Commit graph

269 commits

Author SHA1 Message Date
James Strong
58650d6aaa
rebuild nginx base container image
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-06-23 15:29:48 -04:00
David Goffredo
05e5956545
tracing: upgrade to dd-opentracing-cpp v1.3.7 (#10031) 2023-06-11 11:45:47 -07:00
James Strong
9e125c597e
adding a tag here so we force nginx builds to cloudbuild
Signed-off-by: James Strong <james.strong@chainguard.dev>
2023-06-01 13:33:20 -04:00
Jintao Zhang
c2e1f34cbe
images: upgrade to Alpine 3.18 (#9997)
Alpine Linux 3.18 was released
https://alpinelinux.org/posts/Alpine-3.18.0-released.html

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-05-26 17:54:49 -07:00
Ricardo Katz
297036e169
Deprecate and remove influxdb feature (#9861) 2023-04-16 17:26:43 -07:00
James Strong
24e0e29386
add short sha to gcloud build and makefiles
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-04-07 10:42:37 -04:00
James Strong
26d83d1b20
update all container tags with date and sha, upgrade all containers (#9834)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-04-06 10:25:48 -07:00
sarab
ddde3b0d60 Switched from N1 to E2 machine 2023-04-02 03:03:12 +05:30
James Strong
66a760794f
update to golang 1.20 (#9690)
update alpine and golang
remove nano
update go modules
remove need for openssl external cli
fix stale

Signed-off-by: James Strong <james.strong@chainguard.dev>
2023-03-11 20:38:39 -08:00
James Strong
f685c9b379
force rebuild for curl cve
Signed-off-by: James Strong <james.strong@chainguard.dev>
2022-12-21 12:36:20 -05:00
James Strong
c648595cd7
update the nginx run container for alpine:3.17.0 (#9430)
Signed-off-by: James Strong <james.strong@chainguard.dev>

Signed-off-by: James Strong <james.strong@chainguard.dev>
2022-12-20 19:55:25 -08:00
James Strong
e3e0d9c1f4
start upgrade to golang 1.19.4 and alpine 3.17.0 (#9417)
* start upgrade to 1.19.4

Signed-off-by: James Strong <james.strong@chainguard.dev>

* add matrix to image test-image

Signed-off-by: James Strong <james.strong@chainguard.dev>

* update to alpine 3.17

Signed-off-by: James Strong <james.strong@chainguard.dev>

* remove need for curl

Signed-off-by: James Strong <james.strong@chainguard.dev>

Signed-off-by: James Strong <james.strong@chainguard.dev>
2022-12-18 17:07:43 -08:00
Adam Hukalowicz
49bd5dd763
ModSecurity dependencies update to avoid Memory Leaks (#9330)
* Update ModSecurity to latest head

* modsecurity version pinned
2022-12-04 11:39:54 -08:00
Jintao Zhang
0b5e068511
chore: update NGINX to 1.21.6 (#9231)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-10-31 07:10:45 -07:00
Jintao Zhang
bf8362cb50
chore: bump NGINX version v1.21.4 (#8889)
* chore: bump NGINX version v1.21.4

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* chore: bump all others

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* apply all patches

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* fix files hash

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* fix ajp module

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-10-28 16:40:39 -07:00
Nicolas Julian
855bcbce34
Update Version ModSecurity and Coreruleset (#9086)
This is related to some new bugs that found in LiveHackingEvent 1337up0522. The latest coreruleset need *ModSecurity version 2.9.6 or 3.0.8*

- https://terjanq.medium.com/waf-bypasses-via-0days-d4ef1f212ec
- https://coreruleset.org/20220920/crs-version-3-3-4-and-3-2-3/
- https://coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves/
- https://github.com/coreruleset/coreruleset/releases/tag/v3.3.4
2022-09-27 06:59:51 -07:00
Long Wu Yuan
9fdbef829c
bump alpine to v3.16.2 (#8934) 2022-08-18 05:54:36 -07:00
Jintao Zhang
f0490cbfbf
fix: change all cloudbuild jobs configuration (#8870)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-07-26 14:43:11 -07:00
Long Wu Yuan
1c03a88661
update baseimage after bump of opentracing-cpp (#8861) 2022-07-24 09:00:57 -07:00
Long Wu Yuan
c5766dc011
changed baseimage sha & bumped ginkgo to 2.1.4 in test (#8860) 2022-07-23 18:54:57 -07:00
David Goffredo
18ee046b43
update dd-opentracing-cpp version in nginx build script (#8848)
* update dd-opentracing-cpp version in nginx build script

* idiomatic placement of "v" prefix in Datadog plugin version tag
2022-07-23 11:02:57 -07:00
Long Wu Yuan
f0ff7e841d
bump to alpine-3.16.1 (#8858) 2022-07-23 07:24:57 -07:00
Guilhem Lettron
0049796682
feat: update mimalloc to 1.7.6 (#8827)
Signed-off-by: Guilhem Lettron <guilhem@barpilot.io>
2022-07-17 12:13:20 -07:00
James Strong
e1a16f6e74
Update nginx base image in one place (#8400)
* update files to use one base image file

Signed-off-by: James Strong <strong.james.e@gmail.com>

* add chart test as well

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update e2e-test image building

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update e2e base image arg

Signed-off-by: James Strong <strong.james.e@gmail.com>

* add current e2e so test run

Signed-off-by: James Strong <strong.james.e@gmail.com>

* working on fixing build

* getting dev-env and make release to work

* test

* i think buildx is working on mac

* updates

* why docker for mac and linux cli differ

* fix target arch

* fix target arch

* fix loag issue

* fix issue

* update the chroot docker file

* fix docker base build

* mac is the issue

* env not getting to the e2e deployment.go file

* fix pull issue

* fix pull issue

* move test scripts into test folder

* clean up ci

* updates for PR

* remove unnesscary var
2022-07-08 09:27:47 -07:00
Long Wu Yuan
8baac4214a
changed to alpine-v3.16 (#8793) 2022-07-08 06:57:46 -07:00
Long Wu Yuan
3348cd71e0
updated baseimage sha (#8737) 2022-06-24 09:44:57 -07:00
Daniel Schulze
0ff500c23f
Working OpenTelemetry sidecar (base nginx image) (#8719)
* Delete entrypoint script and add sidecar lib path

* make otel libs path otel specific

* add description

* remove library path adaption from nginx base image
2022-06-23 08:29:42 -07:00
Long Wu Yuan
96b6228a6b
changed k8s.gcr.io to registry.k8s.io (#8667) 2022-06-10 04:01:52 -07:00
Sara Saei
3410655065
update nginx otel LD_LIBRARY_PATH (#8641) 2022-05-29 12:44:51 -07:00
Ehsan Saei
ac3bbaf068
update LD_LIBRARY_PATH for OpenTelemetry use (#8628) 2022-05-24 10:15:26 -07:00
Ricardo Katz
ac60ed85ab
Bump nginx image to version without core directives (#8625) 2022-05-24 06:10:06 -07:00
Ricardo Katz
cd6f88af3f
Add patch to remove root and alias directives (#8624) 2022-05-23 20:13:10 -07:00
Long Wu Yuan
2e1a4790bb
changed nginx base img tag to img built with alpine3.14.6 (#8479) 2022-04-15 21:37:10 -07:00
Ricardo Katz
81c2afd975
update base images and protobuf gomod (#8478) 2022-04-15 12:53:12 -07:00
Aditya Kamath
f1cb2b73ca
update nginx base image to new alpine 3.14.4 build - try 2 (#8409)
* update nginx base image to new alpine 3.14.4 build

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update test image

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Update nginx base image

Signed-off-by: Aditya Kamath <theunrealgeek@gmail.com>

Co-authored-by: James Strong <strong.james.e@gmail.com>
2022-03-31 13:43:04 -07:00
Long Wu Yuan
87979099fd
set execute bit on entrypoint.sh (#8404) 2022-03-31 04:25:00 -07:00
Aditya Kamath
5402d35663
Add execute permissions to nginx image entrypoint.sh (#8403) 2022-03-31 03:37:01 -07:00
James Strong
9960efe1e9
remove (#8394)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-28 07:49:23 -07:00
James Strong
5298448865
downgrade to 3.14.4 and fix tag (#8386)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-25 10:21:58 -07:00
James Strong
e51c15160e
fix indent on env (#8352)
* fix indent on env

* revert tag to      - TAG=$_GIT_TAG
2022-03-18 10:04:41 -07:00
James Strong
40bb6c3d2e
update cloud build (#8349) 2022-03-17 12:02:41 -07:00
James Strong
569b3c2a70
update cloud build image
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 15:32:45 -04:00
James Strong
5c47803d0f
fix the cloud build
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 15:13:24 -04:00
James Strong
0e2447ed0e
add the date per request
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 15:07:38 -04:00
James Strong
952a6dc22c
control tag with short sha
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 14:52:06 -04:00
James Strong
2fefd714bd
update tag and force a new build
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-03-16 12:57:48 -04:00
James Strong
1953efa9d8
Bumping alpine base to 3.15 2022-03-16 11:52:38 -04:00
sskserk
01b92b8b3a
Nginx v1.19.10 (#8307) 2022-03-14 08:55:57 -07:00
Damien Mathieu
15b0aba03b
First sidecar module: OpenTelemetry (#8013)
* remove opentelemetry from main nginx image

* add opentelemetry sidecar image

* handle extra modules in helm chart

* fix running helm chart

* mount the modules volume in the init container

* merge the mounted folder

* fix the otel image

* fix licence year

* fix cloudbuild image

* use the same nginx version as in the main image

* only retrieve /etc/nginx/modules for now
2022-01-16 13:33:28 -08:00
dmitry-j-mikhin
8ccec84496
fix nginx compilation flags (#8023)
* use '-O2' instead of '-Og'
  '-O2' produce production optimized binary while '-Og' is used mostly
  for debugging
* use '-mtune=generic' instead of '-mtune=native'
  '-mtune=native' produce optimal code for builder host system, but it
  can be sub-optimal for execution host system
2021-12-12 05:25:58 -08:00