Commit graph

7230 commits

Author SHA1 Message Date
James Strong
a5672c4362
Merge pull request #10785 from k8s-infra-cherrypick-robot/cherry-pick-10650-to-release-1.9
[release-1.9] [charts] add controller.admissionWebhooks.networkPolicyEnabled
2023-12-20 16:38:01 +01:00
Jmnote
52bd583fee .Values.controller.admissionWebhooks.patch.networkPolicy.enabled 2023-12-20 15:32:26 +00:00
Jmnote
d7e84e8722 add controller.admissionWebhooks.networkPolicyEnabled
Signed-off-by: Jmnote <opcore@gmail.com>
2023-12-20 15:32:26 +00:00
James Strong
f18a66dca4
update nginx build (#10781)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-20 15:24:54 +01:00
James Strong
ca91adaad6
update images from golang upgrade (#10762)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-15 21:14:24 +01:00
k8s-infra-cherrypick-robot
7100fecafb
fix: remove tcpproxy copy error handling (#10715)
Co-authored-by: Zadkiel Aharonian <hello@zadkiel.fr>
2023-12-01 17:25:56 +01:00
James Strong
6e21bfd7a6
Merge pull request #10703 from k8s-infra-cherrypick-robot/cherry-pick-10565-to-release-1.9
[release-1.9] Chart: Improve #10539.
2023-11-29 14:57:46 -05:00
Marco Ebert
a4f3cb0067 Templates: Add forgotten namespace definitions. 2023-11-29 19:55:36 +00:00
Marco Ebert
c34bd82d5b KEDA: Remove comment. 2023-11-29 19:55:36 +00:00
Marco Ebert
c89114a62a Admission Webhooks/Validating Webhook: Make use of ingress-nginx.namespace. 2023-11-29 19:55:36 +00:00
Marco Ebert
15ce4fc172 Templates: Remove quotes.
In alignment to others. Also does not make sense as `namespace` must conform to DNS.
2023-11-29 19:55:36 +00:00
Marco Ebert
78ffac9766 Helpers: Align ingress-nginx.namespace to ingress-nginx.name. 2023-11-29 19:55:36 +00:00
James Strong
af04aa5fa9
Merge pull request #10702 from k8s-infra-cherrypick-robot/cherry-pick-10523-to-release-1.9
[release-1.9] Admission Webhook: Truncate name.
2023-11-29 14:53:15 -05:00
Marco Ebert
a49ca2e90b Admission Webhook: Truncate name. 2023-11-29 19:52:11 +00:00
James Strong
a911a88bd0
Merge pull request #10701 from k8s-infra-cherrypick-robot/cherry-pick-10594-to-release-1.9
[release-1.9] Fix minor typo in Helm chart values
2023-11-29 14:43:06 -05:00
James Strong
1192b01278
Merge pull request #10700 from k8s-infra-cherrypick-robot/cherry-pick-10255-to-release-1.9
[release-1.9] DOCS Remove support for running Both
2023-11-29 14:42:49 -05:00
Roberto Devesa
358d1fb18e Fix typo 2023-11-29 19:42:11 +00:00
James Strong
68901bcec1
Merge pull request #10699 from k8s-infra-cherrypick-robot/cherry-pick-10539-to-release-1.9
[release-1.9] helm feat: add namespace overrides
2023-11-29 14:35:00 -05:00
Matt Clegg
32cdec4cb9 DOCS Remove support for running Both 2023-11-29 19:33:05 +00:00
jasine
bf5d30922f fix: set max length and trim last "-" 2023-11-29 19:22:46 +00:00
jasine
d9aac9e35f fix: description in value 2023-11-29 19:22:46 +00:00
jasine
e6f07254fb fix: readme description 2023-11-29 19:22:46 +00:00
jasine
e4ebc3de57 add value in readme 2023-11-29 19:22:46 +00:00
jasine
8c8577cafc feat: add namespace overrides 2023-11-29 19:22:46 +00:00
James Strong
bc2bc3d037
Merge pull request #10696 from k8s-infra-cherrypick-robot/cherry-pick-10663-to-release-1.9
[release-1.9] Fix typo in yaml
2023-11-29 13:40:45 -05:00
k8s-infra-cherrypick-robot
aa3609046b
Ignore fake certificate for NGINXCertificateExpiry (#10694)
The fake certificate is only a fallback and it is okay-ish if it
expires.

Do not alert for its expiration.

Co-authored-by: Leonardo Taccari <leonardo@faire.ai>
2023-11-29 18:03:10 +01:00
k8s-infra-cherrypick-robot
7764e00ab4
Comment NGINXCertificateExpiry alert label matcher (#10692)
If a valid certificate is passed via `--default-ssl-certificate` it is
probably desiderable that we check its expiration!

Add a comment to explain that.

Co-authored-by: Leonardo Taccari <leonardo@faire.ai>
2023-11-29 18:00:46 +01:00
k8s-infra-cherrypick-robot
cd59304e25
chart: allow setting allocateLoadBalancerNodePorts (#10693)
Signed-off-by: Philipp Born <git@pborn.eu>
Co-authored-by: Philipp Born <git@pborn.eu>
2023-11-29 17:58:09 +01:00
k8s-infra-cherrypick-robot
0392e38a74
[release-1.9] feat(helm): add documentation about metric args (#10695)
* feat(helm): add documentation about metric args

This helps documenting this issue:
https://github.com/kubernetes/ingress-nginx/issues/8233

and relates to this documentation:
https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/monitoring.md#histogram-buckets

* fix

---------

Co-authored-by: Pierre Ozoux <pierre@ozoux.net>
2023-11-29 17:55:40 +01:00
k8s-infra-cherrypick-robot
c61bcf35e7
chore(dep): change lua-resty-cookie's repo (#10691)
since cloudflare has archived the upstream repo,
we choose a more active forked repo to use.

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-11-29 17:53:12 +01:00
Ana Claudia Riekstin
b23926b930 Add missing dash
Add missing dash
2023-11-29 15:56:10 +00:00
k8s-infra-cherrypick-robot
63af10b419
annotation validation - extended URLWithNginxVariableRegex from alphaNumericChars to extendedAlphaNumeric (#10656)
Co-authored-by: Filip Havlíček <filip.havlicek@livesport.eu>
2023-11-15 19:03:47 +01:00
k8s-infra-cherrypick-robot
8bd6acd597
fix: adjust unfulfillable validation check for session-cookie-samesite annotation (#10604)
Co-authored-by: Simon Wessel <9195792+simon-wessel@users.noreply.github.com>
2023-11-02 21:04:45 +01:00
k8s-infra-cherrypick-robot
967d5a6f76
fix: Validate x-forwarded-prefix annotation with RegexPathWithCapture (#10603)
Co-authored-by: Matt Dainty <matt@bodgit-n-scarper.com>
2023-11-02 08:58:44 +01:00
k8s-infra-cherrypick-robot
6f12689e65
Increase HSTS max-age to default to one year (#10580)
Co-authored-by: Michael Dreher <migg@migg.net>
2023-11-01 13:33:12 +01:00
Ricardo Katz
846d251814
Cherry pick fcgi fix and release v1.9.4 (#10544)
* Fix fcgi configmap value parsing (#10528)

* Tidy on cherrypick

* Release v1.9.4
2023-10-22 23:10:38 +02:00
Ricardo Katz
be93503b57
Bump x/net (#10517) 2023-10-12 14:40:07 +02:00
Ricardo Katz
4cbdbfae2e
Release v1.9.2 (#10511) 2023-10-11 23:10:48 -03:00
k8s-infra-cherrypick-robot
ee82a126e3
[release-1.9] update nginx base, httpbun, e2e, helm webhook cert gen (#10507)
* update nginx base, httpbun, e2e, helm webhook cert gen

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix helm docs

Signed-off-by: James Strong <strong.james.e@gmail.com>

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2023-10-12 01:02:59 +02:00
k8s-infra-cherrypick-robot
ed85ea100b
[release-1.9] add upstream patch for CVE-2023-44487 (#10499)
* add upstream patch

* add source

* remove auto-added depend

---------

Co-authored-by: Mark Dalton Gray <markdaltongray@gmail.com>
2023-10-11 10:16:56 +02:00
k8s-infra-cherrypick-robot
8ac7f23171
fix brotli build issues (#10468)
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2023-10-01 14:02:44 -07:00
k8s-infra-cherrypick-robot
4f07ab1add
upgrade owasp modsecurity core rule set to v3.3.5 (#10437)
Co-authored-by: Rashad Mammadli <mammadli.reshad@gmail.com>
2023-10-01 11:12:44 -07:00
Ricardo Katz
3538107c07
Start v1.9.1 release (#10463) 2023-09-29 20:07:57 -07:00
k8s-infra-cherrypick-robot
5952fc3dba
Accept backend protocol on any case (#10461)
Co-authored-by: Ricardo Katz <ricardo.katz@gmail.com>
2023-09-28 19:30:41 -07:00
k8s-infra-cherrypick-robot
da6a0f2c00
Chart: Rework network policies. (#10438)
Co-authored-by: Marco Ebert <marco@giantswarm.io>
2023-09-28 10:14:34 -07:00
k8s-infra-cherrypick-robot
7745d00bdc
Bump google.golang.org/grpc from 1.58.0 to 1.58.1 (#10436)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.0 to 1.58.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.0...v1.58.1)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-23 15:20:56 -07:00
James Strong
4bd3d6b8a0
release 1.9.0
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-09-19 10:13:18 -04:00
k8s-infra-cherrypick-robot
b3992ab560
Rework mage (#10418)
Co-authored-by: Ricardo Katz <rkatz@vmware.com>
2023-09-17 19:22:30 -07:00
Ricardo Katz
940e6ac8ca
Start release of v1.9.0 beta0 (#10407) 2023-09-11 11:28:14 -07:00
dependabot[bot]
300cff1437
Bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.12.0 (#10355)
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.9.5 to 2.12.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.9.5...v2.12.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 09:56:11 -07:00