Commit graph

698 commits

Author SHA1 Message Date
Marco Ebert
d6f2b86508
Images: Trigger test-runner build. (#11636) 2024-07-17 15:50:39 -07:00
Marco Ebert
290de76a1b Images: Trigger NGINX build. 2024-07-17 21:32:05 +02:00
James Strong
07de893db1 bump testing runner
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-16 11:36:47 -04:00
Christian
6de184668c
remove modsecurity coreruleset test files from nginx image (#11617) 2024-07-16 06:00:59 -07:00
James Strong
a6727d81e7
unskip the ocsp tests and update images to fix cfssl bug (#11606)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-16 00:01:10 -07:00
Marco Ebert
cee3fb3b13
Images: Bump test-runner. (#11600) 2024-07-11 06:44:55 -07:00
James Strong
90fa3b9823
revert module upgrade (#11594)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-10 16:30:30 -07:00
Marco Ebert
e564e831c5
Images: Bump kube-webhook-certgen. (#11578) 2024-07-08 11:10:59 -07:00
James Strong
84b8270bd6 update test runner go base to 3.20
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-03 14:05:23 -04:00
James Strong
21d6a773d1 tag new test runner image with new nginx base 0.0.8
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-03 13:59:01 -04:00
Jintao Zhang
b90dd919e0
trigger build for NGINX-1.25 v0.0.8 (#11533)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2024-07-02 09:02:00 -07:00
Olivier Wenger
773590f791
bump alpine version to 3.20 to custom-error-pages (#11530) 2024-07-02 08:47:59 -07:00
Jon Carl
7de28cfcdb
add ssl patches to nginx-1.25 image for coroutines to work in lua client hello and cert ssl blocks (#11485)
* feat: add ssl patches for coroutines to work in lua ssl blocks

Signed-off-by: Jon Carl <grounded042@joncarl.com>

* switch to include more patches

Signed-off-by: Jon Carl <grounded042@joncarl.com>

---------

Signed-off-by: Jon Carl <grounded042@joncarl.com>
2024-07-02 06:25:59 -07:00
Stepan Paksashvili
6a111a974b
Docs: Add information about HTTP/3 support. (#11513)
* [docs] update README to add information about HTTP/3 support

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

* Apply suggestions from code review

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* Apply suggestions from code review

Co-authored-by: Marco Ebert <marco_ebert@icloud.com>

* [docs] update README

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

---------

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-01 13:51:02 +02:00
JesseBot
6087e04cb1
Upgrade OWASP_MODSECURITY_CRS_VERSION 3.3.5 to 4.4.0 and update docs (#11511)
Signed-off-by: jessebot <jessebot@linux.com>
2024-07-01 11:05:15 +02:00
Stepan Paksashvili
44849cb302
[feature] bump nginx to 1.25.5 and add http3 module (#11470)
* [feature] bump nginx to 1.25.5, add http3 module, and update lua-stream, lua_ngx, mimaloc, opentelemetry_cpp, opentelemetry_proto and opentelemtry_contrib

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

* [feature] revert opentelemetry and owasp updates

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>

---------

Signed-off-by: Stepan Paksashvili <stepan.paksashvili@flant.com>
2024-06-18 12:29:37 -07:00
Marco Ebert
9ca96df6af
CI: Bump forgotten Ginkgo versions. (#11467) 2024-06-15 01:29:28 -07:00
James Strong
0cf1994864
upgrade to alpine 3.20 (#11428)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-06-09 17:17:59 -07:00
Ricardo Katz
cfe0daace1
Bump Kubernetes version on images (#11346) 2024-05-05 19:06:28 -07:00
dependabot[bot]
6bfc30a4b9
Bump golang.org/x/net in /images/kube-webhook-certgen/rootfs (#11283)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-19 06:44:17 -07:00
Long Wu Yuan
7decd01468
bumped certgeimage tag (#11212) 2024-04-05 03:31:01 -07:00
Long Wu Yuan
622e36fd6a
bump ginkgo to 2-17-1 in testrunner (#11202) 2024-04-04 08:07:33 -07:00
Marco Ebert
bf3fa53167
Owners: Promote Gacko to ingress-nginx-maintainers & ingress-nginx-reviewers. (#11165)
* Owners: Sort `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.

* Owners: Update URL in aliases.

* Images: Remove owners as it's identical to global owners.

* Images: Remove global owners from `kube-webhook-certgen` owners.

* Owners: Remove members from aliases covered by other aliases.

ingress-nginx-helm-maintainers:
- cpanato: Covered by ingress-nginx-maintainers
- strongjz: Covered by ingress-nginx-maintainers

ingress-nginx-helm-reviewers:
- cpanato: Covered by ingress-nginx-reviewers
- strongjz: Covered by ingress-nginx-reviewers

ingress-nginx-docs-maintainers:
- tao12345666333: Covered by ingress-nginx-maintainers

* Owners: Promote myself to `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.
2024-04-04 08:01:10 -07:00
James Strong
8d402ebfd8 update test image and go version
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-04-04 09:27:19 -04:00
James Strong
404bfc3485 force nginx rebuild
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-04-04 09:20:16 -04:00
Y.Horie
25d2758e94
fixes brotli build issue (#10484) 2024-03-30 09:23:32 -07:00
Carlos Tadeu Panato Junior
5052c8acc0
bump ginkgo to v2.17.1 (#11177)
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-29 05:39:28 -07:00
dependabot[bot]
e3ea23110a
Bump google.golang.org/protobuf in /images/custom-error-pages/rootfs (#11119)
Bumps google.golang.org/protobuf from 1.28.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-14 07:32:08 -07:00
dependabot[bot]
a00a1499a0
Bump google.golang.org/protobuf in /images/kube-webhook-certgen/rootfs (#11120)
Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-13 16:51:31 -07:00
Carlos Tadeu Panato Junior
12fbe9b163
golangci-lint update, ci cleanup, group dependabot updates (#11071)
* bump golangci-lint to v1.56.x

Signed-off-by: cpanato <ctadeu@gmail.com>

* cleanup empty lines

Signed-off-by: cpanato <ctadeu@gmail.com>

* group dependabot updates

Signed-off-by: cpanato <ctadeu@gmail.com>

* run on job changes as well

Signed-off-by: cpanato <ctadeu@gmail.com>

* remove deprecated checks

Signed-off-by: cpanato <ctadeu@gmail.com>

* fix lints and format

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-07 02:39:53 -08:00
Ricardo Katz
862b05d913
Fix kubewebhook image tag (#11033) 2024-02-27 15:51:37 -03:00
Ricardo Katz
fa0bf81984
Bump go libraries (#11023)
* Bump go libraries

* Fix update codegen execution

* Fix errors on klog

* Fix gzip test

* Bump libraries on webhook certgen

* Fix webhook-certgen compilation
2024-02-27 09:52:42 -08:00
Ricardo Katz
0a87031bbd
Bump modsecurity on nginx 1.25 (#11024) 2024-02-26 17:08:45 -08:00
Ricardo Katz
391a304b10
Bump grpc and reintroduce OTEL compilation (#11021)
* Bump grpc and reintroduce OTEL compilation

* Enable s390x again
2024-02-26 15:05:00 -08:00
Milas Bowman
e78af97ecd
chore(deps): upgrade headers-more module to 0.37 (#10991)
https://github.com/openresty/headers-more-nginx-module/compare/v0.34...v0.37

Signed-off-by: Milas Bowman <devnull@milas.dev>
2024-02-26 04:32:18 -08:00
Ricardo Katz
585c297dda
Fix golang makefile var name (#10932) 2024-01-28 15:59:52 -08:00
Ricardo Katz
59daa4c327
Fixing image push (#10931) 2024-01-28 19:49:15 -03:00
Ricardo Katz
16821e4871
Bump alpine to 3.19.1 (#10930) 2024-01-28 13:53:29 -08:00
Ricardo Katz
5acc4230ee
Bump go to v1.21.6 and set a single source of truth (#10926) 2024-01-27 17:15:14 -08:00
Ricardo Katz
02e6ebc95a
Add OTEL build test and for NGINX v1.25 (#10889)
* Add OTEL build test

* Simplify otel compilation

* Remove http2 deprecated arg

* Move image build to CI

* Turn image from scratch to optimize usage

* rollback image from scratch

* Final reviews on nginx v1.25 image

* Remove s390x from final image
2024-01-27 07:33:50 -08:00
Long Wu Yuan
760bf8eb0c
fix run command in dockerfile of test-runner-image (#10921) 2024-01-26 19:21:16 +01:00
longwuyuan
f6a28feb63 bump ginkgo to 2-15-0 2024-01-23 00:15:40 +05:30
Long Wu Yuan
103dae67dc
changed yamale install from pip to manual download & install (#10886) 2024-01-22 12:08:48 +01:00
Ehsan Saei
8227888ba0
fix OpenTelemtry image build (#10888)
* fix OpenTelemtry image build

* use fpic
2024-01-21 21:56:39 +01:00
Long Wu Yuan
256374079f
changed pip to apk in test-runner dockerfile (#10885) 2024-01-20 04:20:03 +01:00
Ricardo Katz
ed3f067b8f
Build NGINX v1.25 image (#10629) 2024-01-19 23:31:41 +01:00
James Strong
c9c72c4e26
force nginx rebuild (#10883) 2024-01-19 22:33:56 +01:00
Long Wu Yuan
bf84f0eda2
bump yamllinter to v1330 (#10875) 2024-01-19 15:44:44 +01:00
Long Wu Yuan
dcb99b2fa9
added --user flag to pip install (#10874) 2024-01-19 04:11:30 +01:00
Long Wu Yuan
94a635acf8
bump pinned ginkgo version to v2.14.0 (#10872) 2024-01-18 21:08:48 +01:00
Ricardo Katz
a9eb4dba40
Use dockerhub for e2e and demo images (#10851) 2024-01-15 02:09:13 +01:00
Ricardo Katz
42627fb1bd
Use dockerhub for e2e and demo images (#10850) 2024-01-15 01:35:46 +01:00
Ricardo Katz
c9a3571556
Reuse workflow CI (#10826)
* Reuse workflow CI

* Simplify images Makefiles
2024-01-13 14:15:35 +01:00
Adrian
dc36582389
change MODSECURITY_VERSION_LIB to 3.0.11 (#10800)
* feat: change MODSECURITY_VERSION_LIB to 3.0.11

* use sha commit instead of tag
2023-12-27 00:54:00 +01:00
Ricardo Katz
1a7112e063
Add common label to Dockerfiles (#10803) 2023-12-26 02:38:42 +01:00
Ehsan Saei
7c998b5937
otel distroless (#10741) 2023-12-08 23:15:02 +01:00
James Strong
208ea484a8 revert golang 1.21.5 and alpine 3.19 not available yet
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-08 14:43:21 -05:00
James Strong
f555a5659a smore missing builds 2023-12-08 14:41:23 -05:00
James Strong
5d82d18350 missed some
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-08 14:37:20 -05:00
James Strong
c211e75065 upgrade alpine to 3.19.0
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-08 14:15:22 -05:00
James Strong
6807537a70
upgrade go 1.21.5 (#10732)
* upgrade go 1.21.5

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update golang gha

Signed-off-by: James Strong <strong.james.e@gmail.com>

* supgrade golang lint ci to v1.55.2

* sfix all golang lint ci errors

* sget a nginx build as well

* srevert some e2e changes

* srevert some e2e changes

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-08 01:52:14 +01:00
Sonu Kumar Singh
6152695c78
images: upgrade to Alpine 3.18.5 (#10722) 2023-12-07 15:57:33 +01:00
James Strong
a75db69c2e
Revert "upgrade nginx" 2023-11-29 11:44:48 -05:00
James Strong
3a9cd1bd7e sremove the v 2023-11-21 13:23:04 -05:00
James Strong
1adb1116a4 remove unneeded patches
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-11-21 12:19:02 -05:00
James Strong
4e39571ed4 upgrade nginx
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-11-21 11:44:54 -05:00
Jintao Zhang
0a054d1f58
chore(dep): change lua-resty-cookie's repo (#10630)
since cloudflare has archived the upstream repo,
we choose a more active forked repo to use.

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-11-19 22:14:57 +01:00
Ricardo Katz
9ed0d7f7af
Separate third party NGINX configuration (#10470)
* Document container separation

* Separate configurations
2023-11-03 14:46:32 +01:00
Ricardo Katz
a879829408
Fix fcgi configmap value parsing (#10528) 2023-10-17 01:10:16 +02:00
Jintao Zhang
0055ba3ea6
Remove legacy GeoIP from image (#10500)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com>
2023-10-16 00:41:51 +02:00
Ricardo Katz
8b53cabe03
Bump curl and Go version (#10503)
* Bump curl and Go version

* Add NGINX BAse image scanning

* Try again
2023-10-11 16:16:11 +02:00
Mark D. Gray
86f1cedcad
add upstream patch for CVE-2023-44487 (#10494)
* add upstream patch

* add source

* remove auto-added depend
2023-10-11 02:36:13 +02:00
Ricardo Katz
3e26fc3740
Revert "Remove curl from nginx base image (#10477)" (#10479)
This reverts commit 8bd33d29e7.
2023-10-07 04:04:58 +02:00
James Strong
223c70bd09
update error and otel to have all the arch we support (#10476)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-10-05 07:42:21 +02:00
Ricardo Katz
8bd33d29e7
Remove curl from nginx base image (#10477) 2023-10-04 21:48:34 +02:00
James Strong
3a28016a64
fix brotli build issues
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-10-01 14:51:48 -04:00
Nicolas Woerner
362ec37778
images: upgrade to Alpine 3.18.4 (#10466) 2023-10-01 11:18:44 -07:00
Rashad Mammadli
c3194dd388
upgrade owasp modsecurity core rule set to v3.3.5 (#10323) 2023-09-24 07:54:56 -07:00
Son Bui
4664b741ff
fix: remove curl on base container #9716 (#10306)
* fix: remove curl on base container #9716

* fix: remove curl on chroot container #9716

Signed-off-by: Son Bui <sonbv00@gmail.com>

* fix: remove curl on test runner image #9716

Signed-off-by: Son Bui <sonbv00@gmail.com>

* fix: remove curl on e2e runner container #9716

Signed-off-by: Son Bui <sonbv00@gmail.com>

---------

Signed-off-by: Son Bui <sonbv00@gmail.com>
2023-09-08 10:34:15 -07:00
Ricardo Katz
8b85bada82
Bump Go version to 1.21.1 (#10377)
* Bump Go version to 1.21.1

* Bump testrunner image
2023-09-07 13:40:58 -07:00
Ricardo Katz
5bb82dcb7e
Bump Go version to 1.21.1 on testrunner (#10378) 2023-09-07 16:55:06 -03:00
Ehsan Saei
02236ca965
Upgrade OpenTelemetry to v1.11.0 and gRPC to v1.57.0 (#10352)
* Upgrade OpenTelemetry to v1.11.0 and gRPC to v1.57

* upgrade module
2023-09-03 14:13:47 -07:00
Chen Chen
b3060bfbd0
Fix golangci-lint errors (#10196)
* Fix golangci-lint errors

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix dupl errors

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix comments

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix errcheck lint errors

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix assert in e2e test

Signed-off-by: z1cheng <imchench@gmail.com>

* Not interrupt the waitForPodsReady

Signed-off-by: z1cheng <imchench@gmail.com>

* Replace string with constant

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix comments

Signed-off-by: z1cheng <imchench@gmail.com>

* Revert write file permision

Signed-off-by: z1cheng <imchench@gmail.com>

---------

Signed-off-by: z1cheng <imchench@gmail.com>
2023-08-31 00:36:48 -07:00
Lucas Fernando Cardoso Nunes
6b05e9b06e
fix: add /etc/mime.types #10309 (#10310)
Signed-off-by: Lucas Fernando Cardoso Nunes <lucasfc.nunes@gmail.com>
2023-08-13 08:27:20 -07:00
Jintao Zhang
c83422fd65 fix deps sha
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-07-22 06:41:22 +08:00
James Strong
b0081a574a
update reg
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-07-20 21:05:38 -04:00
James Strong
e8097d8b8f
fix gcloud builds
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-07-20 21:04:21 -04:00
James Strong
24fda9da20
Golang 1.20.6 for test runner (#10230)
* Golang 1.20.6 for test runner

* alpine 3.18.2 as well

Signed-off-by: James Strong <strong.james.e@gmail.com>

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-07-20 14:34:12 -07:00
Jintao Zhang
6416ed821d
chore: bump OpenResty to v1.21.4.2 (#10219)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-07-20 08:36:09 -07:00
Chen Chen
d44a8e0045
Fix golang-ci linter errors (#10128)
* Fix golang-ci linter errors

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix gofmt errors

Signed-off-by: z1cheng <imchench@gmail.com>

* Add nolint comment to defaults.Backend in Configuration

Signed-off-by: z1cheng <imchench@gmail.com>

* Add #nosec comment to rand.New func

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix errcheck warnings

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix gofmt check

Signed-off-by: z1cheng <imchench@gmail.com>

* Fix unit tests and comments

Signed-off-by: z1cheng <imchench@gmail.com>

---------

Signed-off-by: z1cheng <imchench@gmail.com>
2023-07-03 05:50:52 -07:00
Ricardo Katz
ebb6314494
Deprecate and remove AJP support (#10158) 2023-07-02 02:26:49 -07:00
Long Wu Yuan
643c475db0
bump pinned golang to 1.20.5 (#10127) 2023-06-25 18:33:11 -07:00
James Strong
58650d6aaa
rebuild nginx base container image
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-06-23 15:29:48 -04:00
James Strong
44b0067191
add gcloud ignore
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-06-23 09:31:00 -04:00
James Strong
8cdbcfa61c
golang 1.20.5 bump (#10120)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-06-22 10:25:41 -07:00
Jintao Zhang
cccba35005
Revert "Remove fastcgi feature" (#10081)
* Revert "Remove fastcgi feature (#9864)"

This reverts commit 90ed0ccdbe.

* revert fastcgi* annotations warning

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

---------

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2023-06-13 12:55:59 -07:00
Ehsan Saei
436df32c2c
add distroless otel init (#10035)
add distroless otel init
2023-06-12 03:47:48 -07:00
Ricardo Katz
90ed0ccdbe
Remove fastcgi feature (#9864) 2023-06-11 13:33:47 -07:00
David Goffredo
05e5956545
tracing: upgrade to dd-opentracing-cpp v1.3.7 (#10031) 2023-06-11 11:45:47 -07:00
James Strong
bd19644e5c
Merge pull request #10025 from strongjz/nginx-tag
Add a tag here so we force nginx builds to cloudbuild
2023-06-02 11:03:35 -04:00