James Strong
a4c58e5bd3
upgrade go 1.21.5
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-20 17:48:39 +01:00
James Strong
a5672c4362
Merge pull request #10785 from k8s-infra-cherrypick-robot/cherry-pick-10650-to-release-1.9
...
[release-1.9] [charts] add controller.admissionWebhooks.networkPolicyEnabled
2023-12-20 16:38:01 +01:00
Jmnote
52bd583fee
.Values.controller.admissionWebhooks.patch.networkPolicy.enabled
2023-12-20 15:32:26 +00:00
Jmnote
d7e84e8722
add controller.admissionWebhooks.networkPolicyEnabled
...
Signed-off-by: Jmnote <opcore@gmail.com>
2023-12-20 15:32:26 +00:00
James Strong
f18a66dca4
update nginx build ( #10781 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-20 15:24:54 +01:00
James Strong
ca91adaad6
update images from golang upgrade ( #10762 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-15 21:14:24 +01:00
k8s-infra-cherrypick-robot
7100fecafb
fix: remove tcpproxy copy error handling ( #10715 )
...
Co-authored-by: Zadkiel Aharonian <hello@zadkiel.fr>
2023-12-01 17:25:56 +01:00
James Strong
6e21bfd7a6
Merge pull request #10703 from k8s-infra-cherrypick-robot/cherry-pick-10565-to-release-1.9
...
[release-1.9] Chart: Improve #10539 .
2023-11-29 14:57:46 -05:00
Marco Ebert
a4f3cb0067
Templates: Add forgotten namespace definitions.
2023-11-29 19:55:36 +00:00
Marco Ebert
c34bd82d5b
KEDA: Remove comment.
2023-11-29 19:55:36 +00:00
Marco Ebert
c89114a62a
Admission Webhooks/Validating Webhook: Make use of ingress-nginx.namespace
.
2023-11-29 19:55:36 +00:00
Marco Ebert
15ce4fc172
Templates: Remove quotes.
...
In alignment to others. Also does not make sense as `namespace` must conform to DNS.
2023-11-29 19:55:36 +00:00
Marco Ebert
78ffac9766
Helpers: Align ingress-nginx.namespace
to ingress-nginx.name
.
2023-11-29 19:55:36 +00:00
James Strong
af04aa5fa9
Merge pull request #10702 from k8s-infra-cherrypick-robot/cherry-pick-10523-to-release-1.9
...
[release-1.9] Admission Webhook: Truncate name.
2023-11-29 14:53:15 -05:00
Marco Ebert
a49ca2e90b
Admission Webhook: Truncate name.
2023-11-29 19:52:11 +00:00
James Strong
a911a88bd0
Merge pull request #10701 from k8s-infra-cherrypick-robot/cherry-pick-10594-to-release-1.9
...
[release-1.9] Fix minor typo in Helm chart values
2023-11-29 14:43:06 -05:00
James Strong
1192b01278
Merge pull request #10700 from k8s-infra-cherrypick-robot/cherry-pick-10255-to-release-1.9
...
[release-1.9] DOCS Remove support for running Both
2023-11-29 14:42:49 -05:00
Roberto Devesa
358d1fb18e
Fix typo
2023-11-29 19:42:11 +00:00
James Strong
68901bcec1
Merge pull request #10699 from k8s-infra-cherrypick-robot/cherry-pick-10539-to-release-1.9
...
[release-1.9] helm feat: add namespace overrides
2023-11-29 14:35:00 -05:00
Matt Clegg
32cdec4cb9
DOCS Remove support for running Both
2023-11-29 19:33:05 +00:00
jasine
bf5d30922f
fix: set max length and trim last "-"
2023-11-29 19:22:46 +00:00
jasine
d9aac9e35f
fix: description in value
2023-11-29 19:22:46 +00:00
jasine
e6f07254fb
fix: readme description
2023-11-29 19:22:46 +00:00
jasine
e4ebc3de57
add value in readme
2023-11-29 19:22:46 +00:00
jasine
8c8577cafc
feat: add namespace overrides
2023-11-29 19:22:46 +00:00
James Strong
bc2bc3d037
Merge pull request #10696 from k8s-infra-cherrypick-robot/cherry-pick-10663-to-release-1.9
...
[release-1.9] Fix typo in yaml
2023-11-29 13:40:45 -05:00
k8s-infra-cherrypick-robot
aa3609046b
Ignore fake certificate for NGINXCertificateExpiry ( #10694 )
...
The fake certificate is only a fallback and it is okay-ish if it
expires.
Do not alert for its expiration.
Co-authored-by: Leonardo Taccari <leonardo@faire.ai>
2023-11-29 18:03:10 +01:00
k8s-infra-cherrypick-robot
7764e00ab4
Comment NGINXCertificateExpiry alert label matcher ( #10692 )
...
If a valid certificate is passed via `--default-ssl-certificate` it is
probably desiderable that we check its expiration!
Add a comment to explain that.
Co-authored-by: Leonardo Taccari <leonardo@faire.ai>
2023-11-29 18:00:46 +01:00
k8s-infra-cherrypick-robot
cd59304e25
chart: allow setting allocateLoadBalancerNodePorts ( #10693 )
...
Signed-off-by: Philipp Born <git@pborn.eu>
Co-authored-by: Philipp Born <git@pborn.eu>
2023-11-29 17:58:09 +01:00
k8s-infra-cherrypick-robot
0392e38a74
[release-1.9] feat(helm): add documentation about metric args ( #10695 )
...
* feat(helm): add documentation about metric args
This helps documenting this issue:
https://github.com/kubernetes/ingress-nginx/issues/8233
and relates to this documentation:
https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/monitoring.md#histogram-buckets
* fix
---------
Co-authored-by: Pierre Ozoux <pierre@ozoux.net>
2023-11-29 17:55:40 +01:00
k8s-infra-cherrypick-robot
c61bcf35e7
chore(dep): change lua-resty-cookie's repo ( #10691 )
...
since cloudflare has archived the upstream repo,
we choose a more active forked repo to use.
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-11-29 17:53:12 +01:00
Ana Claudia Riekstin
b23926b930
Add missing dash
...
Add missing dash
2023-11-29 15:56:10 +00:00
k8s-infra-cherrypick-robot
63af10b419
annotation validation - extended URLWithNginxVariableRegex from alphaNumericChars to extendedAlphaNumeric ( #10656 )
...
Co-authored-by: Filip Havlíček <filip.havlicek@livesport.eu>
2023-11-15 19:03:47 +01:00
k8s-infra-cherrypick-robot
8bd6acd597
fix: adjust unfulfillable validation check for session-cookie-samesite annotation ( #10604 )
...
Co-authored-by: Simon Wessel <9195792+simon-wessel@users.noreply.github.com>
2023-11-02 21:04:45 +01:00
k8s-infra-cherrypick-robot
967d5a6f76
fix: Validate x-forwarded-prefix annotation with RegexPathWithCapture ( #10603 )
...
Co-authored-by: Matt Dainty <matt@bodgit-n-scarper.com>
2023-11-02 08:58:44 +01:00
k8s-infra-cherrypick-robot
6f12689e65
Increase HSTS max-age to default to one year ( #10580 )
...
Co-authored-by: Michael Dreher <migg@migg.net>
2023-11-01 13:33:12 +01:00
Ricardo Katz
846d251814
Cherry pick fcgi fix and release v1.9.4 ( #10544 )
...
* Fix fcgi configmap value parsing (#10528 )
* Tidy on cherrypick
* Release v1.9.4
2023-10-22 23:10:38 +02:00
Ricardo Katz
be93503b57
Bump x/net ( #10517 )
2023-10-12 14:40:07 +02:00
Ricardo Katz
4cbdbfae2e
Release v1.9.2 ( #10511 )
2023-10-11 23:10:48 -03:00
k8s-infra-cherrypick-robot
ee82a126e3
[release-1.9] update nginx base, httpbun, e2e, helm webhook cert gen ( #10507 )
...
* update nginx base, httpbun, e2e, helm webhook cert gen
Signed-off-by: James Strong <strong.james.e@gmail.com>
* fix helm docs
Signed-off-by: James Strong <strong.james.e@gmail.com>
---------
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2023-10-12 01:02:59 +02:00
k8s-infra-cherrypick-robot
ed85ea100b
[release-1.9] add upstream patch for CVE-2023-44487 ( #10499 )
...
* add upstream patch
* add source
* remove auto-added depend
---------
Co-authored-by: Mark Dalton Gray <markdaltongray@gmail.com>
2023-10-11 10:16:56 +02:00
k8s-infra-cherrypick-robot
8ac7f23171
fix brotli build issues ( #10468 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2023-10-01 14:02:44 -07:00
k8s-infra-cherrypick-robot
4f07ab1add
upgrade owasp modsecurity core rule set to v3.3.5 ( #10437 )
...
Co-authored-by: Rashad Mammadli <mammadli.reshad@gmail.com>
2023-10-01 11:12:44 -07:00
Ricardo Katz
3538107c07
Start v1.9.1 release ( #10463 )
2023-09-29 20:07:57 -07:00
k8s-infra-cherrypick-robot
5952fc3dba
Accept backend protocol on any case ( #10461 )
...
Co-authored-by: Ricardo Katz <ricardo.katz@gmail.com>
2023-09-28 19:30:41 -07:00
k8s-infra-cherrypick-robot
da6a0f2c00
Chart: Rework network policies. ( #10438 )
...
Co-authored-by: Marco Ebert <marco@giantswarm.io>
2023-09-28 10:14:34 -07:00
k8s-infra-cherrypick-robot
7745d00bdc
Bump google.golang.org/grpc from 1.58.0 to 1.58.1 ( #10436 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.58.0 to 1.58.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.0...v1.58.1 )
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-23 15:20:56 -07:00
James Strong
4bd3d6b8a0
release 1.9.0
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-09-19 10:13:18 -04:00
k8s-infra-cherrypick-robot
b3992ab560
Rework mage ( #10418 )
...
Co-authored-by: Ricardo Katz <rkatz@vmware.com>
2023-09-17 19:22:30 -07:00
Ricardo Katz
940e6ac8ca
Start release of v1.9.0 beta0 ( #10407 )
2023-09-11 11:28:14 -07:00