Commit graph

258 commits

Author SHA1 Message Date
Ofir Shtrull
83f4332572
add new serivce type for internal use (#10727)
* add new serivce type for internal use

* bump chart version

* lint

* fix tests

* fix readme

* Update charts/ingress-nginx/Chart.yaml

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* Update charts/ingress-nginx/values.yaml

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* rerun helm-docs

* Update charts/ingress-nginx/templates/controller-service-internal.yaml

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* fix values

* fix values

---------

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2023-12-05 14:47:20 +01:00
Stavros Foteinopoulos
1f06e26080
Add extra configMaps support to helm chart (#10673)
* Add extra configMaps support to helm chart

Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>

* Introducing unit tests for helm chart

Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>

---------

Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
2023-12-02 14:26:23 +01:00
Jmnote
bfc2300c3d
[charts] add controller.admissionWebhooks.networkPolicyEnabled (#10650)
* add controller.admissionWebhooks.networkPolicyEnabled

Signed-off-by: Jmnote <opcore@gmail.com>

* .Values.controller.admissionWebhooks.patch.networkPolicy.enabled

---------

Signed-off-by: Jmnote <opcore@gmail.com>
2023-11-29 22:39:51 +01:00
Marco Ebert
8b026f42d5
Chart: Tighten securityContexts and Pod Security Policies. (#10491)
* Values: Fix docs of `controller.podSecurityContext` & `controller.sysctls`.

* Values: Add missing `controller.containerSecurityContext`.

Already in use, but has never been added to values.

* Values: Fix docs of `defaultBackend.podSecurityContext` & `defaultBackend.containerSecurityContext`.

* Helpers: Rename `controller.containerSecurityContext` to `ingress-nginx.controller.containerSecurityContext`.

Due to alignment with other templates.

* Helpers: Improve `extraModules`.

- Make `command` a multiline list.
- Fix `toYaml` usage.
- Remove `toYaml` where not necessary.

* Helpers: Move `ingress-nginx.defaultBackend.fullname`.

* Helpers: Add `ingress-nginx.defaultBackend.containerSecurityContext`.

Extracts the default backend `securityContext` into a template, as for the controller.

* Controller: Fix indentation of `controller.podSecurityContext` & `controller.sysctls`.

* Controller: Improve `controller.extraModules` & `controller.opentelemetry`.

- Add `controller.extraModules.distroless` & `controller.extraModules.resources`.
- Add `controller.opentelemetry.name` & `controller.opentelemetry.distroless`.
- Align `extraModules` inclusion for `controller.extraModules` & `controller.opentelemetry`.
- Remove redundant whitespaces.

* Controller/PSP: Align indentation.

* Controller/PSP: Remove quotes.

* Controller/PSP: Improve comments.

* Controller/PSP: Reorder fields.

See https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy.

* Admission Webhooks: Fix indentation of `controller.admissionWebhooks.patch.securityContext`.

* Admission Webhooks/PSP: Align indentation.

* Admission Webhooks/PSP: Reorder fields.

* Admission Webhooks/PSP: Align condition.

* Admission Webhooks/ClusterRole: Align PSP rule.

* Default Backend/PSP: Align indentation.

* Default Backend/PSP: Reorder fields.

See https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy.

* Values: Tighten `controller.image`.

Due to recent changes, the controller image can be run without privilege escalation:

- https://github.com/kubernetes/ingress-nginx/issues/8499
- https://github.com/kubernetes/ingress-nginx/pull/7449

* Values: Tighten `controller.extraModules.containerSecurityContext`.

* Values: Tighten `controller.opentelemetry.containerSecurityContext`.

* Values: Tighten `controller.admissionWebhooks.*.securityContext`.

Moves the pod `securityContext` to the containers to not interfere with injected containers.

* Values: Tighten `defaultBackend.image`.
2023-11-07 18:52:36 +01:00
Marco Ebert
6499a6bd04
Chart: Fix pod selectors in NOTES.txt. (#10617)
Also improve other `kubectl` commands.
2023-11-07 18:46:40 +01:00
Philipp B
d6a0f46c32
chart: allow setting allocateLoadBalancerNodePorts (#10585)
Signed-off-by: Philipp Born <git@pborn.eu>
2023-11-02 22:45:46 +01:00
Marco Ebert
9cb3919e84
Chart: Improve #10539. (#10565)
* Helpers: Align `ingress-nginx.namespace` to `ingress-nginx.name`.

* Templates: Remove quotes.

In alignment to others. Also does not make sense as `namespace` must conform to DNS.

* Admission Webhooks/Validating Webhook: Make use of `ingress-nginx.namespace`.

* KEDA: Remove comment.

* Templates: Add forgotten namespace definitions.
2023-11-01 22:59:56 +01:00
Marco Ebert
0120a2df48
Admission Webhook: Truncate name. (#10523) 2023-10-29 18:26:05 +01:00
jasine
7ce6cc88d8
feat: add namespace overrides (#10539)
* feat: add namespace overrides

* add value in readme

* fix: readme description

* fix: description in value

* fix: set max length and trim last "-"
2023-10-24 19:53:46 +02:00
Matt Clegg
b9d8bb406c
DOCS Remove support for running Both (#10255) 2023-10-12 19:51:40 +02:00
Marco Ebert
0b0ce031ac
Chart: Rework network policies. (#10238) 2023-09-24 08:02:57 -07:00
Marco Ebert
8f54b538d9
DaemonSet: Implement OpenTelemetry resources. (#10409) 2023-09-12 23:02:14 -07:00
František Hána
06c64bf567
helm: add resources to opentelemetry init container (#10300) 2023-09-11 19:36:12 -07:00
Marco Ebert
2d03da6334
Deployment/DaemonSet: Fix templating & value. (#10240) 2023-09-10 07:20:09 -07:00
Marco Ebert
4869c8b462
Deployment/DaemonSet: Template topologySpreadConstraints. (#10259) 2023-09-10 05:38:10 -07:00
Matt Clegg
c9ca168364
BUGFIX incorrect indentation (#10254)
Error: Failed to render chart: exit status 1: Error: YAML parse error on ingress-nginx/templates/controller-serviceaccount.yaml: error converting YAML to JSON: yaml: line 14: mapping values are not allowed in this context
  Use --debug flag to render out invalid YAML
  Error: plugin "diff" exited with error
2023-09-04 23:57:51 -07:00
Kazuki Suda
e17927ba52
helm: Use .Release.Namespace as default for ServiceMonitor namespace (#10249)
Signed-off-by: Kazuki Suda <kazuki.suda@gmail.com>
2023-08-11 07:09:27 -07:00
Ehsan Saei
3baa591bb5
promote distroless otel init image (#10257) 2023-08-02 03:34:49 -07:00
Jan-Otto Kröpke
afd1311f85
[helm] configure allow to configure hostAliases (#10180)
Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>
2023-07-28 04:41:56 -07:00
Ricardo Katz
c5f348ea2e
Implement annotation validation (#9673)
* Add validation to all annotations

* Add annotation validation for fcgi

* Fix reviews and fcgi e2e

* Add flag to disable cross namespace validation

* Add risk, flag for validation, tests

* Add missing formating

* Enable validation by default on tests

* Test validation flag

* remove ajp from list

* Finalize validation changes

* Add validations to CI

* Update helm docs

* Fix code review

* Use a better name for annotation risk
2023-07-21 20:32:07 -07:00
Jan-Otto Kröpke
a297cedb7a
[helm] pass service annotations through helm tpl engine (#10084)
Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>
2023-07-20 11:00:10 -07:00
amirschw
1dd8d0cfd7
Ignore deployment template's replicas if KEDA is enabled (#9534) 2023-07-20 10:34:11 -07:00
kylekluever
8b24fc98d2
Fix loadBalancerClass value (#10139) 2023-06-27 05:42:32 -07:00
LucasBoisserie
0b4c98b7c3
feat(helm): Add loadBalancerClass (#9562) 2023-06-22 07:59:40 -07:00
Ehsan Saei
436df32c2c
add distroless otel init (#10035)
add distroless otel init
2023-06-12 03:47:48 -07:00
Micah Huber
051aa6d40d
add support for keda fallback settings (#9993) 2023-06-11 11:51:46 -07:00
Long Wu Yuan
7d27f39953
ensured hpa mem spec before cpu spec (#10043) 2023-06-05 08:07:27 -07:00
Peter Jakubis
df0be089d2
PodDisruptionBudget spec logic update (#9904)
Signed-off-by: Peter Jakubis <balonik32@gmail.com>
2023-05-25 10:26:53 -07:00
Federico Cuello
8c7981bfa2
helm: Fix opentelemetry module installation for daemonset (#9792)
* fix: opentelemetry module for controller-daemonset

* fix: Align controller-daemonset with controller-deployment

* Fix typo in github/workflows/ci
2023-05-22 07:42:34 -07:00
Marco Ebert
06612e6ffd
HPA: Use capabilites & align manifests. (#9521) 2023-05-11 09:37:03 -07:00
vkanelov
f18826b73e
add option for annotations in PodDisruptionBudget (#9843)
add option for annotations in PodDisruptionBudget
2023-05-10 14:39:14 -07:00
Jan-Otto Kröpke
d8f54420a4
[helm] Support custom port configuration for internal service (#9846)
Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de>
2023-05-01 08:18:19 -07:00
plynch-magnolia
01d2646538
Adding resource type to default HPA configuration to resolve issues with Terraform helm chart usage (#9803) 2023-04-24 08:33:02 -07:00
Taehyun Kim
e3c9382fc9
fix: controller psp's volume config (#9740)
* fix: controller psp's volume config

* revert chart version
2023-03-21 06:41:08 -07:00
Adam Jacques
00bfb2e84a
Fix several Helm YAML issues with extraModules and extraInitContainers (#9709)
* Fix indention issue for DaemonSets when using extraModules and extraInitContainers

* Improve documentation

* Unify and fix templating

* Enable support for the opentelemetry from values.yaml
2023-03-21 06:37:08 -07:00
Marco Ebert
58e5a2c01f
Chart: Drop controller.headers, rework DH param secret. (#9659) 2023-03-16 18:39:16 -07:00
Marco Ebert
47eb3a17fd
Deployment/DaemonSet: Label pods using ingress-nginx.labels. (#9732) 2023-03-14 06:44:17 -07:00
Do Hoang Khiem
e2d076c4fc
HPA: autoscaling/v2beta1 deprecated, bump apiVersion to v2 for defaultBackend (#9731) 2023-03-14 04:32:18 -07:00
James Strong
01c9a2bf25
Revert Implement pathType validation (#9511) (#9607)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-02-12 22:57:29 -08:00
James Strong
7d1c47ab54
Switch logic on path type validation and setting it to false (#9543)
* update path type validation to be false and update e2e test scripts

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update to make tests clear

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update test params

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Adding else per pr comments

Signed-off-by: James Strong <james.strong@chainguard.dev>

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
Signed-off-by: James Strong <james.strong@chainguard.dev>
2023-01-31 17:09:06 -08:00
Ricardo Katz
da98c744b9
Implement pathType validation (#9511) 2023-01-16 23:51:23 -03:00
Tomas Hulata
5b2a9475dc
feat: support topology aware hints (#9165)
* support topology aware hints

Signed-off-by: tombokombo <tombo@sysart.tech>

* add flag to enable topology and fixes

Signed-off-by: tombokombo <tombo@sysart.tech>

* update readme

Signed-off-by: tombokombo <tombo@sysart.tech>

* add e2e test

Signed-off-by: tombokombo <tombo@sysart.tech>

* isolate topology test

Signed-off-by: tombokombo <tombo@sysart.tech>

* gofmt fix

Signed-off-by: tombokombo <tombo@sysart.tech>

Signed-off-by: tombokombo <tombo@sysart.tech>
2023-01-15 18:46:50 -08:00
yutachaos
bbf7c79f96
Add update updateStrategy and minReadySeconds for defaultBackend (#8506)
* Add update updateStrategy and minReadySeconds for defaultBackend

* Bump chart

* Fixed docs helm-docs version
2023-01-08 14:37:27 -08:00
Marco Ebert
5b0403314c
Admission Webhooks/Job: Add NetworkPolicy. (#9218) 2023-01-08 13:59:28 -08:00
Jan-Otto Kröpke
d7674e4323
feat(helm): Optionally use cert-manager instead admission patch (#9279) 2022-12-07 04:16:38 -08:00
Ehsan Saei
3474c33e15
update OpenTelemetry image (#9308)
* update OpenTelemetry image

* review comment

* helm-docs

* clean
2022-12-05 00:55:02 -08:00
Sjouke de Vries
27ffeeb18f
fix(hpa): deprecated api version, bump to v2 (#9348)
* fix(hpa): deprecated api version, bump to v2

* chore(hpa): abstract hpa apiVersion to helm value

* feat(hpa): add controller.autoscaling.apiVersion docs in README

* docs(hpa): quotes around apiVersion string type

* chore(hpa): run helm-docs in repo

* chore(hpa): remove local helm-docs module install and output

* docs(helm): add hpa controller.autoscaling.apiVersion description

* docs(hpa): remove autoscaling.apiVersion description as it fails ci
2022-12-04 11:35:56 -08:00
aimuz
b34f6ef324
remove the configmap related permissions (#9310)
ref: https://github.com/kubernetes/ingress-nginx/pull/8921
We have used the Lease API for selection

Signed-off-by: aimuz <mr.imuz@gmail.com>

Signed-off-by: aimuz <mr.imuz@gmail.com>
2022-11-23 17:38:03 -08:00
Michael Wittig
69a811dde9
fix broken annotation yaml (#9243) 2022-11-10 05:48:56 -08:00
Marco Ebert
170af7be88
PDB: Add maxUnavailable. (#9278) 2022-11-10 03:20:54 -08:00
pellmont
726d7e6239
add containerSecurityContext to extraModules init containers (kubernetes#9016) (#9242) 2022-11-10 02:38:54 -08:00
Njegos Railic
4d4358f673
Adding support for disabling liveness and readiness probes in the Helm chart (#9238) 2022-11-08 06:44:25 -08:00
Youssef Bel Mekki
ac1a3363bd
add:(admission-webhooks) ability to set securityContext for job-containers createSecret and patchWebhook (#9186)
Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>

Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>
2022-10-25 14:14:36 -07:00
FutureMatt
249780737c
#7652 - Updated Helm chart to use the fullname for the electionID if not specified. (#9133)
* Automatically generate electionID from the fullname or use the set value.

* Updated the chart readme to include the new empty default.

* Rebuilt the Helm readme with helm-docs.
2022-10-13 07:37:01 -07:00
Marco Ebert
83aa9e472f
Rename controller-wehbooks-networkpolicy.yaml -> controller-webhooks-networkpolicy.yaml. (#9123) 2022-10-05 09:14:05 -07:00
Matt Lauber
dacb8da058
Fix yaml formatting error with multiple annotations (#9104)
When using multiple values for the `serviceAccount.annotations` values, the first line ends up indented 2 further than the following lines, resulting in a invalid yaml
2022-09-30 08:06:29 -07:00
James Strong
8f18c0f973
Merge pull request #9046 from anders-swanson/revert-8665-metrics-port-name
Parameterize metrics port name
2022-09-30 11:04:00 -04:00
Ehsan Saei
1a078af307
fix chroot module mount path (#9090) 2022-09-28 14:02:30 -07:00
Wilmar den Ouden
67f7d3da63
fix: do not apply job-patch psp on Kubernetes 1.25 and newer (#9074)
* fix: do not apply job-patch psp on Kubernetes 1.25 and newer

Signed-off-by: wilmarguida <w.denouden@guida.nl>

* fix: bump kubernetes version for helm chart CI to 1.25.0

Signed-off-by: wilmarguida <w.denouden@guida.nl>

Signed-off-by: wilmarguida <w.denouden@guida.nl>
2022-09-24 04:38:05 -07:00
Tomas Hulata
3579ed0487
feat: switch from endpoints to endpointslices (#8890)
* endpointslices

Signed-off-by: tombokombo <tombo@sysart.tech>

* cleanup

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix rbac

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix comments

Signed-off-by: tombokombo <tombo@sysart.tech>

* cleanup store, add store tests

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix copyright date

Signed-off-by: tombokombo <tombo@sysart.tech>

Signed-off-by: tombokombo <tombo@sysart.tech>
2022-09-23 12:38:04 -07:00
Anders Swanson
e7c793f65d parameterize port name 2022-09-12 12:34:40 -07:00
Anders Swanson
6ef7317581 Revert "Metrics port name (Helm) (#8665)"
This reverts commit adeb84aa38.
2022-09-12 07:28:44 -07:00
James Strong
db3cdc04e4
release 1.3.1 (#9014)
* release 1.3.1

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Fix chart linter

* Fix helm docs

* Fix helm docs

* fix helm docs

* Add warning about lease change

* Disable PSP in v1.25

* rollback cluster in helmchart to psp tests

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2022-09-05 04:28:36 -07:00
Jintao Zhang
ffcf13c09b
revert changes to configmap resource permissions (#8959)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-08-23 00:29:24 -07:00
Anders Swanson
adeb84aa38
Metrics port name (Helm) (#8665) 2022-08-22 16:20:09 -07:00
omichels
cad575e923
securityContext in admission-webhook now configurable e.g. to set seccompProfiles (#8930)
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
2022-08-22 16:12:09 -07:00
Mangirdas Judeikis
1791b62e45
Add NetworkPolicy support (#8928)
* Add NetworkPolicy support

* add doc for np
2022-08-22 16:08:09 -07:00
Jintao Zhang
730174f73d
feat: using LeaseLock for election (#8921)
We removed the use of configmap as an election lock, so we will use the
Lease API to complete the election.

Before this, we used `MultiLock` to facilitate smooth migration of
existing users of ingress-nginx from configmap to LeaseLock.

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-08-22 15:38:16 -07:00
Steven Bambling
9325819345
Add condition for monitoring.coreos.com/v1 API (#8770) 2022-07-10 14:05:47 -07:00
Jintao Zhang
cf4dca8e43
feat: migrate leaderelection lock to leases (#8733)
* feat: migrate leaderelection lock to leases

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* Update RBAC

Co-authored-by: Shafeeque E S <shafeeque.e.s@sap.com>
2022-07-09 05:37:46 -07:00
Eric84626
7806159b38
support extraEnvs for job resources in helm chart (#8545)
* support extraEnvs for job resources in helm chart

Signed-off-by: Li, Eric <Xiannan.li@fmr.com>

* Update helm doc

* Update helm doc

* Updated helm doc - add controller.admissionWebhooks.extraEnvs

* Added some test data for webhook controller.admissionWebhooks.extraEnvs

* added new line at the end of deployment-webhook-extraEnvs-values.yaml

* Fixed helm chart test issue
2022-06-21 07:16:26 -07:00
Mac Chaffee
6c3a237d7d
Add CAP_SYS_CHROOT to DS/PSP when needed (#8587)
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-05-16 06:30:18 -07:00
Pavel Selivanov
61fcca3a3a
Add portNamePreffix Helm chart parameter (#8458)
Allow user to set custom preffix for TCP and UDP ports
2022-05-10 09:13:43 -07:00
Ricardo Katz
3def835a6a
Jail/chroot nginx process inside controller container (#8337)
* Initial work on chrooting nginx process

* More improvements in chroot

* Fix charts and some file locations

* Fix symlink on non chrooted container

* fix psp test

* Add e2e tests to chroot image

* Fix logger

* Add internal logger in controller

* Fix overlay for chrooted tests

* Fix tests

* fix boilerplates

* Fix unittest to point to the right pid

* Fix PR review
2022-04-08 21:48:04 -07:00
James Strong
ac3b86b2c3
release 1.1.3 details (#8411)
* release 1.1.3 details
fix the readme with right sha and version
remove helm label
fix issue 8329
fix the 1.20 service after the fix for ipv6
udpate readme and change for patches

* update helm doc

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 09:14:46 -07:00
thomasbruggink
9180ef1ee4
Add the shareProcessNamespace as a configurable setting. (#8287) 2022-03-14 08:51:57 -07:00
dylan-bitovi
4ecb3520c8
Add fsGroup value to admission-webhooks/job-patch charts (#8267)
* added fsGroup to admission createSecret and patchWebhook job

* added fsGroup to admission createSecret and patchWebhook job

* modified helm/README.md to add value for fsGroup

* fixed patch job values ordering

* remove manually edited README for replacement with helm-docs generated version

* re-adding charts/README.md generated by helm-docs
2022-02-28 07:10:57 -08:00
Romain Dauby
527361c8eb
Minor fix for missing pathType property (#8244) 2022-02-20 13:14:11 -08:00
Tomas Hulata
4b4895b53b
add ingress.class (#8136)
Signed-off-by: tombokombo <tombo@sysart.tech>
2022-02-06 12:18:51 -08:00
stoupance
0f464333a9
Remove Capabilities.APIVersions for Kustomize to parse file (#7829) 2022-02-01 09:34:10 -08:00
Billy Walker
0c2070ef4a
Adding annotations to the controller service account (#8173)
* fix: adding annotations to the controller service account

* fix: adding annotations to the controller service account
2022-01-26 19:12:50 -08:00
Arthur Woimbée
a665a409da
helm: ServiceMonitor: sane default namespaceSelector (#7998)
* helm: service-monitor: sane default namespaceSelector

* chart version bump (4.0.16)
2022-01-17 15:28:49 -08:00
Marc Portabella Clotet
4badf20173
#7271 feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1 (#8155)
* feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1

* fix: added-eol

* feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1

* fix: added-eol
2022-01-17 15:16:49 -08:00
Nicolas Lamirault
3732681588
Support additonal labels and all Kubernetes recommanded labels (#7186)
* Add: Kubernetes recommanded labels

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: support additional labels

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: commonLabels default value

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
2022-01-16 14:29:28 -08:00
Damien Mathieu
15b0aba03b
First sidecar module: OpenTelemetry (#8013)
* remove opentelemetry from main nginx image

* add opentelemetry sidecar image

* handle extra modules in helm chart

* fix running helm chart

* mount the modules volume in the init container

* merge the mounted folder

* fix the otel image

* fix licence year

* fix cloudbuild image

* use the same nginx version as in the main image

* only retrieve /etc/nginx/modules for now
2022-01-16 13:33:28 -08:00
Alex Sears
84db822a94
Add newline indenting to admission webhook annotations (#8015)
Signed-off-by: Alex Sears <me@alexsears.com>
2021-12-07 11:26:37 -08:00
Daniel Sim
f7a5704be8
Add relabelings in controller-servicemonitor.yaml (#8008)
* Add relabelings above metricRelabelings in controller-servicemonitor.yaml

* Bump chart version to 4.0.13, Add to CHANGELOG

* Rename PR/CHANGELOG
2021-12-06 05:50:32 -08:00
Alex Co
ea1099abc9
allow set annotations for admission Jobs (#7979)
* allow set annotations for admission Jobs

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Bump chart version & update CHANGELOG

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Bump chart version again

Signed-off-by: Alex Co <tuanclq@gmail.com>

* Add example

Signed-off-by: Alex Co <tuanclq@gmail.com>
2021-11-29 03:33:22 -08:00
Anton Holovin
5a5bff1fb9
Making Kube service appProtocol field optional (#7873) 2021-11-26 02:36:52 -08:00
Steve Griffith
e57d2f63fa
applied allowPrivilegeEscalation=false (#7948) 2021-11-20 12:52:59 -08:00
Muhammad Hamza Zaib
30c0d2260d
[Helm] Add labels to resources (#6992)
* Add labels to RBAC resources

* Add labels to all resources

* Fix labels indentaton in patch jobs

* Add controller and default backend labels to pods

Signed-off-by: Muhammad Hamza Zaib <hamzazaib3202@gmail.com>

* Bump chart version and update changelog

Signed-off-by: Muhammad Hamza Zaib <hamzazaib3202@gmail.com>
2021-11-19 06:52:52 -08:00
Nithya
7d17ff35fa
helm chart: choice option for internal/external loadbalancer type service (#7806) 2021-11-15 15:13:52 -08:00
Adam Graves
6299c39842
Allow setting of container securityContext (#7533)
Currently this blocks deployments on clusters with global PodSecurityPolicies set

Signed-off-by: Adam Graves <adam.graves85@gmail.com>
2021-11-15 13:54:49 -08:00
zryfish
7203a0b8bd
support watch namespaces matched namespace selector (#7472)
skip caching namespaces at cluster scope if only watching single namespace

add --watch-namespace-selector in user guide

add e2e test
2021-11-12 11:46:28 -08:00
Gerald Pape
017e1ecde3
Fix Ingress resources in docs (#7579)
* fix Ingress resources in docs

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* move to ingressClassName

* fix more Ingress resource examples

* empty commit

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* make NOTES.txt aware of version + add notice about ingress version to examples main page

* add link to legacy documentation

Signed-off-by: Gerald Pape <gerald@giantswarm.io>
2021-11-09 07:43:49 -08:00
Jennifer
72ec0e290e
Remove double spacing (#7830) 2021-11-05 13:54:40 -07:00
WMP
5b94d83aeb
priorityClassName should be in " " (#7512)
* priorityClassName should be in " "

Example:  https://github.com/helm/charts/blob/master/stable/k8s-spot-rescheduler/templates/deployment.yaml#L28

* Update charts/ingress-nginx/templates/controller-deployment.yaml

Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>

Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>
2021-10-24 15:28:21 -07:00
James Callahan
e4001df41e
ServiceMonitor namespaceSelector defaults to current namespace (#7001) 2021-10-24 14:28:21 -07:00
Zhiwei Liu
af7d9581f4
Remove deprecated annotation in helm chart example (#7813) 2021-10-22 10:34:38 -07:00
Mmadu Manasseh
5a52d99ae8
Refactor: update DaemonSet and Deployment command params to use templates (#7689)
* Refactor: update DaemonSet and Deployment command parameters to use helm templates

* Fix whitespace issues
2021-10-14 01:23:19 -07:00