Commit graph

655 commits

Author SHA1 Message Date
k8s-infra-cherrypick-robot
b881aaf138
Images: Trigger NGINX build. (#11736)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-08-05 14:36:56 -07:00
k8s-infra-cherrypick-robot
50108c72ba
docs: update OpenSSL Roadmap link (#11734)
Co-authored-by: Mmx <green.dusk8264@fastmail.com>
2024-08-05 17:33:47 +02:00
k8s-infra-cherrypick-robot
06653e0fbc
Go: Bump to v1.22.5. (#11731)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-08-05 17:33:35 +02:00
k8s-infra-cherrypick-robot
2bce6a13db
Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 in the all group (#11700)
* Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 in the all group

Bumps the all group with 1 update: [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo).

Updates `github.com/onsi/ginkgo/v2` from 2.19.0 to 2.19.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.19.0...v2.19.1)

* Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 elsewhere

---------

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-29 07:39:38 -07:00
k8s-infra-cherrypick-robot
f68f050d09
Images: Re-run test-runner build. (#11643)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-18 03:02:12 -07:00
k8s-infra-cherrypick-robot
ff64e1b306
Images: Trigger test-runner build. (#11639)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-18 02:58:04 -07:00
k8s-infra-cherrypick-robot
b14d04725e
Images: Trigger NGINX build. (#11631)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-17 14:52:13 -07:00
k8s-infra-cherrypick-robot
4aad186ba2
bump testing runner (#11626)
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2024-07-16 22:19:07 -07:00
k8s-infra-cherrypick-robot
bf259d3dba
remove modsecurity coreruleset test files from nginx image (#11619)
Co-authored-by: zeeZ <zeeZ@users.noreply.github.com>
2024-07-16 07:29:00 -07:00
k8s-infra-cherrypick-robot
b60945a4ab
unskip the ocsp tests and update images to fix cfssl bug (#11615)
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2024-07-16 01:24:46 -07:00
k8s-infra-cherrypick-robot
720ace11ef
Images: Bump test-runner. (#11604)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-11 08:04:02 -07:00
k8s-infra-cherrypick-robot
167963ad76
revert module upgrade (#11595)
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2024-07-10 19:57:39 -07:00
k8s-infra-cherrypick-robot
0300cb2214
Images: Bump kube-webhook-certgen. (#11583)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-08 12:37:55 -07:00
k8s-infra-cherrypick-robot
41f7a75151
update test runner go base to 3.20 (#11550)
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2024-07-03 14:31:05 -07:00
k8s-infra-cherrypick-robot
a0a93532f1
tag new test runner image with new nginx base 0.0.8 (#11549)
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2024-07-03 14:21:51 -07:00
k8s-infra-cherrypick-robot
477940af10
trigger build for NGINX-1.25 v0.0.8 (#11542)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2024-07-03 23:09:36 +02:00
k8s-infra-cherrypick-robot
96610e143b
Upgrade OWASP_MODSECURITY_CRS_VERSION 3.3.5 to 4.4.0 and update docs (#11548)
Signed-off-by: jessebot <jessebot@linux.com>
Co-authored-by: jessebot <jessebot@linux.com>
2024-07-03 14:05:35 -07:00
k8s-infra-cherrypick-robot
c53a951975
[feature] bump nginx to 1.25.5 and add http3 module (#11541)
* bump nginx to 1.25.5, add http3 module, and update lua-stream, lua_ngx, mimaloc, opentelemetry_cpp, opentelemetry_proto and opentelemtry_contrib

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

* revert opentelemetry and owasp updates

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

---------

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
Co-authored-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
2024-07-03 00:11:25 -07:00
k8s-infra-cherrypick-robot
742c620520
add ssl patches to nginx-1.25 image for coroutines to work in lua client hello and cert ssl blocks (#11534)
* feat: add ssl patches for coroutines to work in lua ssl blocks

Signed-off-by: Jon Carl <grounded042@joncarl.com>

* switch to include more patches

Signed-off-by: Jon Carl <grounded042@joncarl.com>

---------

Signed-off-by: Jon Carl <grounded042@joncarl.com>
Co-authored-by: Jon Carl <grounded042@joncarl.com>
2024-07-02 09:58:54 -07:00
k8s-infra-cherrypick-robot
5d3bcda0c2
bump alpine version to 3.20 to custom-error-pages (#11537)
Co-authored-by: Olivier Wenger <olivier.wenger@liip.ch>
2024-07-02 08:51:59 -07:00
k8s-infra-cherrypick-robot
22fe1d4217
Docs: Add information about HTTP/3 support. (#11525)
* update README to add information about HTTP/3 support

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

* Apply suggestions from code review

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* Apply suggestions from code review

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* update README

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

---------

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
Co-authored-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
Co-authored-by: Stepan Paksashvili <81509933+ipaqsa@users.noreply.github.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-01 14:01:02 +02:00
k8s-infra-cherrypick-robot
6f87f257e5
CI: Bump forgotten Ginkgo versions. (#11469)
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-06-15 08:39:29 -07:00
k8s-infra-cherrypick-robot
8f3968b396
upgrade to alpine 3.20 (#11438)
Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2024-06-10 02:39:04 -07:00
k8s-infra-cherrypick-robot
075ce7c13c
Bump Kubernetes version on images (#11403)
Co-authored-by: Ricardo Katz <ricardo.katz@gmail.com>
2024-05-31 09:11:06 -07:00
k8s-infra-cherrypick-robot
5ad073b96c
Bump golang.org/x/net in /images/kube-webhook-certgen/rootfs (#11284)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.23.0)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-19 06:51:47 -07:00
k8s-infra-cherrypick-robot
6879b6644e
force nginx rebuild (#11245)
* force nginx rebuild

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update test image and go version

Signed-off-by: James Strong <strong.james.e@gmail.com>

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
2024-04-10 08:17:48 -07:00
k8s-infra-cherrypick-robot
6a1e1fa2c5
bumped certgeimage tag (#11213)
Co-authored-by: longwuyuan <longwuyuan@gmail.com>
2024-04-05 03:39:57 -07:00
James Strong
33504cf2e6
Merge pull request #11203 from k8s-infra-cherrypick-robot/cherry-pick-11165-to-release-1.10
Owners: Promote Gacko to `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.
2024-04-04 11:47:17 -04:00
k8s-infra-cherrypick-robot
436df3e4a2
bump ginkgo to 2-17-1 in testrunner (#11204)
Co-authored-by: longwuyuan <longwuyuan@gmail.com>
2024-04-04 08:47:05 -07:00
Marco Ebert
4ab8ee0512 Images: Remove global owners from kube-webhook-certgen owners. 2024-04-04 15:01:47 +00:00
Marco Ebert
b44f3d248b Images: Remove owners as it's identical to global owners. 2024-04-04 15:01:47 +00:00
Marco Ebert
e380c5f321 Owners: Update URL in aliases. 2024-04-04 15:01:47 +00:00
k8s-infra-cherrypick-robot
506a02f750
bump ginkgo to v2.17.1 (#11186)
Signed-off-by: cpanato <ctadeu@gmail.com>
Co-authored-by: cpanato <ctadeu@gmail.com>
2024-04-01 05:11:33 -07:00
k8s-infra-cherrypick-robot
48069d3d12
fixes brotli build issue (#11187)
Co-authored-by: u5surf <u5.horie@gmail.com>
2024-04-01 04:19:33 -07:00
k8s-infra-cherrypick-robot
c7d42b95d7
Bump google.golang.org/protobuf in /images/custom-error-pages/rootfs (#11128)
Bumps google.golang.org/protobuf from 1.28.0 to 1.33.0.

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-14 07:59:26 -07:00
k8s-infra-cherrypick-robot
9ef5800e42
Bump google.golang.org/protobuf in /images/kube-webhook-certgen/rootfs (#11122)
Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-14 00:45:49 -07:00
Marco Ebert
8d3d4a33bf
Chores: Pick patches from main. (#11103)
* Release version v1.10.0

* set deploy url to v1-10-0 in docs

* quotes around numbers fort ports definitions

* Bump dorny/paths-filter from 3.0.1 to 3.0.2

Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](ebc4d7e9eb...de90cc6fb3)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

* Bump aquasecurity/trivy-action from 0.17.0 to 0.18.0

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.17.0 to 0.18.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](84384bd6e7...062f259268)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

* Bump github/codeql-action from 3.24.5 to 3.24.6

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.5 to 3.24.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](47b3d888fe...8a470fddaf)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

* Bump github.com/prometheus/common from 0.48.0 to 0.49.0

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.48.0 to 0.49.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

* Bump docker/setup-buildx-action from 3.0.0 to 3.1.0

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](f95db51fdd...0d103c3126)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

* Bump github.com/stretchr/testify from 1.8.4 to 1.9.0

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.4 to 1.9.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

* Bump actions/download-artifact from 4.1.2 to 4.1.4

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.2 to 4.1.4.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](eaceaf801f...c850b930e6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

* Update README.md

remove older version, left latest for release train.

* docs: update the 404 link to FAQ

* bump golang

* golangci-lint update, ci cleanup, group dependabot updates

* bump golangci-lint to v1.56.x

* cleanup empty lines

* group dependabot updates

* run on job changes as well

* remove deprecated checks

* fix lints and format

* Bump github.com/prometheus/common from 0.49.0 to 0.50.0

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.49.0 to 0.50.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

* Bump the all group with 1 update

Bumps the all group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).

Updates `google.golang.org/grpc` from 1.62.0 to 1.62.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.62.0...v1.62.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

* Bump the all group with 1 update

Bumps the all group with 1 update: [actions/add-to-project](https://github.com/actions/add-to-project).

Updates `actions/add-to-project` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](31b3f3ccdc...0609a2702e)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

* Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.15.0 to 2.16.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.15.0...v2.16.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

---------

Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: longwuyuan <longwuyuan@gmail.com>
Co-authored-by: Bartosz Fenski <fenio@debian.org>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Grinish <grinish@gmail.com>
Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
2024-03-11 14:30:46 -07:00
Ricardo Katz
862b05d913
Fix kubewebhook image tag (#11033) 2024-02-27 15:51:37 -03:00
Ricardo Katz
fa0bf81984
Bump go libraries (#11023)
* Bump go libraries

* Fix update codegen execution

* Fix errors on klog

* Fix gzip test

* Bump libraries on webhook certgen

* Fix webhook-certgen compilation
2024-02-27 09:52:42 -08:00
Ricardo Katz
0a87031bbd
Bump modsecurity on nginx 1.25 (#11024) 2024-02-26 17:08:45 -08:00
Ricardo Katz
391a304b10
Bump grpc and reintroduce OTEL compilation (#11021)
* Bump grpc and reintroduce OTEL compilation

* Enable s390x again
2024-02-26 15:05:00 -08:00
Milas Bowman
e78af97ecd
chore(deps): upgrade headers-more module to 0.37 (#10991)
https://github.com/openresty/headers-more-nginx-module/compare/v0.34...v0.37

Signed-off-by: Milas Bowman <devnull@milas.dev>
2024-02-26 04:32:18 -08:00
Ricardo Katz
585c297dda
Fix golang makefile var name (#10932) 2024-01-28 15:59:52 -08:00
Ricardo Katz
59daa4c327
Fixing image push (#10931) 2024-01-28 19:49:15 -03:00
Ricardo Katz
16821e4871
Bump alpine to 3.19.1 (#10930) 2024-01-28 13:53:29 -08:00
Ricardo Katz
5acc4230ee
Bump go to v1.21.6 and set a single source of truth (#10926) 2024-01-27 17:15:14 -08:00
Ricardo Katz
02e6ebc95a
Add OTEL build test and for NGINX v1.25 (#10889)
* Add OTEL build test

* Simplify otel compilation

* Remove http2 deprecated arg

* Move image build to CI

* Turn image from scratch to optimize usage

* rollback image from scratch

* Final reviews on nginx v1.25 image

* Remove s390x from final image
2024-01-27 07:33:50 -08:00
Long Wu Yuan
760bf8eb0c
fix run command in dockerfile of test-runner-image (#10921) 2024-01-26 19:21:16 +01:00
longwuyuan
f6a28feb63 bump ginkgo to 2-15-0 2024-01-23 00:15:40 +05:30
Long Wu Yuan
103dae67dc
changed yamale install from pip to manual download & install (#10886) 2024-01-22 12:08:48 +01:00