Commit graph

266 commits

Author SHA1 Message Date
Marco Ebert
8b026f42d5
Chart: Tighten securityContexts and Pod Security Policies. (#10491)
* Values: Fix docs of `controller.podSecurityContext` & `controller.sysctls`.

* Values: Add missing `controller.containerSecurityContext`.

Already in use, but has never been added to values.

* Values: Fix docs of `defaultBackend.podSecurityContext` & `defaultBackend.containerSecurityContext`.

* Helpers: Rename `controller.containerSecurityContext` to `ingress-nginx.controller.containerSecurityContext`.

Due to alignment with other templates.

* Helpers: Improve `extraModules`.

- Make `command` a multiline list.
- Fix `toYaml` usage.
- Remove `toYaml` where not necessary.

* Helpers: Move `ingress-nginx.defaultBackend.fullname`.

* Helpers: Add `ingress-nginx.defaultBackend.containerSecurityContext`.

Extracts the default backend `securityContext` into a template, as for the controller.

* Controller: Fix indentation of `controller.podSecurityContext` & `controller.sysctls`.

* Controller: Improve `controller.extraModules` & `controller.opentelemetry`.

- Add `controller.extraModules.distroless` & `controller.extraModules.resources`.
- Add `controller.opentelemetry.name` & `controller.opentelemetry.distroless`.
- Align `extraModules` inclusion for `controller.extraModules` & `controller.opentelemetry`.
- Remove redundant whitespaces.

* Controller/PSP: Align indentation.

* Controller/PSP: Remove quotes.

* Controller/PSP: Improve comments.

* Controller/PSP: Reorder fields.

See https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy.

* Admission Webhooks: Fix indentation of `controller.admissionWebhooks.patch.securityContext`.

* Admission Webhooks/PSP: Align indentation.

* Admission Webhooks/PSP: Reorder fields.

* Admission Webhooks/PSP: Align condition.

* Admission Webhooks/ClusterRole: Align PSP rule.

* Default Backend/PSP: Align indentation.

* Default Backend/PSP: Reorder fields.

See https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy.

* Values: Tighten `controller.image`.

Due to recent changes, the controller image can be run without privilege escalation:

- https://github.com/kubernetes/ingress-nginx/issues/8499
- https://github.com/kubernetes/ingress-nginx/pull/7449

* Values: Tighten `controller.extraModules.containerSecurityContext`.

* Values: Tighten `controller.opentelemetry.containerSecurityContext`.

* Values: Tighten `controller.admissionWebhooks.*.securityContext`.

Moves the pod `securityContext` to the containers to not interfere with injected containers.

* Values: Tighten `defaultBackend.image`.
2023-11-07 18:52:36 +01:00
Leonardo Taccari
870847ad4c
Comment NGINXCertificateExpiry alert label matcher (#10613)
If a valid certificate is passed via `--default-ssl-certificate` it is
probably desiderable that we check its expiration!

Add a comment to explain that.
2023-11-05 12:23:43 +01:00
Philipp B
d6a0f46c32
chart: allow setting allocateLoadBalancerNodePorts (#10585)
Signed-off-by: Philipp Born <git@pborn.eu>
2023-11-02 22:45:46 +01:00
Leonardo Taccari
dc659b252d
Ignore fake certificate for NGINXCertificateExpiry (#10505)
The fake certificate is only a fallback and it is okay-ish if it
expires.

Do not alert for its expiration.
2023-11-02 21:11:03 +01:00
Pierre Ozoux
e805d4955d
feat(helm): add documentation about metric args (#10590)
* feat(helm): add documentation about metric args

This helps documenting this issue:
https://github.com/kubernetes/ingress-nginx/issues/8233

and relates to this documentation:
https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/monitoring.md#histogram-buckets

* fix
2023-11-01 13:57:39 +01:00
Roberto Devesa
b37f86026e
Fix typo (#10594) 2023-11-01 13:36:08 +01:00
Marco Ebert
0120a2df48
Admission Webhook: Truncate name. (#10523) 2023-10-29 18:26:05 +01:00
Ricardo Katz
5583f90c7f
Release v1.9.4 (#10568) 2023-10-25 18:33:49 +02:00
jasine
7ce6cc88d8
feat: add namespace overrides (#10539)
* feat: add namespace overrides

* add value in readme

* fix: readme description

* fix: description in value

* fix: set max length and trim last "-"
2023-10-24 19:53:46 +02:00
James Strong
6f2ad83b0d
release 1.9.3
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-10-12 09:51:50 -04:00
James Strong
2d3ee50949
update nginx base, httpbun, e2e, helm webhook cert gen (#10506)
* update nginx base, httpbun, e2e, helm webhook cert gen

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix helm docs

Signed-off-by: James Strong <strong.james.e@gmail.com>

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-10-11 23:53:19 +02:00
Ricardo Katz
24b139424d Release v1.9.1 2023-10-01 18:01:26 -03:00
Marco Ebert
0b0ce031ac
Chart: Rework network policies. (#10238) 2023-09-24 08:02:57 -07:00
Ricardo Katz
6107346590
Release v1.9.0 (#10433) 2023-09-23 13:46:56 -07:00
Ricardo Katz
cb70900609
Release v1.9.0-beta.0 (#10422) 2023-09-18 04:52:31 -07:00
František Hána
06c64bf567
helm: add resources to opentelemetry init container (#10300) 2023-09-11 19:36:12 -07:00
Ricardo Katz
cf889c6c47
Disable user snippets per default (#10393)
* Disable user snippets per default

* Enable snippet on tests
2023-09-10 20:02:10 -07:00
Marco Ebert
2d03da6334
Deployment/DaemonSet: Fix templating & value. (#10240) 2023-09-10 07:20:09 -07:00
Marco Ebert
4869c8b462
Deployment/DaemonSet: Template topologySpreadConstraints. (#10259) 2023-09-10 05:38:10 -07:00
James Strong
da9c5730f6
release notes 1.8.2 (#10389)
* release notes 1.8.2

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix yaml error

Signed-off-by: James Strong <strong.james.e@gmail.com>

* supdate docs

* Rolling back to v1.21.1

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2023-09-09 08:44:09 -07:00
logica
dd6145b2d3
Bump k8s.io/component-base from 0.26.4 to 0.27.4 (Replace Topology Aware Hints with Topology Aware Routing) (#10282)
* Bump k8s.io/component-base from 0.26.4 to 0.27.4

Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.26.4 to 0.27.4.
- [Commits](https://github.com/kubernetes/component-base/compare/v0.26.4...v0.27.4)

---
updated-dependencies:
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* changed annotation to TopologyMode

* fixed documents

* fixed test

* using api constraint for test deployment options

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-11 07:17:27 -07:00
Ehsan Saei
3baa591bb5
promote distroless otel init image (#10257) 2023-08-02 03:34:49 -07:00
Jan-Otto Kröpke
afd1311f85
[helm] configure allow to configure hostAliases (#10180)
Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>
2023-07-28 04:41:56 -07:00
Ricardo Katz
c5f348ea2e
Implement annotation validation (#9673)
* Add validation to all annotations

* Add annotation validation for fcgi

* Fix reviews and fcgi e2e

* Add flag to disable cross namespace validation

* Add risk, flag for validation, tests

* Add missing formating

* Enable validation by default on tests

* Test validation flag

* remove ajp from list

* Finalize validation changes

* Add validations to CI

* Update helm docs

* Fix code review

* Use a better name for annotation risk
2023-07-21 20:32:07 -07:00
Jan-Otto Kröpke
a297cedb7a
[helm] pass service annotations through helm tpl engine (#10084)
Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>
2023-07-20 11:00:10 -07:00
James Strong
652a800422
release notes 1.8.1 (#10161)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-06-30 18:37:24 -03:00
Fabio Formosa
002d7e90d7
Added a doc line to the missing helm value service.internal.loadBalancerIP (#9406)
* Update README.md

#9403 Add documentation for controller.service.internal.loadBalancerIP in Helm chart

* Update README.md

removed a duplicated row in the helm chart values

* #9403 added a doc to the internal loadBalancerIP

removed a comment from an already supported helm value and added a doc line

* #9403 Reverted a manual added line

Removed a manual added line in favour of helm doc

* #9403 re-generated the README with the last doc line added to the value.yaml

* #9403 removed trailing spaces

* removed trail spaces
2023-06-27 05:34:32 -07:00
LucasBoisserie
0b4c98b7c3
feat(helm): Add loadBalancerClass (#9562) 2023-06-22 07:59:40 -07:00
Micah Huber
051aa6d40d
add support for keda fallback settings (#9993) 2023-06-11 11:51:46 -07:00
Mitchell Mohorovich
4c00085c17
fix broken kubernetes.io/user-guide/ docs links (#10055) 2023-06-08 08:52:14 -07:00
James Strong
3476232f5c
release controller 1.8.0 and chart 4.7.0 (#10017)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-05-30 11:39:50 -07:00
Long Wu Yuan
f7ea0b152b
changed tagsha to recent builds (#10001) 2023-05-27 07:46:51 -07:00
Peter Jakubis
df0be089d2
PodDisruptionBudget spec logic update (#9904)
Signed-off-by: Peter Jakubis <balonik32@gmail.com>
2023-05-25 10:26:53 -07:00
Marco Ebert
06612e6ffd
HPA: Use capabilites & align manifests. (#9521) 2023-05-11 09:37:03 -07:00
guessi
8ab8803dcc
Update charts/* to keep project name display aligned (#9931) 2023-05-05 18:23:16 -07:00
James Strong
3d73327994
release controller 1.7.1 and chart 4.6.1 (#9929)
* release controller 1.7.1 and chart 4.6.1

Signed-off-by: James Strong <james.strong@chainguard.dev>

* fix typo

Signed-off-by: James Strong <james.strong@chainguard.dev>

* fix ah lint errors

Signed-off-by: James Strong <james.strong@chainguard.dev>

---------

Signed-off-by: James Strong <james.strong@chainguard.dev>
2023-05-05 05:45:13 -07:00
Jan-Otto Kröpke
d8f54420a4
[helm] Support custom port configuration for internal service (#9846)
Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de>
2023-05-01 08:18:19 -07:00
Marco Ebert
5806b58003
Values: Fix indention of commented values. (#9812) 2023-04-04 05:55:53 -07:00
James Strong
7865825cf0
release notes v1.7.0
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-03-24 09:45:31 -04:00
Adam Jacques
00bfb2e84a
Fix several Helm YAML issues with extraModules and extraInitContainers (#9709)
* Fix indention issue for DaemonSets when using extraModules and extraInitContainers

* Improve documentation

* Unify and fix templating

* Enable support for the opentelemetry from values.yaml
2023-03-21 06:37:08 -07:00
Saumya
18c3a91a04
updated digest and sha for opentelemetry (#9758) 2023-03-19 12:43:16 -07:00
Saumya
45dae623c7
updated kube-webhook-certgen digest and tags (#9756) 2023-03-19 08:59:16 -07:00
Marco Ebert
58e5a2c01f
Chart: Drop controller.headers, rework DH param secret. (#9659) 2023-03-16 18:39:16 -07:00
Do Hoang Khiem
e2d076c4fc
HPA: autoscaling/v2beta1 deprecated, bump apiVersion to v2 for defaultBackend (#9731) 2023-03-14 04:32:18 -07:00
James Strong
8045cd29fb
Release Notes Controller 1.6.4 Helm 4.5.1
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-02-14 19:12:18 -05:00
James Strong
80fd69e641
Release docs for Controller v1.6.3 and Helm v4.5.0 (#9614)
Signed-off-by: James Strong <james.strong@chainguard.dev>
2023-02-13 19:23:31 -08:00
James Strong
01c9a2bf25
Revert Implement pathType validation (#9511) (#9607)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-02-12 22:57:29 -08:00
James Strong
7d1c47ab54
Switch logic on path type validation and setting it to false (#9543)
* update path type validation to be false and update e2e test scripts

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update to make tests clear

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update test params

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Adding else per pr comments

Signed-off-by: James Strong <james.strong@chainguard.dev>

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
Signed-off-by: James Strong <james.strong@chainguard.dev>
2023-01-31 17:09:06 -08:00
Ricardo Katz
da98c744b9
Implement pathType validation (#9511) 2023-01-16 23:51:23 -03:00
Marco Ebert
a069617ef8
Values: Add missing controller.metrics.service.labels. (#9501) 2023-01-16 08:38:50 -08:00
Tomas Hulata
5b2a9475dc
feat: support topology aware hints (#9165)
* support topology aware hints

Signed-off-by: tombokombo <tombo@sysart.tech>

* add flag to enable topology and fixes

Signed-off-by: tombokombo <tombo@sysart.tech>

* update readme

Signed-off-by: tombokombo <tombo@sysart.tech>

* add e2e test

Signed-off-by: tombokombo <tombo@sysart.tech>

* isolate topology test

Signed-off-by: tombokombo <tombo@sysart.tech>

* gofmt fix

Signed-off-by: tombokombo <tombo@sysart.tech>

Signed-off-by: tombokombo <tombo@sysart.tech>
2023-01-15 18:46:50 -08:00
yutachaos
bbf7c79f96
Add update updateStrategy and minReadySeconds for defaultBackend (#8506)
* Add update updateStrategy and minReadySeconds for defaultBackend

* Bump chart

* Fixed docs helm-docs version
2023-01-08 14:37:27 -08:00
Ehsan Saei
490e872b4a
update OpenTelemetry image (#9491)
* update OpenTelemetry image

* helm-doc
2023-01-08 13:21:28 -08:00
James Strong
6f9c65abf4
revert 1.5.2
Signed-off-by: James Strong <james.strong@chainguard.dev>
2022-12-29 19:58:15 -05:00
James Strong
2db8552a87
Automated Release Controller 1.5.2 (#9455)
Signed-off-by: James Strong <james.strong@chainguard.dev>

Signed-off-by: James Strong <james.strong@chainguard.dev>
2022-12-29 13:35:32 -08:00
Marco Ebert
6ed6a76200
HPA: Add controller.autoscaling.annotations to values.yaml. (#9253)
This value is already in use, but hasn't been added to `values.yaml`.
2022-12-21 00:51:26 -08:00
Jan-Otto Kröpke
d7674e4323
feat(helm): Optionally use cert-manager instead admission patch (#9279) 2022-12-07 04:16:38 -08:00
Ehsan Saei
3474c33e15
update OpenTelemetry image (#9308)
* update OpenTelemetry image

* review comment

* helm-docs

* clean
2022-12-05 00:55:02 -08:00
Sjouke de Vries
27ffeeb18f
fix(hpa): deprecated api version, bump to v2 (#9348)
* fix(hpa): deprecated api version, bump to v2

* chore(hpa): abstract hpa apiVersion to helm value

* feat(hpa): add controller.autoscaling.apiVersion docs in README

* docs(hpa): quotes around apiVersion string type

* chore(hpa): run helm-docs in repo

* chore(hpa): remove local helm-docs module install and output

* docs(helm): add hpa controller.autoscaling.apiVersion description

* docs(hpa): remove autoscaling.apiVersion description as it fails ci
2022-12-04 11:35:56 -08:00
Joseph Richardson
f08369cdc6
Fixed indentation in commented-out autoscaling (#9225) 2022-11-13 11:29:56 -08:00
Marco Ebert
170af7be88
PDB: Add maxUnavailable. (#9278) 2022-11-10 03:20:54 -08:00
pellmont
726d7e6239
add containerSecurityContext to extraModules init containers (kubernetes#9016) (#9242) 2022-11-10 02:38:54 -08:00
James Strong
63dbbdbb3a
udate readme, charts and static deploys for release 1.5.1 (#9280)
Signed-off-by: James Strong <strong.james.e@gmail.com>

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-11-09 17:08:54 -08:00
Youssef Bel Mekki
ac1a3363bd
add:(admission-webhooks) ability to set securityContext for job-containers createSecret and patchWebhook (#9186)
Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>

Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>
2022-10-25 14:14:36 -07:00
FutureMatt
249780737c
#7652 - Updated Helm chart to use the fullname for the electionID if not specified. (#9133)
* Automatically generate electionID from the fullname or use the set value.

* Updated the chart readme to include the new empty default.

* Rebuilt the Helm readme with helm-docs.
2022-10-13 07:37:01 -07:00
James Strong
c4a50ebaa6
update for 1.4.0 release
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-10-02 18:40:46 -04:00
James Strong
8f18c0f973
Merge pull request #9046 from anders-swanson/revert-8665-metrics-port-name
Parameterize metrics port name
2022-09-30 11:04:00 -04:00
Long Wu Yuan
61be730b91
kubewebhookcertgen sha change after go1191 (#9059) 2022-09-29 08:42:54 -07:00
Ehsan Saei
1ce0b55f62
update OpenTelemetry image (#9036)
* update OpenTelemetry image

* use promoted image
2022-09-15 12:37:34 -07:00
Anders Swanson
e7c793f65d parameterize port name 2022-09-12 12:34:40 -07:00
James Strong
e079486d4d
updates for fixing 1.3.1 release (#9023)
* updates for fixing 1.3.1 release

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update chart readmea

Signed-off-by: James Strong <strong.james.e@gmail.com>

* updating chart

Signed-off-by: James Strong <strong.james.e@gmail.com>

* supdate wording of legacy drop

* supgraded helm docs

* one more time

Signed-off-by: James Strong <strong.james.e@gmail.com>

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-09-05 19:10:56 -07:00
omichels
cad575e923
securityContext in admission-webhook now configurable e.g. to set seccompProfiles (#8930)
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
2022-08-22 16:12:09 -07:00
Mangirdas Judeikis
1791b62e45
Add NetworkPolicy support (#8928)
* Add NetworkPolicy support

* add doc for np
2022-08-22 16:08:09 -07:00
Long Wu Yuan
0f61d9d0dc
updated to new images built today (#8896) 2022-08-08 11:40:19 -07:00
Ricardo Katz
e222b74b9e
Release v1.3.0 (#8811)
* Release v1.3.0

* Update charts/ingress-nginx/CHANGELOG.md

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

* Update charts/ingress-nginx/README.md

* Update Changelog.md

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

Co-authored-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
2022-07-12 06:30:50 -07:00
Eric84626
7806159b38
support extraEnvs for job resources in helm chart (#8545)
* support extraEnvs for job resources in helm chart

Signed-off-by: Li, Eric <Xiannan.li@fmr.com>

* Update helm doc

* Update helm doc

* Updated helm doc - add controller.admissionWebhooks.extraEnvs

* Added some test data for webhook controller.admissionWebhooks.extraEnvs

* added new line at the end of deployment-webhook-extraEnvs-values.yaml

* Fixed helm chart test issue
2022-06-21 07:16:26 -07:00
Long Wu Yuan
96b6228a6b
changed k8s.gcr.io to registry.k8s.io (#8667) 2022-06-10 04:01:52 -07:00
Jintao Zhang
c32f9a4327
chore: release v1.2.1 (#8646)
* chore: release v1.2.1

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* chore: generate static yaml

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-05-31 06:26:53 -07:00
Pavel Selivanov
61fcca3a3a
Add portNamePreffix Helm chart parameter (#8458)
Allow user to set custom preffix for TCP and UDP ports
2022-05-10 09:13:43 -07:00
FrodeI
5d8b0bf428
Add documentation for controller.service.loadBalancerIP in Helm chart (#8522) 2022-05-01 13:41:15 -07:00
Long Wu Yuan
6d9a39eda7
changes for release v1.2.0 (#8491) 2022-04-21 19:36:13 -07:00
Ricardo Katz
ef0ec5f052
Release chart v1.2.0-beta.1 (#8484) 2022-04-17 13:20:41 -07:00
Jintao Zhang
e86e7eebf5
chore: v1.2.0-beta.0 release (#8465)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-04-13 20:04:47 -07:00
Ricardo Katz
3def835a6a
Jail/chroot nginx process inside controller container (#8337)
* Initial work on chrooting nginx process

* More improvements in chroot

* Fix charts and some file locations

* Fix symlink on non chrooted container

* fix psp test

* Add e2e tests to chroot image

* Fix logger

* Add internal logger in controller

* Fix overlay for chrooted tests

* Fix tests

* fix boilerplates

* Fix unittest to point to the right pid

* Fix PR review
2022-04-08 21:48:04 -07:00
Francisco Robles Martín
f5b212df30
replace deprecated topology key in example with current one (#8444)
Signed-off-by: Francisco Robles Martín <f.robles.martin@pm.me>
2022-04-08 01:36:42 -07:00
James Strong
ac3b86b2c3
release 1.1.3 details (#8411)
* release 1.1.3 details
fix the readme with right sha and version
remove helm label
fix issue 8329
fix the 1.20 service after the fix for ipv6
udpate readme and change for patches

* update helm doc

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 09:14:46 -07:00
LongWuYuan
b9f50e691d base img update for e2e-test-runner & opentelemetry 2022-04-01 17:07:08 +05:30
thomasbruggink
9180ef1ee4
Add the shareProcessNamespace as a configurable setting. (#8287) 2022-03-14 08:51:57 -07:00
Long Wu Yuan
fb72fcd817
release-v1.1.2-continued (#8294)
* v1.1.2 release

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* release-v1.1.2-continued

Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-03-04 11:48:52 -08:00
dylan-bitovi
4ecb3520c8
Add fsGroup value to admission-webhooks/job-patch charts (#8267)
* added fsGroup to admission createSecret and patchWebhook job

* added fsGroup to admission createSecret and patchWebhook job

* modified helm/README.md to add value for fsGroup

* fixed patch job values ordering

* remove manually edited README for replacement with helm-docs generated version

* re-adding charts/README.md generated by helm-docs
2022-02-28 07:10:57 -08:00
Tomas Hulata
4b4895b53b
add ingress.class (#8136)
Signed-off-by: tombokombo <tombo@sysart.tech>
2022-02-06 12:18:51 -08:00
Jintao Zhang
40c69a1ef7
chore: add Artifact Hub lint (#8204)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-28 06:16:31 -08:00
Billy Walker
0c2070ef4a
Adding annotations to the controller service account (#8173)
* fix: adding annotations to the controller service account

* fix: adding annotations to the controller service account
2022-01-26 19:12:50 -08:00
Ricardo Katz
c667cf083b
Last attempt to fix helm docs (#8153) 2022-01-16 22:59:36 -03:00
Ricardo Katz
51fa86e690
Trigger new helmdoc generation 2022-01-16 22:52:10 -03:00
Ricardo Katz
0e5d4ad425
Automatically generate helm docs (#8151) 2022-01-16 17:25:28 -08:00
Nicolas Lamirault
3732681588
Support additonal labels and all Kubernetes recommanded labels (#7186)
* Add: Kubernetes recommanded labels

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: support additional labels

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: commonLabels default value

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
2022-01-16 14:29:28 -08:00
Damien Mathieu
15b0aba03b
First sidecar module: OpenTelemetry (#8013)
* remove opentelemetry from main nginx image

* add opentelemetry sidecar image

* handle extra modules in helm chart

* fix running helm chart

* mount the modules volume in the init container

* merge the mounted folder

* fix the otel image

* fix licence year

* fix cloudbuild image

* use the same nginx version as in the main image

* only retrieve /etc/nginx/modules for now
2022-01-16 13:33:28 -08:00
Long Wu Yuan
fc38b9f2aa
changes for release v1.1.1 (#8125) 2022-01-12 08:48:37 -08:00
Scott Crooks
71de8e1a23
docs(charts): using helm-docs for chart (#8061)
This enables the use of the `helm-docs` tool on the Helm chart located in `charts/ingress-nginx`. This will make it possible to automatically document new variables in the `values.yaml` file.

Signed-off-by: Scott Crooks <scott.crooks@gmail.com>
2022-01-08 02:53:04 -08:00