certificates for its
clients.
This generates a random error on the client side, depending on the
actual pod instance it reaches.
In order to allow detecting occurences of those situations, add a metric
to expose, for all ingress controlller pods, detailed informations of
the currently loaded certificate.
This will, for example, allow setting an alert when there is a
certificate discrepency across all ingress controller pods using a query
similar to `sum(nginx_ingress_controller_ssl_certificate_info{host="name.tld"})by(serial_number)`
This also allows to catch other exceptions loading certificates (failing
to load the certificate from the k8s API, ...
Co-authored-by: Daniel Ricart <danielricart@users.noreply.github.com>
Co-authored-by: Daniel Ricart <danielricart@users.noreply.github.com>
2022-02-24 07:08:32 -08:00
Goran
f85dd79221
Updated confusing error ( #8262 )
2022-02-21 11:52:01 -08:00
Romain Dauby
527361c8eb
Minor fix for missing pathType property ( #8244 )
2022-02-20 13:14:11 -08:00
Noah Ispas
d5772069e8
remove 0.46.0 from supported versions table ( #8258 )
2022-02-19 15:12:12 -08:00
Alastair Firth
c9f61211d3
Versioned static manifests ( #8162 )
...
* update deploy script to generate static manifests for all supported versions
* generate static manifests for all supported versions
2022-02-13 10:47:47 -08:00
Aibek
5754eb60f4
Append elements on match, instead of removing for cors-annotations ( #8185 )
...
* fixes https://github.com/kubernetes/ingress-nginx/issues/8168 by appending elements on match, instead of removing
* refactor the corsOriginRegex comparison, and initialize CorsAllowOrigin
2022-02-13 10:39:47 -08:00
Endre Kovács
86964b15a8
fix inconsistent-label-cardinality for prometheus metrics: nginx_ingress_controller_requests ( #8225 )
...
* fix inconsistent-label-cardinality
for prometheus metrics: nginx_ingress_controller_requests
* add host to collectorLabels only if metricsPerHost is true
2022-02-13 10:33:47 -08:00
Yang
53a232f829
webhook: remove useless code. ( #8236 )
...
* webhook: remove useless code
Signed-off-by: SpecialYang <940129520@qq.com>
* Remove duplicated codec
2022-02-13 10:25:47 -08:00
Ana Claudia Riekstin
c1be3499eb
Adding some geoip variables and default values ( #8159 )
...
* adding geoIp variables that Shopify uses
* adding source remote_addr for geoip2-isp
2022-02-07 09:53:44 -08:00
Indhu Kumar
be65620b31
prometheus+grafana using servicemonitor ( #8186 )
...
* prometheus+grafana using servicemonitor
* fix review comments
* markdown changes
* more formatting changes
* fix review comments
2022-02-07 01:47:45 -08:00
Ricardo Katz
935ea3d830
Update libraries in webhook image ( #8227 )
2022-02-06 12:42:51 -08:00
Elvin Efendi
04035cc1c2
Do not validate ingresses with unknown ingress class in admission webhook endpoint. ( #8221 )
2022-02-06 12:28:51 -08:00
dependabot[bot]
d769ceaa5b
Bump google.golang.org/grpc from 1.43.0 to 1.44.0 ( #8209 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.43.0 to 1.44.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.43.0...v1.44.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-06 12:22:52 -08:00
Tomas Hulata
4b4895b53b
add ingress.class ( #8136 )
...
Signed-off-by: tombokombo <tombo@sysart.tech>
2022-02-06 12:18:51 -08:00
Alexander Brand
6b6ebf0a7c
Update the $req_id placeholder description ( #8163 )
2022-02-06 12:14:53 -08:00
Kundan Kumar
a46626b259
8217 fix removed extra v ( #8218 )
2022-02-06 12:10:52 -08:00
Damien Mathieu
dcd552ceb5
use functional options to reduce number of methods creating an EchoDeployment ( #8199 )
2022-02-02 05:12:22 -08:00
stoupance
0f464333a9
Remove Capabilities.APIVersions for Kustomize to parse file ( #7829 )
2022-02-01 09:34:10 -08:00
dependabot[bot]
a2a0e67fee
Bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 ( #8210 )
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.11.0 to 1.12.1.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.11.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-31 03:22:24 -08:00
naseemkullah
fbdfc6505b
feat(metrics): add path and method labels to requests counter ( #8201 )
2022-01-30 03:52:23 -08:00
Jintao Zhang
40c69a1ef7
chore: add Artifact Hub lint ( #8204 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-28 06:16:31 -08:00
Tiago Ferreira
8cf73d9720
Fix Indentation of example and link to cert-manager tutorial ( #8203 )
2022-01-27 08:34:59 -08:00
dependabot[bot]
32aa3404f7
Bump github.com/opencontainers/runc from 1.0.3 to 1.1.0 ( #8179 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.3 to 1.1.0.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/master/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.3...v1.1.0 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-26 19:36:52 -08:00
Billy Walker
0c2070ef4a
Adding annotations to the controller service account ( #8173 )
...
* fix: adding annotations to the controller service account
* fix: adding annotations to the controller service account
2022-01-26 19:12:50 -08:00
Sandip Bhattacharya
6eecefd3da
docs: fix inconsistent controller annotation ( #8196 )
...
The annotation for the controller class was inconsistent in the example. From my best understanding, I have tried to fix the inconsistency.
Also, removed an incomplete sentence. And made one sentence more clear by breaking it up.
2022-01-26 19:06:50 -08:00
Jintao Zhang
53ac0ddd42
Using Go install for misspell ( #8191 )
...
* chore: using go install misspell
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* chore: fix typo
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-26 18:52:50 -08:00
Long Wu Yuan
922e27fea7
reintroduce helm-docs step in ci ( #8164 )
2022-01-20 15:32:30 -08:00
Frederik-Baetens
39e721de73
Docs: add documentation about default ingress helm value, corrections to only ingress section ( #7943 )
...
* add explanation about ingressClassResource.default for helm users
Also cleaned up the entire "I have only one instance of the
Ingress-NGINX controller in my cluster" section
* docs: default ingressclass only when running one controller
* fix link to what is the flag watch ingress
* clarify usage of default ingress class annotation
2022-01-20 01:17:52 -08:00
Rafael Maciel
feba7e1ffc
docs: correct typo ( #8169 )
...
* change docker-destkop to docker-desktop
2022-01-19 18:31:51 -08:00
Alastair Firth
d16e0dec48
Static manifest generation uses kustomize instead of python ( #8099 )
...
* regenerate at 4.0.12
* bash for loop and static values files
* add .tool-versions
* fixup static manifests with kustomize instead of python
* remove spec.replicas where set
* generate manifests for all supported versions
* update docs
* remove all versions except default (1.20) for now
* update to 1.1.1/4.0.15
2022-01-17 15:28:56 -08:00
Arthur Woimbée
a665a409da
helm: ServiceMonitor: sane default namespaceSelector ( #7998 )
...
* helm: service-monitor: sane default namespaceSelector
* chart version bump (4.0.16)
2022-01-17 15:28:49 -08:00
