Commit graph

187 commits

Author SHA1 Message Date
James Strong
6f9c65abf4
revert 1.5.2
Signed-off-by: James Strong <james.strong@chainguard.dev>
2022-12-29 19:58:15 -05:00
James Strong
2db8552a87
Automated Release Controller 1.5.2 (#9455)
Signed-off-by: James Strong <james.strong@chainguard.dev>

Signed-off-by: James Strong <james.strong@chainguard.dev>
2022-12-29 13:35:32 -08:00
Marco Ebert
6ed6a76200
HPA: Add controller.autoscaling.annotations to values.yaml. (#9253)
This value is already in use, but hasn't been added to `values.yaml`.
2022-12-21 00:51:26 -08:00
Jan-Otto Kröpke
d7674e4323
feat(helm): Optionally use cert-manager instead admission patch (#9279) 2022-12-07 04:16:38 -08:00
Ehsan Saei
3474c33e15
update OpenTelemetry image (#9308)
* update OpenTelemetry image

* review comment

* helm-docs

* clean
2022-12-05 00:55:02 -08:00
Sjouke de Vries
27ffeeb18f
fix(hpa): deprecated api version, bump to v2 (#9348)
* fix(hpa): deprecated api version, bump to v2

* chore(hpa): abstract hpa apiVersion to helm value

* feat(hpa): add controller.autoscaling.apiVersion docs in README

* docs(hpa): quotes around apiVersion string type

* chore(hpa): run helm-docs in repo

* chore(hpa): remove local helm-docs module install and output

* docs(helm): add hpa controller.autoscaling.apiVersion description

* docs(hpa): remove autoscaling.apiVersion description as it fails ci
2022-12-04 11:35:56 -08:00
Hervé
3437cab8ca
Fix typos found by codespell (#9353)
```
$ codespell
./README.md:178: informations ==> information
./README.md.gotmpl:177: informations ==> information
./CHANGELOG.md:132: comparision ==> comparison
./CHANGELOG.md:142: executible ==> executable
./CHANGELOG.md:159: defaul ==> default
```
2022-11-30 07:44:55 -08:00
Marco Ebert
170af7be88
PDB: Add maxUnavailable. (#9278) 2022-11-10 03:20:54 -08:00
pellmont
726d7e6239
add containerSecurityContext to extraModules init containers (kubernetes#9016) (#9242) 2022-11-10 02:38:54 -08:00
James Strong
63dbbdbb3a
udate readme, charts and static deploys for release 1.5.1 (#9280)
Signed-off-by: James Strong <strong.james.e@gmail.com>

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-11-09 17:08:54 -08:00
Youssef Bel Mekki
ac1a3363bd
add:(admission-webhooks) ability to set securityContext for job-containers createSecret and patchWebhook (#9186)
Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>

Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>
2022-10-25 14:14:36 -07:00
FutureMatt
249780737c
#7652 - Updated Helm chart to use the fullname for the electionID if not specified. (#9133)
* Automatically generate electionID from the fullname or use the set value.

* Updated the chart readme to include the new empty default.

* Rebuilt the Helm readme with helm-docs.
2022-10-13 07:37:01 -07:00
James Strong
c4a50ebaa6
update for 1.4.0 release
Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-10-02 18:40:46 -04:00
James Strong
8f18c0f973
Merge pull request #9046 from anders-swanson/revert-8665-metrics-port-name
Parameterize metrics port name
2022-09-30 11:04:00 -04:00
Long Wu Yuan
61be730b91
kubewebhookcertgen sha change after go1191 (#9059) 2022-09-29 08:42:54 -07:00
Anders Swanson
adb7a9d6cc Fix for Docs check 2022-09-12 13:03:54 -07:00
Anders Swanson
4bb3b3877c Document new values key 2022-09-12 12:45:54 -07:00
James Strong
e079486d4d
updates for fixing 1.3.1 release (#9023)
* updates for fixing 1.3.1 release

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update chart readmea

Signed-off-by: James Strong <strong.james.e@gmail.com>

* updating chart

Signed-off-by: James Strong <strong.james.e@gmail.com>

* supdate wording of legacy drop

* supgraded helm docs

* one more time

Signed-off-by: James Strong <strong.james.e@gmail.com>

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-09-05 19:10:56 -07:00
James Strong
db3cdc04e4
release 1.3.1 (#9014)
* release 1.3.1

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Fix chart linter

* Fix helm docs

* Fix helm docs

* fix helm docs

* Add warning about lease change

* Disable PSP in v1.25

* rollback cluster in helmchart to psp tests

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2022-09-05 04:28:36 -07:00
Jintao Zhang
ffcf13c09b
revert changes to configmap resource permissions (#8959)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-08-23 00:29:24 -07:00
omichels
cad575e923
securityContext in admission-webhook now configurable e.g. to set seccompProfiles (#8930)
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
2022-08-22 16:12:09 -07:00
Mangirdas Judeikis
1791b62e45
Add NetworkPolicy support (#8928)
* Add NetworkPolicy support

* add doc for np
2022-08-22 16:08:09 -07:00
Long Wu Yuan
0f61d9d0dc
updated to new images built today (#8896) 2022-08-08 11:40:19 -07:00
Ricardo Katz
e222b74b9e
Release v1.3.0 (#8811)
* Release v1.3.0

* Update charts/ingress-nginx/CHANGELOG.md

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

* Update charts/ingress-nginx/README.md

* Update Changelog.md

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

Co-authored-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
2022-07-12 06:30:50 -07:00
Eric84626
7806159b38
support extraEnvs for job resources in helm chart (#8545)
* support extraEnvs for job resources in helm chart

Signed-off-by: Li, Eric <Xiannan.li@fmr.com>

* Update helm doc

* Update helm doc

* Updated helm doc - add controller.admissionWebhooks.extraEnvs

* Added some test data for webhook controller.admissionWebhooks.extraEnvs

* added new line at the end of deployment-webhook-extraEnvs-values.yaml

* Fixed helm chart test issue
2022-06-21 07:16:26 -07:00
Long Wu Yuan
96b6228a6b
changed k8s.gcr.io to registry.k8s.io (#8667) 2022-06-10 04:01:52 -07:00
Jintao Zhang
c32f9a4327
chore: release v1.2.1 (#8646)
* chore: release v1.2.1

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* chore: generate static yaml

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-05-31 06:26:53 -07:00
Mac Chaffee
6ea466bd21
Bump chart version to 4.1.2 (#8607)
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-05-23 17:05:10 -07:00
Pavel Selivanov
61fcca3a3a
Add portNamePreffix Helm chart parameter (#8458)
Allow user to set custom preffix for TCP and UDP ports
2022-05-10 09:13:43 -07:00
FrodeI
5d8b0bf428
Add documentation for controller.service.loadBalancerIP in Helm chart (#8522) 2022-05-01 13:41:15 -07:00
Long Wu Yuan
6d9a39eda7
changes for release v1.2.0 (#8491) 2022-04-21 19:36:13 -07:00
Ricardo Katz
ef0ec5f052
Release chart v1.2.0-beta.1 (#8484) 2022-04-17 13:20:41 -07:00
Jintao Zhang
e86e7eebf5
chore: v1.2.0-beta.0 release (#8465)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-04-13 20:04:47 -07:00
Ricardo Katz
3def835a6a
Jail/chroot nginx process inside controller container (#8337)
* Initial work on chrooting nginx process

* More improvements in chroot

* Fix charts and some file locations

* Fix symlink on non chrooted container

* fix psp test

* Add e2e tests to chroot image

* Fix logger

* Add internal logger in controller

* Fix overlay for chrooted tests

* Fix tests

* fix boilerplates

* Fix unittest to point to the right pid

* Fix PR review
2022-04-08 21:48:04 -07:00
Josh Soref
c6a8ad9a65
Darwin arm64 (#8399)
* Use sed instead of gnu find flags

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Support building linux/amd64 on darin/arm64

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Upgrade awesome_bot to dkhamsing/awesome_bot:1.20.0

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Favor find -prune for vendor

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Skip golang modcache folder

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Favor find -prune for changelog

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Ignore Changelogs of any case

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Fix service-l7 link

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Fix route53-mapper link

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update rootfs contents description

The auxiliary scripts were removed after:
ab8349008a/rootfs/ingress-controller

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update paths for modsecurity

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update paths for modsecurity_snippet

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update toc for 20190815-zone-aware-routing.md

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use Internet Archive for datapath.io blog entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use Internet Archive for cloudflare.com help center entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use https for nginx.org

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
2022-04-06 13:46:26 -07:00
James Strong
ac3b86b2c3
release 1.1.3 details (#8411)
* release 1.1.3 details
fix the readme with right sha and version
remove helm label
fix issue 8329
fix the 1.20 service after the fix for ipv6
udpate readme and change for patches

* update helm doc

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 09:14:46 -07:00
thomasbruggink
9180ef1ee4
Add the shareProcessNamespace as a configurable setting. (#8287) 2022-03-14 08:51:57 -07:00
Long Wu Yuan
fb72fcd817
release-v1.1.2-continued (#8294)
* v1.1.2 release

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* release-v1.1.2-continued

Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-03-04 11:48:52 -08:00
dylan-bitovi
4ecb3520c8
Add fsGroup value to admission-webhooks/job-patch charts (#8267)
* added fsGroup to admission createSecret and patchWebhook job

* added fsGroup to admission createSecret and patchWebhook job

* modified helm/README.md to add value for fsGroup

* fixed patch job values ordering

* remove manually edited README for replacement with helm-docs generated version

* re-adding charts/README.md generated by helm-docs
2022-02-28 07:10:57 -08:00
Tomas Hulata
4b4895b53b
add ingress.class (#8136)
Signed-off-by: tombokombo <tombo@sysart.tech>
2022-02-06 12:18:51 -08:00
Jintao Zhang
40c69a1ef7
chore: add Artifact Hub lint (#8204)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-28 06:16:31 -08:00
Billy Walker
0c2070ef4a
Adding annotations to the controller service account (#8173)
* fix: adding annotations to the controller service account

* fix: adding annotations to the controller service account
2022-01-26 19:12:50 -08:00
Long Wu Yuan
fc38b9f2aa
changes for release v1.1.1 (#8125) 2022-01-12 08:48:37 -08:00
Scott Crooks
71de8e1a23
docs(charts): using helm-docs for chart (#8061)
This enables the use of the `helm-docs` tool on the Helm chart located in `charts/ingress-nginx`. This will make it possible to automatically document new variables in the `values.yaml` file.

Signed-off-by: Scott Crooks <scott.crooks@gmail.com>
2022-01-08 02:53:04 -08:00
Gerald Pape
017e1ecde3
Fix Ingress resources in docs (#7579)
* fix Ingress resources in docs

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* move to ingressClassName

* fix more Ingress resource examples

* empty commit

Signed-off-by: Gerald Pape <gerald@giantswarm.io>

* make NOTES.txt aware of version + add notice about ingress version to examples main page

* add link to legacy documentation

Signed-off-by: Gerald Pape <gerald@giantswarm.io>
2021-11-09 07:43:49 -08:00
pierre-yves
f182b317ba
fix charts README.md to give additional detail on prometheus metrics … (#7601)
* fix charts README.md to give additional detail on prometheus metrics configuration

* charts readme.md remove blank line
2021-09-07 06:47:15 -07:00
Ricardo Katz
2d90ba14f5
Change all master reference to main (#7369) 2021-08-06 17:07:29 -07:00
Steven Harms
a82ea7d617
aws-load-balancer-internal is a boolean value (#7353)
* aws-load-balancer-internal is a boolean value

* Update to string true

* Update to string true

* Update to string true
2021-07-26 05:40:33 -07:00
Kubernetes Prow Robot
0d873b620b
Merge pull request #6836 from RammusXu/patch-1
Update GKE internal LB annotations
2021-04-29 07:38:51 -07:00
Ali Mukadam
5751ef5247
[docs] Documentation for Oracle Cloud Infrastructure integration
Added documentation and sample YAML that demonstrate how to use
NGINX Ingress Controller to provision a load balancer on Oracle Cloud
Infrastructure. The following use cases are included:

- public and private load balancers

Signed-off-by: Ali Mukadam <ali.mukadam@oracle.com>
2021-04-27 11:19:29 +10:00
RammusXu
003088a6b4
More information for earlier than GKE 1.17 2021-02-26 11:20:37 +08:00
RammusXu
cb7eefef1b
Update GKE internal LB annotations 2021-02-04 14:32:13 +08:00
Tsuyoshi Miyake
e0e91bb150
Correct the value for setting a static IP 2020-12-24 00:18:30 +09:00
cooperbenson-qz
8de7d42cfc Adding LoadBalancerIP value for internal service
Adding documentation for the value

Bumping chart version

Adding changelog entry

Added change to artifacthub annotation
2020-12-21 09:59:01 -07:00
Manuel Alejandro de Brito Fontes
0a43ba34b8 Fix helm repo update command 2020-11-26 09:57:36 -03:00
Manuel Alejandro de Brito Fontes
4ac3e1ff2c
Remove helm2 support and update docs 2020-11-24 18:55:57 -03:00
Kenichi Omichi
cf80ae96e4 Update helm stable repo
As https://helm.sh/blog/new-location-stable-incubator-charts/
helm stable repo is changed to https://charts.helm.sh/stable
In addition, if using helm v3.4.0+ the old stable repo installation
is failed.
So this updates the stable repo to avoid such error.
2020-10-28 21:58:59 +00:00
Manuel Alejandro de Brito Fontes
27598b5f90 Update chart requirements 2020-09-15 14:50:32 -03:00
Adrian Joian
062397649e AKS example of adding an internal loadbalancer
This is a simple example of adding an Azure internal loadbalancer when
creating the ingress controller.
2020-09-04 11:28:57 +02:00
Scott Rigby
58c1ca6176
Fix YAML linting
Signed-off-by: Scott Rigby <scott@r6by.com>
2020-08-19 15:58:32 -04:00
Scott Rigby
ae136cac92
Direct link to index.yaml for easy browsing by end users without CLI
Signed-off-by: Scott Rigby <scott@r6by.com>
2020-08-19 15:58:07 -04:00
Scott Rigby
4356587ec8
Fix chart readme link in upgrade section. Removes redundant URL in favor of zero-downtime section header anchor
Signed-off-by: Scott Rigby <scott@r6by.com>
2020-08-19 15:48:16 -04:00
Scott Rigby
f78693f9f0
Initial readme changes, with upgrade info on migrating from stable/nginx-ingress
Signed-off-by: Scott Rigby <scott@r6by.com>
2020-08-18 17:16:12 -04:00
Oleksandr Semak
baed5c6061 add custom metric to hpa template 2020-06-18 11:40:56 -04:00
Tobias Wolf
1d54d8b565 Add sysctl exemptions to controller PSP
I would like to be able to support this construction in my DaemonSet, I have coontrol over the host and this is the easiest way yo bump the socket properties.
```yaml
securityContext:
  sysctls:
    - name: net.core.somaxconn
      value: "8192"
```
2020-06-16 19:11:45 +02:00
Kubernetes Prow Robot
c5d7e2ad43
Merge pull request #5717 from geoblink/feature/add-support-for-internal-load-balancer
Add support for an internal load balancer along with an external one
2020-06-16 08:28:04 -07:00
Luis Garnica Guilarte
398f548b75 Add support for an internal load balancer along with an external one
Signed-off-by: Luis Garnica Guilarte <luisgarnica42@gmail.com>
2020-06-16 16:59:43 +02:00
Daniel Polito
e9c9068342
Fix controller.publishService.enabled on README 2020-06-11 21:30:26 -03:00
chamilad
ee84603d06 Add minor doc fixes to user guide and chart readme 2020-06-03 17:54:41 +12:00
Graham McGregor
2205edb16b Allow pulling images by digest
The digest uniquely identifies a specific version of the image, so it is
never updated by Kubernetes unless you change the digest value. This is
desirable for security to gain confidence that no unvetted changes are
pulled to a deployment.
2020-05-20 12:05:43 -04:00
Tuan Anh Nguyen
e6d570d30b add toleration support for admission webhooks
Update charts/ingress-nginx/Chart.yaml

Co-authored-by: Alex Harder <13860012+ChiefAlexander@users.noreply.github.com>
2020-05-20 09:26:59 +07:00
Manuel Alejandro de Brito Fontes
d6ee467918 Remove obsolete default backend settings 2020-04-30 08:32:28 -04:00
Cédric Laubacher
da12e01544
Update job image 2020-04-29 22:35:30 +02:00
Manuel Alejandro de Brito Fontes
f94aedb17c Update admission webhook annotations 2020-04-29 11:09:00 -04:00
Joris Garonian
0f82342aa6
fix(Chart): Mismatch between values.yml and README.md
0d2c6db75e/charts/ingress-nginx/values.yaml (L458)

0d2c6db75e/charts/ingress-nginx/README.md (L183)
2020-04-29 01:23:02 +10:00
Manuel Alejandro de Brito Fontes
b68839118f Release 0.31.1 2020-04-27 10:43:23 -04:00
Manuel Alejandro de Brito Fontes
1fb6f37091 Update chart instructions 2020-04-26 20:52:54 -04:00
Manuel Alejandro de Brito Fontes
1f3eac2c8c Remove duplicated annotations definition and refactor hostPort configuration 2020-04-06 19:15:47 -04:00
Kubernetes Prow Robot
c2c8af28db
Merge pull request #5249 from aledbf/hostport
Add support for hostPort in Deployment
2020-03-16 06:26:42 -07:00
Manuel Alejandro de Brito Fontes
3a5bc90709 Add support for custom healthz path in helm chart 2020-03-15 12:52:34 -03:00
Manuel Alejandro de Brito Fontes
19c4c5652d Add support for hostPort in Deployment 2020-03-14 18:24:46 -03:00
Naseem
5ae314bd64
Hardcode component names.
By removing this, we reduce unecessary config options and moving parts.

Signed-off-by: Naseem <naseem@transit.app>
2020-03-10 09:36:26 -04:00
Kubernetes Prow Robot
a7fa4cd2ce
Merge pull request #5178 from gregsidelinger/master
Adding annotations support to helm chart configmaps
2020-02-26 12:57:19 -08:00
Manuel Alejandro de Brito Fontes
a53ccec682
Sync chart PR #20984 (#5171) 2020-02-26 16:55:02 -03:00
Greg Sidelinger
a942b4e8dc Updating README with new annotations options
Signed-off-by: Greg Sidelinger <gate@ilive4code.net>
2020-02-26 11:01:42 -05:00
Manuel Alejandro de Brito Fontes
e3e16941e5
Use local chart directory for dev-env and e2e tests (#5165) 2020-02-25 09:35:44 -03:00
Manuel Alejandro de Brito Fontes
624cb5f048
Start migration of helm chart (#5159) 2020-02-24 16:25:57 -03:00