Marco Ebert
d6f2b86508
Images: Trigger test-runner
build. ( #11636 )
2024-07-17 15:50:39 -07:00
Marco Ebert
290de76a1b
Images: Trigger NGINX build.
2024-07-17 21:32:05 +02:00
James Strong
07de893db1
bump testing runner
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-16 11:36:47 -04:00
Christian
6de184668c
remove modsecurity coreruleset test files from nginx image ( #11617 )
2024-07-16 06:00:59 -07:00
James Strong
a6727d81e7
unskip the ocsp tests and update images to fix cfssl bug ( #11606 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-16 00:01:10 -07:00
Marco Ebert
cee3fb3b13
Images: Bump test-runner
. ( #11600 )
2024-07-11 06:44:55 -07:00
James Strong
90fa3b9823
revert module upgrade ( #11594 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-10 16:30:30 -07:00
Marco Ebert
e564e831c5
Images: Bump kube-webhook-certgen
. ( #11578 )
2024-07-08 11:10:59 -07:00
James Strong
84b8270bd6
update test runner go base to 3.20
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-03 14:05:23 -04:00
James Strong
21d6a773d1
tag new test runner image with new nginx base 0.0.8
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-03 13:59:01 -04:00
Jintao Zhang
b90dd919e0
trigger build for NGINX-1.25 v0.0.8 ( #11533 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2024-07-02 09:02:00 -07:00
Olivier Wenger
773590f791
bump alpine version to 3.20 to custom-error-pages ( #11530 )
2024-07-02 08:47:59 -07:00
Jon Carl
7de28cfcdb
add ssl patches to nginx-1.25 image for coroutines to work in lua client hello and cert ssl blocks ( #11485 )
...
* feat: add ssl patches for coroutines to work in lua ssl blocks
Signed-off-by: Jon Carl <grounded042@joncarl.com>
* switch to include more patches
Signed-off-by: Jon Carl <grounded042@joncarl.com>
---------
Signed-off-by: Jon Carl <grounded042@joncarl.com>
2024-07-02 06:25:59 -07:00
Stepan Paksashvili
6a111a974b
Docs: Add information about HTTP/3 support. ( #11513 )
...
* [docs] update README to add information about HTTP/3 support
Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* [docs] update README
Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
---------
Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-01 13:51:02 +02:00
JesseBot
6087e04cb1
Upgrade OWASP_MODSECURITY_CRS_VERSION 3.3.5 to 4.4.0 and update docs ( #11511 )
...
Signed-off-by: jessebot <jessebot@linux.com>
2024-07-01 11:05:15 +02:00
Stepan Paksashvili
44849cb302
[feature] bump nginx to 1.25.5 and add http3 module ( #11470 )
...
* [feature] bump nginx to 1.25.5, add http3 module, and update lua-stream, lua_ngx, mimaloc, opentelemetry_cpp, opentelemetry_proto and opentelemtry_contrib
Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
* [feature] revert opentelemetry and owasp updates
Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
---------
Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
2024-06-18 12:29:37 -07:00
Marco Ebert
9ca96df6af
CI: Bump forgotten Ginkgo versions. ( #11467 )
2024-06-15 01:29:28 -07:00
James Strong
0cf1994864
upgrade to alpine 3.20 ( #11428 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-06-09 17:17:59 -07:00
Ricardo Katz
cfe0daace1
Bump Kubernetes version on images ( #11346 )
2024-05-05 19:06:28 -07:00
dependabot[bot]
6bfc30a4b9
Bump golang.org/x/net in /images/kube-webhook-certgen/rootfs ( #11283 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-19 06:44:17 -07:00
Long Wu Yuan
7decd01468
bumped certgeimage tag ( #11212 )
2024-04-05 03:31:01 -07:00
Long Wu Yuan
622e36fd6a
bump ginkgo to 2-17-1 in testrunner ( #11202 )
2024-04-04 08:07:33 -07:00
Marco Ebert
bf3fa53167
Owners: Promote Gacko to ingress-nginx-maintainers
& ingress-nginx-reviewers
. ( #11165 )
...
* Owners: Sort `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.
* Owners: Update URL in aliases.
* Images: Remove owners as it's identical to global owners.
* Images: Remove global owners from `kube-webhook-certgen` owners.
* Owners: Remove members from aliases covered by other aliases.
ingress-nginx-helm-maintainers:
- cpanato: Covered by ingress-nginx-maintainers
- strongjz: Covered by ingress-nginx-maintainers
ingress-nginx-helm-reviewers:
- cpanato: Covered by ingress-nginx-reviewers
- strongjz: Covered by ingress-nginx-reviewers
ingress-nginx-docs-maintainers:
- tao12345666333: Covered by ingress-nginx-maintainers
* Owners: Promote myself to `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.
2024-04-04 08:01:10 -07:00
James Strong
8d402ebfd8
update test image and go version
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-04-04 09:27:19 -04:00
James Strong
404bfc3485
force nginx rebuild
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-04-04 09:20:16 -04:00
Y.Horie
25d2758e94
fixes brotli build issue ( #10484 )
2024-03-30 09:23:32 -07:00
Carlos Tadeu Panato Junior
5052c8acc0
bump ginkgo to v2.17.1 ( #11177 )
...
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-29 05:39:28 -07:00
dependabot[bot]
e3ea23110a
Bump google.golang.org/protobuf in /images/custom-error-pages/rootfs ( #11119 )
...
Bumps google.golang.org/protobuf from 1.28.0 to 1.33.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-14 07:32:08 -07:00
dependabot[bot]
a00a1499a0
Bump google.golang.org/protobuf in /images/kube-webhook-certgen/rootfs ( #11120 )
...
Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-13 16:51:31 -07:00
Carlos Tadeu Panato Junior
12fbe9b163
golangci-lint update, ci cleanup, group dependabot updates ( #11071 )
...
* bump golangci-lint to v1.56.x
Signed-off-by: cpanato <ctadeu@gmail.com>
* cleanup empty lines
Signed-off-by: cpanato <ctadeu@gmail.com>
* group dependabot updates
Signed-off-by: cpanato <ctadeu@gmail.com>
* run on job changes as well
Signed-off-by: cpanato <ctadeu@gmail.com>
* remove deprecated checks
Signed-off-by: cpanato <ctadeu@gmail.com>
* fix lints and format
Signed-off-by: cpanato <ctadeu@gmail.com>
---------
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-07 02:39:53 -08:00
Ricardo Katz
862b05d913
Fix kubewebhook image tag ( #11033 )
2024-02-27 15:51:37 -03:00
Ricardo Katz
fa0bf81984
Bump go libraries ( #11023 )
...
* Bump go libraries
* Fix update codegen execution
* Fix errors on klog
* Fix gzip test
* Bump libraries on webhook certgen
* Fix webhook-certgen compilation
2024-02-27 09:52:42 -08:00
Ricardo Katz
0a87031bbd
Bump modsecurity on nginx 1.25 ( #11024 )
2024-02-26 17:08:45 -08:00
Ricardo Katz
391a304b10
Bump grpc and reintroduce OTEL compilation ( #11021 )
...
* Bump grpc and reintroduce OTEL compilation
* Enable s390x again
2024-02-26 15:05:00 -08:00
Milas Bowman
e78af97ecd
chore(deps): upgrade headers-more module to 0.37 ( #10991 )
...
https://github.com/openresty/headers-more-nginx-module/compare/v0.34...v0.37
Signed-off-by: Milas Bowman <devnull@milas.dev>
2024-02-26 04:32:18 -08:00
Ricardo Katz
585c297dda
Fix golang makefile var name ( #10932 )
2024-01-28 15:59:52 -08:00
Ricardo Katz
59daa4c327
Fixing image push ( #10931 )
2024-01-28 19:49:15 -03:00
Ricardo Katz
16821e4871
Bump alpine to 3.19.1 ( #10930 )
2024-01-28 13:53:29 -08:00
Ricardo Katz
5acc4230ee
Bump go to v1.21.6 and set a single source of truth ( #10926 )
2024-01-27 17:15:14 -08:00
Ricardo Katz
02e6ebc95a
Add OTEL build test and for NGINX v1.25 ( #10889 )
...
* Add OTEL build test
* Simplify otel compilation
* Remove http2 deprecated arg
* Move image build to CI
* Turn image from scratch to optimize usage
* rollback image from scratch
* Final reviews on nginx v1.25 image
* Remove s390x from final image
2024-01-27 07:33:50 -08:00
Long Wu Yuan
760bf8eb0c
fix run command in dockerfile of test-runner-image ( #10921 )
2024-01-26 19:21:16 +01:00
longwuyuan
f6a28feb63
bump ginkgo to 2-15-0
2024-01-23 00:15:40 +05:30
Long Wu Yuan
103dae67dc
changed yamale install from pip to manual download & install ( #10886 )
2024-01-22 12:08:48 +01:00
Ehsan Saei
8227888ba0
fix OpenTelemtry image build ( #10888 )
...
* fix OpenTelemtry image build
* use fpic
2024-01-21 21:56:39 +01:00
Long Wu Yuan
256374079f
changed pip to apk in test-runner dockerfile ( #10885 )
2024-01-20 04:20:03 +01:00
Ricardo Katz
ed3f067b8f
Build NGINX v1.25 image ( #10629 )
2024-01-19 23:31:41 +01:00
James Strong
c9c72c4e26
force nginx rebuild ( #10883 )
2024-01-19 22:33:56 +01:00
Long Wu Yuan
bf84f0eda2
bump yamllinter to v1330 ( #10875 )
2024-01-19 15:44:44 +01:00
Long Wu Yuan
dcb99b2fa9
added --user flag to pip install ( #10874 )
2024-01-19 04:11:30 +01:00
Long Wu Yuan
94a635acf8
bump pinned ginkgo version to v2.14.0 ( #10872 )
2024-01-18 21:08:48 +01:00
Ricardo Katz
a9eb4dba40
Use dockerhub for e2e and demo images ( #10851 )
2024-01-15 02:09:13 +01:00
Ricardo Katz
42627fb1bd
Use dockerhub for e2e and demo images ( #10850 )
2024-01-15 01:35:46 +01:00
Ricardo Katz
c9a3571556
Reuse workflow CI ( #10826 )
...
* Reuse workflow CI
* Simplify images Makefiles
2024-01-13 14:15:35 +01:00
Adrian
dc36582389
change MODSECURITY_VERSION_LIB to 3.0.11 ( #10800 )
...
* feat: change MODSECURITY_VERSION_LIB to 3.0.11
* use sha commit instead of tag
2023-12-27 00:54:00 +01:00
Ricardo Katz
1a7112e063
Add common label to Dockerfiles ( #10803 )
2023-12-26 02:38:42 +01:00
Ehsan Saei
7c998b5937
otel distroless ( #10741 )
2023-12-08 23:15:02 +01:00
James Strong
208ea484a8
revert golang 1.21.5 and alpine 3.19 not available yet
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-08 14:43:21 -05:00
James Strong
f555a5659a
smore missing builds
2023-12-08 14:41:23 -05:00
James Strong
5d82d18350
missed some
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-08 14:37:20 -05:00
James Strong
c211e75065
upgrade alpine to 3.19.0
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-08 14:15:22 -05:00
James Strong
6807537a70
upgrade go 1.21.5 ( #10732 )
...
* upgrade go 1.21.5
Signed-off-by: James Strong <strong.james.e@gmail.com>
* update golang gha
Signed-off-by: James Strong <strong.james.e@gmail.com>
* supgrade golang lint ci to v1.55.2
* sfix all golang lint ci errors
* sget a nginx build as well
* srevert some e2e changes
* srevert some e2e changes
---------
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-08 01:52:14 +01:00
Sonu Kumar Singh
6152695c78
images: upgrade to Alpine 3.18.5 ( #10722 )
2023-12-07 15:57:33 +01:00
James Strong
a75db69c2e
Revert "upgrade nginx"
2023-11-29 11:44:48 -05:00
James Strong
3a9cd1bd7e
sremove the v
2023-11-21 13:23:04 -05:00
James Strong
1adb1116a4
remove unneeded patches
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-11-21 12:19:02 -05:00
James Strong
4e39571ed4
upgrade nginx
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-11-21 11:44:54 -05:00
Jintao Zhang
0a054d1f58
chore(dep): change lua-resty-cookie's repo ( #10630 )
...
since cloudflare has archived the upstream repo,
we choose a more active forked repo to use.
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-11-19 22:14:57 +01:00
Ricardo Katz
9ed0d7f7af
Separate third party NGINX configuration ( #10470 )
...
* Document container separation
* Separate configurations
2023-11-03 14:46:32 +01:00
Ricardo Katz
a879829408
Fix fcgi configmap value parsing ( #10528 )
2023-10-17 01:10:16 +02:00
Jintao Zhang
0055ba3ea6
Remove legacy GeoIP from image ( #10500 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2023-10-16 00:41:51 +02:00
Ricardo Katz
8b53cabe03
Bump curl and Go version ( #10503 )
...
* Bump curl and Go version
* Add NGINX BAse image scanning
* Try again
2023-10-11 16:16:11 +02:00
Mark D. Gray
86f1cedcad
add upstream patch for CVE-2023-44487 ( #10494 )
...
* add upstream patch
* add source
* remove auto-added depend
2023-10-11 02:36:13 +02:00
Ricardo Katz
3e26fc3740
Revert "Remove curl from nginx base image ( #10477 )" ( #10479 )
...
This reverts commit 8bd33d29e7
.
2023-10-07 04:04:58 +02:00
James Strong
223c70bd09
update error and otel to have all the arch we support ( #10476 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-10-05 07:42:21 +02:00
Ricardo Katz
8bd33d29e7
Remove curl from nginx base image ( #10477 )
2023-10-04 21:48:34 +02:00
James Strong
3a28016a64
fix brotli build issues
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-10-01 14:51:48 -04:00
Nicolas Woerner
362ec37778
images: upgrade to Alpine 3.18.4 ( #10466 )
2023-10-01 11:18:44 -07:00
Rashad Mammadli
c3194dd388
upgrade owasp modsecurity core rule set to v3.3.5 ( #10323 )
2023-09-24 07:54:56 -07:00
Son Bui
4664b741ff
fix: remove curl on base container #9716 ( #10306 )
...
* fix: remove curl on base container #9716
* fix: remove curl on chroot container #9716
Signed-off-by: Son Bui <sonbv00@gmail.com>
* fix: remove curl on test runner image #9716
Signed-off-by: Son Bui <sonbv00@gmail.com>
* fix: remove curl on e2e runner container #9716
Signed-off-by: Son Bui <sonbv00@gmail.com>
---------
Signed-off-by: Son Bui <sonbv00@gmail.com>
2023-09-08 10:34:15 -07:00
Ricardo Katz
8b85bada82
Bump Go version to 1.21.1 ( #10377 )
...
* Bump Go version to 1.21.1
* Bump testrunner image
2023-09-07 13:40:58 -07:00
Ricardo Katz
5bb82dcb7e
Bump Go version to 1.21.1 on testrunner ( #10378 )
2023-09-07 16:55:06 -03:00
Ehsan Saei
02236ca965
Upgrade OpenTelemetry to v1.11.0 and gRPC to v1.57.0 ( #10352 )
...
* Upgrade OpenTelemetry to v1.11.0 and gRPC to v1.57
* upgrade module
2023-09-03 14:13:47 -07:00
Chen Chen
b3060bfbd0
Fix golangci-lint errors ( #10196 )
...
* Fix golangci-lint errors
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix dupl errors
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix comments
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix errcheck lint errors
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix assert in e2e test
Signed-off-by: z1cheng <imchench@gmail.com>
* Not interrupt the waitForPodsReady
Signed-off-by: z1cheng <imchench@gmail.com>
* Replace string with constant
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix comments
Signed-off-by: z1cheng <imchench@gmail.com>
* Revert write file permision
Signed-off-by: z1cheng <imchench@gmail.com>
---------
Signed-off-by: z1cheng <imchench@gmail.com>
2023-08-31 00:36:48 -07:00
Lucas Fernando Cardoso Nunes
6b05e9b06e
fix: add /etc/mime.types #10309 ( #10310 )
...
Signed-off-by: Lucas Fernando Cardoso Nunes <lucasfc.nunes@gmail.com>
2023-08-13 08:27:20 -07:00
Jintao Zhang
c83422fd65
fix deps sha
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-07-22 06:41:22 +08:00
James Strong
b0081a574a
update reg
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-07-20 21:05:38 -04:00
James Strong
e8097d8b8f
fix gcloud builds
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-07-20 21:04:21 -04:00
James Strong
24fda9da20
Golang 1.20.6 for test runner ( #10230 )
...
* Golang 1.20.6 for test runner
* alpine 3.18.2 as well
Signed-off-by: James Strong <strong.james.e@gmail.com>
---------
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-07-20 14:34:12 -07:00
Jintao Zhang
6416ed821d
chore: bump OpenResty to v1.21.4.2 ( #10219 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-07-20 08:36:09 -07:00
Chen Chen
d44a8e0045
Fix golang-ci linter errors ( #10128 )
...
* Fix golang-ci linter errors
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix gofmt errors
Signed-off-by: z1cheng <imchench@gmail.com>
* Add nolint comment to defaults.Backend in Configuration
Signed-off-by: z1cheng <imchench@gmail.com>
* Add #nosec comment to rand.New func
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix errcheck warnings
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix gofmt check
Signed-off-by: z1cheng <imchench@gmail.com>
* Fix unit tests and comments
Signed-off-by: z1cheng <imchench@gmail.com>
---------
Signed-off-by: z1cheng <imchench@gmail.com>
2023-07-03 05:50:52 -07:00
Ricardo Katz
ebb6314494
Deprecate and remove AJP support ( #10158 )
2023-07-02 02:26:49 -07:00
Long Wu Yuan
643c475db0
bump pinned golang to 1.20.5 ( #10127 )
2023-06-25 18:33:11 -07:00
James Strong
58650d6aaa
rebuild nginx base container image
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-06-23 15:29:48 -04:00
James Strong
44b0067191
add gcloud ignore
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-06-23 09:31:00 -04:00
James Strong
8cdbcfa61c
golang 1.20.5 bump ( #10120 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-06-22 10:25:41 -07:00
Jintao Zhang
cccba35005
Revert "Remove fastcgi feature" ( #10081 )
...
* Revert "Remove fastcgi feature (#9864 )"
This reverts commit 90ed0ccdbe
.
* revert fastcgi* annotations warning
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
---------
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-06-13 12:55:59 -07:00
Ehsan Saei
436df32c2c
add distroless otel init ( #10035 )
...
add distroless otel init
2023-06-12 03:47:48 -07:00
Ricardo Katz
90ed0ccdbe
Remove fastcgi feature ( #9864 )
2023-06-11 13:33:47 -07:00
David Goffredo
05e5956545
tracing: upgrade to dd-opentracing-cpp v1.3.7 ( #10031 )
2023-06-11 11:45:47 -07:00
James Strong
bd19644e5c
Merge pull request #10025 from strongjz/nginx-tag
...
Add a tag here so we force nginx builds to cloudbuild
2023-06-02 11:03:35 -04:00