Commit graph

182 commits

Author SHA1 Message Date
Long Wu Yuan
7d27f39953
ensured hpa mem spec before cpu spec (#10043) 2023-06-05 08:07:27 -07:00
Peter Jakubis
df0be089d2
PodDisruptionBudget spec logic update (#9904)
Signed-off-by: Peter Jakubis <balonik32@gmail.com>
2023-05-25 10:26:53 -07:00
Federico Cuello
8c7981bfa2
helm: Fix opentelemetry module installation for daemonset (#9792)
* fix: opentelemetry module for controller-daemonset

* fix: Align controller-daemonset with controller-deployment

* Fix typo in github/workflows/ci
2023-05-22 07:42:34 -07:00
Marco Ebert
06612e6ffd
HPA: Use capabilites & align manifests. (#9521) 2023-05-11 09:37:03 -07:00
vkanelov
f18826b73e
add option for annotations in PodDisruptionBudget (#9843)
add option for annotations in PodDisruptionBudget
2023-05-10 14:39:14 -07:00
Jan-Otto Kröpke
d8f54420a4
[helm] Support custom port configuration for internal service (#9846)
Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de>
2023-05-01 08:18:19 -07:00
plynch-magnolia
01d2646538
Adding resource type to default HPA configuration to resolve issues with Terraform helm chart usage (#9803) 2023-04-24 08:33:02 -07:00
Taehyun Kim
e3c9382fc9
fix: controller psp's volume config (#9740)
* fix: controller psp's volume config

* revert chart version
2023-03-21 06:41:08 -07:00
Adam Jacques
00bfb2e84a
Fix several Helm YAML issues with extraModules and extraInitContainers (#9709)
* Fix indention issue for DaemonSets when using extraModules and extraInitContainers

* Improve documentation

* Unify and fix templating

* Enable support for the opentelemetry from values.yaml
2023-03-21 06:37:08 -07:00
Marco Ebert
58e5a2c01f
Chart: Drop controller.headers, rework DH param secret. (#9659) 2023-03-16 18:39:16 -07:00
Marco Ebert
47eb3a17fd
Deployment/DaemonSet: Label pods using ingress-nginx.labels. (#9732) 2023-03-14 06:44:17 -07:00
Do Hoang Khiem
e2d076c4fc
HPA: autoscaling/v2beta1 deprecated, bump apiVersion to v2 for defaultBackend (#9731) 2023-03-14 04:32:18 -07:00
James Strong
01c9a2bf25
Revert Implement pathType validation (#9511) (#9607)
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-02-12 22:57:29 -08:00
James Strong
7d1c47ab54
Switch logic on path type validation and setting it to false (#9543)
* update path type validation to be false and update e2e test scripts

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update to make tests clear

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update test params

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Adding else per pr comments

Signed-off-by: James Strong <james.strong@chainguard.dev>

---------

Signed-off-by: James Strong <strong.james.e@gmail.com>
Signed-off-by: James Strong <james.strong@chainguard.dev>
2023-01-31 17:09:06 -08:00
Ricardo Katz
da98c744b9
Implement pathType validation (#9511) 2023-01-16 23:51:23 -03:00
Tomas Hulata
5b2a9475dc
feat: support topology aware hints (#9165)
* support topology aware hints

Signed-off-by: tombokombo <tombo@sysart.tech>

* add flag to enable topology and fixes

Signed-off-by: tombokombo <tombo@sysart.tech>

* update readme

Signed-off-by: tombokombo <tombo@sysart.tech>

* add e2e test

Signed-off-by: tombokombo <tombo@sysart.tech>

* isolate topology test

Signed-off-by: tombokombo <tombo@sysart.tech>

* gofmt fix

Signed-off-by: tombokombo <tombo@sysart.tech>

Signed-off-by: tombokombo <tombo@sysart.tech>
2023-01-15 18:46:50 -08:00
yutachaos
bbf7c79f96
Add update updateStrategy and minReadySeconds for defaultBackend (#8506)
* Add update updateStrategy and minReadySeconds for defaultBackend

* Bump chart

* Fixed docs helm-docs version
2023-01-08 14:37:27 -08:00
Marco Ebert
5b0403314c
Admission Webhooks/Job: Add NetworkPolicy. (#9218) 2023-01-08 13:59:28 -08:00
Jan-Otto Kröpke
d7674e4323
feat(helm): Optionally use cert-manager instead admission patch (#9279) 2022-12-07 04:16:38 -08:00
Ehsan Saei
3474c33e15
update OpenTelemetry image (#9308)
* update OpenTelemetry image

* review comment

* helm-docs

* clean
2022-12-05 00:55:02 -08:00
Sjouke de Vries
27ffeeb18f
fix(hpa): deprecated api version, bump to v2 (#9348)
* fix(hpa): deprecated api version, bump to v2

* chore(hpa): abstract hpa apiVersion to helm value

* feat(hpa): add controller.autoscaling.apiVersion docs in README

* docs(hpa): quotes around apiVersion string type

* chore(hpa): run helm-docs in repo

* chore(hpa): remove local helm-docs module install and output

* docs(helm): add hpa controller.autoscaling.apiVersion description

* docs(hpa): remove autoscaling.apiVersion description as it fails ci
2022-12-04 11:35:56 -08:00
aimuz
b34f6ef324
remove the configmap related permissions (#9310)
ref: https://github.com/kubernetes/ingress-nginx/pull/8921
We have used the Lease API for selection

Signed-off-by: aimuz <mr.imuz@gmail.com>

Signed-off-by: aimuz <mr.imuz@gmail.com>
2022-11-23 17:38:03 -08:00
Michael Wittig
69a811dde9
fix broken annotation yaml (#9243) 2022-11-10 05:48:56 -08:00
Marco Ebert
170af7be88
PDB: Add maxUnavailable. (#9278) 2022-11-10 03:20:54 -08:00
pellmont
726d7e6239
add containerSecurityContext to extraModules init containers (kubernetes#9016) (#9242) 2022-11-10 02:38:54 -08:00
Njegos Railic
4d4358f673
Adding support for disabling liveness and readiness probes in the Helm chart (#9238) 2022-11-08 06:44:25 -08:00
Youssef Bel Mekki
ac1a3363bd
add:(admission-webhooks) ability to set securityContext for job-containers createSecret and patchWebhook (#9186)
Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>

Signed-off-by: ybelMekk <youssef.bel.mekki@nav.no>
2022-10-25 14:14:36 -07:00
FutureMatt
249780737c
#7652 - Updated Helm chart to use the fullname for the electionID if not specified. (#9133)
* Automatically generate electionID from the fullname or use the set value.

* Updated the chart readme to include the new empty default.

* Rebuilt the Helm readme with helm-docs.
2022-10-13 07:37:01 -07:00
Marco Ebert
83aa9e472f
Rename controller-wehbooks-networkpolicy.yaml -> controller-webhooks-networkpolicy.yaml. (#9123) 2022-10-05 09:14:05 -07:00
Matt Lauber
dacb8da058
Fix yaml formatting error with multiple annotations (#9104)
When using multiple values for the `serviceAccount.annotations` values, the first line ends up indented 2 further than the following lines, resulting in a invalid yaml
2022-09-30 08:06:29 -07:00
James Strong
8f18c0f973
Merge pull request #9046 from anders-swanson/revert-8665-metrics-port-name
Parameterize metrics port name
2022-09-30 11:04:00 -04:00
Ehsan Saei
1a078af307
fix chroot module mount path (#9090) 2022-09-28 14:02:30 -07:00
Wilmar den Ouden
67f7d3da63
fix: do not apply job-patch psp on Kubernetes 1.25 and newer (#9074)
* fix: do not apply job-patch psp on Kubernetes 1.25 and newer

Signed-off-by: wilmarguida <w.denouden@guida.nl>

* fix: bump kubernetes version for helm chart CI to 1.25.0

Signed-off-by: wilmarguida <w.denouden@guida.nl>

Signed-off-by: wilmarguida <w.denouden@guida.nl>
2022-09-24 04:38:05 -07:00
Tomas Hulata
3579ed0487
feat: switch from endpoints to endpointslices (#8890)
* endpointslices

Signed-off-by: tombokombo <tombo@sysart.tech>

* cleanup

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix rbac

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix comments

Signed-off-by: tombokombo <tombo@sysart.tech>

* cleanup store, add store tests

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix copyright date

Signed-off-by: tombokombo <tombo@sysart.tech>

Signed-off-by: tombokombo <tombo@sysart.tech>
2022-09-23 12:38:04 -07:00
Anders Swanson
e7c793f65d parameterize port name 2022-09-12 12:34:40 -07:00
Anders Swanson
6ef7317581 Revert "Metrics port name (Helm) (#8665)"
This reverts commit adeb84aa38.
2022-09-12 07:28:44 -07:00
James Strong
db3cdc04e4
release 1.3.1 (#9014)
* release 1.3.1

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Fix chart linter

* Fix helm docs

* Fix helm docs

* fix helm docs

* Add warning about lease change

* Disable PSP in v1.25

* rollback cluster in helmchart to psp tests

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2022-09-05 04:28:36 -07:00
Jintao Zhang
ffcf13c09b
revert changes to configmap resource permissions (#8959)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-08-23 00:29:24 -07:00
Anders Swanson
adeb84aa38
Metrics port name (Helm) (#8665) 2022-08-22 16:20:09 -07:00
omichels
cad575e923
securityContext in admission-webhook now configurable e.g. to set seccompProfiles (#8930)
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
2022-08-22 16:12:09 -07:00
Mangirdas Judeikis
1791b62e45
Add NetworkPolicy support (#8928)
* Add NetworkPolicy support

* add doc for np
2022-08-22 16:08:09 -07:00
Jintao Zhang
730174f73d
feat: using LeaseLock for election (#8921)
We removed the use of configmap as an election lock, so we will use the
Lease API to complete the election.

Before this, we used `MultiLock` to facilitate smooth migration of
existing users of ingress-nginx from configmap to LeaseLock.

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-08-22 15:38:16 -07:00
Steven Bambling
9325819345
Add condition for monitoring.coreos.com/v1 API (#8770) 2022-07-10 14:05:47 -07:00
Jintao Zhang
cf4dca8e43
feat: migrate leaderelection lock to leases (#8733)
* feat: migrate leaderelection lock to leases

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* Update RBAC

Co-authored-by: Shafeeque E S <shafeeque.e.s@sap.com>
2022-07-09 05:37:46 -07:00
Eric84626
7806159b38
support extraEnvs for job resources in helm chart (#8545)
* support extraEnvs for job resources in helm chart

Signed-off-by: Li, Eric <Xiannan.li@fmr.com>

* Update helm doc

* Update helm doc

* Updated helm doc - add controller.admissionWebhooks.extraEnvs

* Added some test data for webhook controller.admissionWebhooks.extraEnvs

* added new line at the end of deployment-webhook-extraEnvs-values.yaml

* Fixed helm chart test issue
2022-06-21 07:16:26 -07:00
Mac Chaffee
6c3a237d7d
Add CAP_SYS_CHROOT to DS/PSP when needed (#8587)
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-05-16 06:30:18 -07:00
Pavel Selivanov
61fcca3a3a
Add portNamePreffix Helm chart parameter (#8458)
Allow user to set custom preffix for TCP and UDP ports
2022-05-10 09:13:43 -07:00
Ricardo Katz
3def835a6a
Jail/chroot nginx process inside controller container (#8337)
* Initial work on chrooting nginx process

* More improvements in chroot

* Fix charts and some file locations

* Fix symlink on non chrooted container

* fix psp test

* Add e2e tests to chroot image

* Fix logger

* Add internal logger in controller

* Fix overlay for chrooted tests

* Fix tests

* fix boilerplates

* Fix unittest to point to the right pid

* Fix PR review
2022-04-08 21:48:04 -07:00
James Strong
ac3b86b2c3
release 1.1.3 details (#8411)
* release 1.1.3 details
fix the readme with right sha and version
remove helm label
fix issue 8329
fix the 1.20 service after the fix for ipv6
udpate readme and change for patches

* update helm doc

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 09:14:46 -07:00
thomasbruggink
9180ef1ee4
Add the shareProcessNamespace as a configurable setting. (#8287) 2022-03-14 08:51:57 -07:00