Commit graph

296 commits

Author SHA1 Message Date
Matt Lauber
dacb8da058
Fix yaml formatting error with multiple annotations (#9104)
When using multiple values for the `serviceAccount.annotations` values, the first line ends up indented 2 further than the following lines, resulting in a invalid yaml
2022-09-30 08:06:29 -07:00
James Strong
8f18c0f973
Merge pull request #9046 from anders-swanson/revert-8665-metrics-port-name
Parameterize metrics port name
2022-09-30 11:04:00 -04:00
Long Wu Yuan
61be730b91
kubewebhookcertgen sha change after go1191 (#9059) 2022-09-29 08:42:54 -07:00
Ehsan Saei
1a078af307
fix chroot module mount path (#9090) 2022-09-28 14:02:30 -07:00
Wilmar den Ouden
67f7d3da63
fix: do not apply job-patch psp on Kubernetes 1.25 and newer (#9074)
* fix: do not apply job-patch psp on Kubernetes 1.25 and newer

Signed-off-by: wilmarguida <w.denouden@guida.nl>

* fix: bump kubernetes version for helm chart CI to 1.25.0

Signed-off-by: wilmarguida <w.denouden@guida.nl>

Signed-off-by: wilmarguida <w.denouden@guida.nl>
2022-09-24 04:38:05 -07:00
Tomas Hulata
3579ed0487
feat: switch from endpoints to endpointslices (#8890)
* endpointslices

Signed-off-by: tombokombo <tombo@sysart.tech>

* cleanup

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix rbac

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix comments

Signed-off-by: tombokombo <tombo@sysart.tech>

* cleanup store, add store tests

Signed-off-by: tombokombo <tombo@sysart.tech>

* fix copyright date

Signed-off-by: tombokombo <tombo@sysart.tech>

Signed-off-by: tombokombo <tombo@sysart.tech>
2022-09-23 12:38:04 -07:00
Ehsan Saei
1ce0b55f62
update OpenTelemetry image (#9036)
* update OpenTelemetry image

* use promoted image
2022-09-15 12:37:34 -07:00
Anders Swanson
adb7a9d6cc Fix for Docs check 2022-09-12 13:03:54 -07:00
Anders Swanson
4bb3b3877c Document new values key 2022-09-12 12:45:54 -07:00
Anders Swanson
e7c793f65d parameterize port name 2022-09-12 12:34:40 -07:00
Anders Swanson
6ef7317581 Revert "Metrics port name (Helm) (#8665)"
This reverts commit adeb84aa38.
2022-09-12 07:28:44 -07:00
James Strong
e079486d4d
updates for fixing 1.3.1 release (#9023)
* updates for fixing 1.3.1 release

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update chart readmea

Signed-off-by: James Strong <strong.james.e@gmail.com>

* updating chart

Signed-off-by: James Strong <strong.james.e@gmail.com>

* supdate wording of legacy drop

* supgraded helm docs

* one more time

Signed-off-by: James Strong <strong.james.e@gmail.com>

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-09-05 19:10:56 -07:00
James Strong
db3cdc04e4
release 1.3.1 (#9014)
* release 1.3.1

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* fix readme

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Fix chart linter

* Fix helm docs

* Fix helm docs

* fix helm docs

* Add warning about lease change

* Disable PSP in v1.25

* rollback cluster in helmchart to psp tests

Signed-off-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2022-09-05 04:28:36 -07:00
Jintao Zhang
ffcf13c09b
revert changes to configmap resource permissions (#8959)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-08-23 00:29:24 -07:00
Anders Swanson
adeb84aa38
Metrics port name (Helm) (#8665) 2022-08-22 16:20:09 -07:00
omichels
cad575e923
securityContext in admission-webhook now configurable e.g. to set seccompProfiles (#8930)
* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

* Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>

Signed-off-by: Oliver Michels <oliver.michels@aldi-sued.com>
2022-08-22 16:12:09 -07:00
Mangirdas Judeikis
1791b62e45
Add NetworkPolicy support (#8928)
* Add NetworkPolicy support

* add doc for np
2022-08-22 16:08:09 -07:00
Jintao Zhang
730174f73d
feat: using LeaseLock for election (#8921)
We removed the use of configmap as an election lock, so we will use the
Lease API to complete the election.

Before this, we used `MultiLock` to facilitate smooth migration of
existing users of ingress-nginx from configmap to LeaseLock.

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-08-22 15:38:16 -07:00
Long Wu Yuan
0f61d9d0dc
updated to new images built today (#8896) 2022-08-08 11:40:19 -07:00
Ricardo Katz
e222b74b9e
Release v1.3.0 (#8811)
* Release v1.3.0

* Update charts/ingress-nginx/CHANGELOG.md

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

* Update charts/ingress-nginx/README.md

* Update Changelog.md

Co-authored-by: Jintao Zhang <tao12345666333@163.com>

Co-authored-by: James Strong <strong.james.e@gmail.com>
Co-authored-by: Jintao Zhang <tao12345666333@163.com>
2022-07-12 06:30:50 -07:00
Steven Bambling
9325819345
Add condition for monitoring.coreos.com/v1 API (#8770) 2022-07-10 14:05:47 -07:00
Jintao Zhang
cf4dca8e43
feat: migrate leaderelection lock to leases (#8733)
* feat: migrate leaderelection lock to leases

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* Update RBAC

Co-authored-by: Shafeeque E S <shafeeque.e.s@sap.com>
2022-07-09 05:37:46 -07:00
Eric84626
7806159b38
support extraEnvs for job resources in helm chart (#8545)
* support extraEnvs for job resources in helm chart

Signed-off-by: Li, Eric <Xiannan.li@fmr.com>

* Update helm doc

* Update helm doc

* Updated helm doc - add controller.admissionWebhooks.extraEnvs

* Added some test data for webhook controller.admissionWebhooks.extraEnvs

* added new line at the end of deployment-webhook-extraEnvs-values.yaml

* Fixed helm chart test issue
2022-06-21 07:16:26 -07:00
Long Wu Yuan
96b6228a6b
changed k8s.gcr.io to registry.k8s.io (#8667) 2022-06-10 04:01:52 -07:00
Jintao Zhang
c32f9a4327
chore: release v1.2.1 (#8646)
* chore: release v1.2.1

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* chore: generate static yaml

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-05-31 06:26:53 -07:00
Mac Chaffee
6ea466bd21
Bump chart version to 4.1.2 (#8607)
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-05-23 17:05:10 -07:00
Mac Chaffee
6c3a237d7d
Add CAP_SYS_CHROOT to DS/PSP when needed (#8587)
Signed-off-by: Mac Chaffee <me@macchaffee.com>
2022-05-16 06:30:18 -07:00
Pavel Selivanov
61fcca3a3a
Add portNamePreffix Helm chart parameter (#8458)
Allow user to set custom preffix for TCP and UDP ports
2022-05-10 09:13:43 -07:00
FrodeI
5d8b0bf428
Add documentation for controller.service.loadBalancerIP in Helm chart (#8522) 2022-05-01 13:41:15 -07:00
Long Wu Yuan
6d9a39eda7
changes for release v1.2.0 (#8491) 2022-04-21 19:36:13 -07:00
Ricardo Katz
ef0ec5f052
Release chart v1.2.0-beta.1 (#8484) 2022-04-17 13:20:41 -07:00
Jintao Zhang
e86e7eebf5
chore: v1.2.0-beta.0 release (#8465)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-04-13 20:04:47 -07:00
Ricardo Katz
3def835a6a
Jail/chroot nginx process inside controller container (#8337)
* Initial work on chrooting nginx process

* More improvements in chroot

* Fix charts and some file locations

* Fix symlink on non chrooted container

* fix psp test

* Add e2e tests to chroot image

* Fix logger

* Add internal logger in controller

* Fix overlay for chrooted tests

* Fix tests

* fix boilerplates

* Fix unittest to point to the right pid

* Fix PR review
2022-04-08 21:48:04 -07:00
Francisco Robles Martín
f5b212df30
replace deprecated topology key in example with current one (#8444)
Signed-off-by: Francisco Robles Martín <f.robles.martin@pm.me>
2022-04-08 01:36:42 -07:00
Josh Soref
c6a8ad9a65
Darwin arm64 (#8399)
* Use sed instead of gnu find flags

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Support building linux/amd64 on darin/arm64

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Upgrade awesome_bot to dkhamsing/awesome_bot:1.20.0

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Favor find -prune for vendor

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Skip golang modcache folder

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Favor find -prune for changelog

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Ignore Changelogs of any case

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Fix service-l7 link

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Fix route53-mapper link

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update rootfs contents description

The auxiliary scripts were removed after:
ab8349008a/rootfs/ingress-controller

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update paths for modsecurity

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update paths for modsecurity_snippet

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Update toc for 20190815-zone-aware-routing.md

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use Internet Archive for datapath.io blog entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use Internet Archive for cloudflare.com help center entry

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

* Use https for nginx.org

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
2022-04-06 13:46:26 -07:00
James Strong
ad47d49216
force helm release to artifact hub (#8417)
* force helm release to artifact hub

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update releaser version

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 17:14:13 -03:00
James Strong
ac3b86b2c3
release 1.1.3 details (#8411)
* release 1.1.3 details
fix the readme with right sha and version
remove helm label
fix issue 8329
fix the 1.20 service after the fix for ipv6
udpate readme and change for patches

* update helm doc

Signed-off-by: James Strong <strong.james.e@gmail.com>
2022-04-01 09:14:46 -07:00
LongWuYuan
b9f50e691d base img update for e2e-test-runner & opentelemetry 2022-04-01 17:07:08 +05:30
thomasbruggink
9180ef1ee4
Add the shareProcessNamespace as a configurable setting. (#8287) 2022-03-14 08:51:57 -07:00
Long Wu Yuan
fb72fcd817
release-v1.1.2-continued (#8294)
* v1.1.2 release

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* release-v1.1.2-continued

Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-03-04 11:48:52 -08:00
dylan-bitovi
4ecb3520c8
Add fsGroup value to admission-webhooks/job-patch charts (#8267)
* added fsGroup to admission createSecret and patchWebhook job

* added fsGroup to admission createSecret and patchWebhook job

* modified helm/README.md to add value for fsGroup

* fixed patch job values ordering

* remove manually edited README for replacement with helm-docs generated version

* re-adding charts/README.md generated by helm-docs
2022-02-28 07:10:57 -08:00
Romain Dauby
527361c8eb
Minor fix for missing pathType property (#8244) 2022-02-20 13:14:11 -08:00
Tomas Hulata
4b4895b53b
add ingress.class (#8136)
Signed-off-by: tombokombo <tombo@sysart.tech>
2022-02-06 12:18:51 -08:00
stoupance
0f464333a9
Remove Capabilities.APIVersions for Kustomize to parse file (#7829) 2022-02-01 09:34:10 -08:00
Jintao Zhang
40c69a1ef7
chore: add Artifact Hub lint (#8204)
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-28 06:16:31 -08:00
Billy Walker
0c2070ef4a
Adding annotations to the controller service account (#8173)
* fix: adding annotations to the controller service account

* fix: adding annotations to the controller service account
2022-01-26 19:12:50 -08:00
Arthur Woimbée
a665a409da
helm: ServiceMonitor: sane default namespaceSelector (#7998)
* helm: service-monitor: sane default namespaceSelector

* chart version bump (4.0.16)
2022-01-17 15:28:49 -08:00
Marc Portabella Clotet
4badf20173
#7271 feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1 (#8155)
* feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1

* fix: added-eol

* feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1

* fix: added-eol
2022-01-17 15:16:49 -08:00
Ricardo Katz
c667cf083b
Last attempt to fix helm docs (#8153) 2022-01-16 22:59:36 -03:00
Ricardo Katz
51fa86e690
Trigger new helmdoc generation 2022-01-16 22:52:10 -03:00