DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
6538 commits 4 branches 217 tags 166 MiB
Commit graph

6538 commits

This branch
This branch
All branches
Author SHA1 Message Date
Damien Mathieu
c8496a4fae fix build and upgrade otel to latest version 2022-03-29 12:07:43 +02:00
Damien Mathieu
30fe4972f9 ensure module directory exists before moving the library there 2022-03-29 10:28:48 +02:00
James Strong
98485eb82e remove (#8394) 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-28 07:49:23 -07:00
Tomoyuki KOYAMA
e0cd2c28d1 fix code highlight (#8392) 2022-03-28 02:29:23 -07:00
James Strong
04ff4d5a33 downgrade to 3.14.4 and fix tag (#8386) 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-25 10:21:58 -07:00
dependabot[bot]
d76ff795a6 Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#8360) 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.0...v1.7.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-03-23 12:45:20 -07:00
Tim Borkhodoev
7a9c93d2a1 bump luarocks to 3.8.0 (#8379) 2022-03-22 18:53:58 -07:00
Nishant Jain
db5df2a5da Removed s390x, linux/arm platform as docker build was crashing (#8121) 
Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
 2022-03-22 04:23:44 -07:00
Long Wu Yuan
15bd8cf2a5 Updated semver in install docs URLs (#8368) 2022-03-21 15:46:47 -07:00
James Strong
c3b206cfa0 fix indent on env (#8352) 
* fix indent on env

* revert tag to      - TAG=$_GIT_TAG
 2022-03-18 10:04:41 -07:00
Ana Claudia Riekstin
24b6abf9a5 bump Alpine image in Dockerfile (#8350) 2022-03-17 18:19:40 -07:00
James Strong
430de94f42 update cloud build (#8349) 2022-03-17 12:02:41 -07:00
James Strong
6931854bc6 Merge pull request #8346 from strongjz/update-builder 
update cloud build image
 2022-03-16 15:40:39 -04:00
James Strong
fe4472157a update cloud build image 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 15:32:45 -04:00
James Strong
5c0cff57ec Merge pull request #8344 from strongjz/tag-1.1.3 
update tag and force a new build
 2022-03-16 15:15:08 -04:00
James Strong
e403ce9680 fix the cloud build 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 15:13:24 -04:00
James Strong
fa30819930 add the date per request 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 15:07:38 -04:00
James Strong
482fcb1bcd control tag with short sha 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 14:52:06 -04:00
James Strong
d47a2fd115 update tag and force a new build 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 12:57:48 -04:00
James Strong
48d47b81c9 Merge pull request #8343 from strongjz/alpine-3.15 
Bump alpine base to 3.15
 2022-03-16 12:27:14 -04:00
James Strong
47d808088d Bumping alpine base to 3.15 2022-03-16 11:52:38 -04:00
Ana Claudia Riekstin
f9368d4ca2 Fix 50% split between canary and mainline tests (#8315) 
* fix 50% canary test

* fix past tense

* after code review

* revert go.sum and go.mod

* run gofmt
 2022-03-16 06:25:49 -07:00
sskserk
4a7a7cdd94 Nginx v1.19.10 (#8307) 2022-03-14 08:55:57 -07:00
thomasbruggink
a5893adb76 Add the shareProcessNamespace as a configurable setting. (#8287) 2022-03-14 08:51:57 -07:00
Rodrigo Riccitelli Vieira
18f311ed89 Update monitoring.md (#8324) 
Added missing repo on "helm upgrade" command
 2022-03-14 08:47:58 -07:00
Naveen
09d3a2106c Pinned GitHub workflows by SHA (#8334) 
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for some of the actions. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

Dependabot can upgrade pinned version of actions.
 2022-03-14 08:29:58 -07:00
Daniel Lim
48500eca86 Names cannot contain _ (underscore)! So I changed it to -. (#8300) 
* The name can't use _(underscore)! So fix it!

The name can't use _(underscore)! So fix it!

* Fix configMap name can't use _(underscore)

Fix configMap name can't use _(underscore)
 2022-03-09 06:56:13 -08:00
hongkunyoo
976df3b6cf Missing annotations (#8288) 
Not quite sure but It seems that `nginx.ingress.kubernetes.io/canary-by-header` is missing.
 2022-03-09 06:54:13 -08:00
James Strong
36a8186e7a leaving it the git tag (#8311) 
fixing the git tag for the image version, it is what it is .
 2022-03-07 09:38:53 -08:00
Niclas Mietz
ab78af6d3d docs: fix changelog formatting (#8302) 2022-03-07 08:32:55 -08:00
Long Wu Yuan
9c1c26dc56 release-v1.1.2-continued (#8294) 
* v1.1.2 release

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* release-v1.1.2-continued

Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
 2022-03-04 11:48:52 -08:00
James Strong
f22e7e16e9 Merge pull request #8291 from kubernetes/strongjz-patch-6 
remove git tag env from cloud build
 2022-03-02 15:03:04 -05:00
James Strong
673f4b12e8 remove git tag env from cloud build 
the latest git tag is from helm, so force the make file use of TAG ?=v$(shell date +%m%d%Y)-$(shell git rev-parse --short HEAD)
 2022-03-02 14:49:01 -05:00
James Strong
0f370b7cb1 update tag for image (#8290) 2022-03-02 11:07:13 -08:00
Damien Mathieu
a2af5ba655 Fix OpenTelemetry sidecar image build (#8286) 
* fix wrong checksum for nginx image

* fix wrong platform. Arm64 has grpc, when arm doesn't
 2022-03-02 08:39:14 -08:00
James Strong
5c878cfe6c force prow job by changing something in images/ot dir (#8281) 
Images dir was merged in before the test-infra prow job, so the image was never built. 

https://github.com/kubernetes/ingress-nginx/pull/8013 Jan 16

https://github.com/kubernetes/test-infra/pull/25344/files Prow job 4 days ago.
 2022-03-01 09:35:55 -08:00
Maksim Nabokikh
20344d338b fix: deny locations with invalid auth-url annotation (#8256) 
* fix: deny locations with invalid auth-url annotation

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>

* Delete duplicate test

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-03-01 02:13:51 -08:00
James Strong
5ac36489f5 Add OpenSSF Best practices badge (#8277) 2022-02-28 20:27:47 -08:00
dylan-bitovi
8482b2bd23 Add fsGroup value to admission-webhooks/job-patch charts (#8267) 
* added fsGroup to admission createSecret and patchWebhook job

* added fsGroup to admission createSecret and patchWebhook job

* modified helm/README.md to add value for fsGroup

* fixed patch job values ordering

* remove manually edited README for replacement with helm-docs generated version

* re-adding charts/README.md generated by helm-docs
 2022-02-28 07:10:57 -08:00
Jintao Zhang
8f49fd0745 Start Release process for v1.1.2 (#8275) 
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
 2022-02-27 06:45:18 -08:00
Indhu Kumar
d2dea3658e Issue#8241 (#8273) 
* replace daemon set for deployment manifest

* nit
 2022-02-26 14:53:17 -08:00
Thibault Jamet
19f57f28ca Add a certificate info metric (#8253) 
When the ingress controller loads certificates  (new ones or following a
secret update), it performs a series of check to ensure its validity.

In our systems, we detected a case where, when the secret object is
compromised, for example when the certificate does not match the secret
key, different pods of the ingress controller are serving a different
version of the certificate.

This behaviour is due to the cache mechanism of the ingress controller,
keeping the last known certificate in case of corruption. When this
happens, old ingress-controller pods will keep serving the old one,
while new pods, by failing to load the corrupted certificates, would
use the default certificate, causing invalid certificates for its
clients.

This generates a random error on the client side, depending on the
actual pod instance it reaches.

In order to allow detecting occurences of those situations, add a metric
to expose, for all ingress controlller pods, detailed informations of
the currently loaded certificate.

This will, for example, allow setting an alert when there is a
certificate discrepency across all ingress controller pods using a query
similar to `sum(nginx_ingress_controller_ssl_certificate_info{host="name.tld"})by(serial_number)`

This also allows to catch other exceptions loading certificates (failing
to load the certificate from the k8s API, ...

Co-authored-by: Daniel Ricart <danielricart@users.noreply.github.com>

Co-authored-by: Daniel Ricart <danielricart@users.noreply.github.com>
 2022-02-24 07:08:32 -08:00
Goran
c3bff67497 Updated confusing error (#8262) 2022-02-21 11:52:01 -08:00
Romain Dauby
2499c55fb7 Minor fix for missing pathType property (#8244) 2022-02-20 13:14:11 -08:00
Noah Ispas
eeb75ff64d remove 0.46.0 from supported versions table (#8258) 2022-02-19 15:12:12 -08:00
Alastair Firth
feb1c32ea4 Versioned static manifests (#8162) 
* update deploy script to generate static manifests for all supported versions

* generate static manifests for all supported versions
 2022-02-13 10:47:47 -08:00
Aibek
61dfe174b1 Append elements on match, instead of removing for cors-annotations (#8185) 
* fixes https://github.com/kubernetes/ingress-nginx/issues/8168 by appending elements on match, instead of removing

* refactor the corsOriginRegex comparison, and initialize CorsAllowOrigin
 2022-02-13 10:39:47 -08:00
Endre Kovács
1d1abf784e fix inconsistent-label-cardinality for prometheus metrics: nginx_ingress_controller_requests (#8225) 
* fix inconsistent-label-cardinality

for prometheus metrics: nginx_ingress_controller_requests

* add host to collectorLabels only if metricsPerHost is true
 2022-02-13 10:33:47 -08:00
Yang
536d9692af webhook: remove useless code. (#8236) 
* webhook: remove useless code

Signed-off-by: SpecialYang <940129520@qq.com>

* Remove duplicated codec
 2022-02-13 10:25:47 -08:00
Ana Claudia Riekstin
0e8070c13e Adding some geoip variables and default values (#8159) 
* adding geoIp variables that Shopify uses

* adding source remote_addr for geoip2-isp
 2022-02-07 09:53:44 -08:00