DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
6391 commits 4 branches 217 tags 166 MiB
Commit graph

6391 commits

This branch
This branch
All branches
Author SHA1 Message Date
Aditya Kamath
f1cb2b73ca
update nginx base image to new alpine 3.14.4 build - try 2 (#8409) 
* update nginx base image to new alpine 3.14.4 build

Signed-off-by: James Strong <strong.james.e@gmail.com>

* update test image

Signed-off-by: James Strong <strong.james.e@gmail.com>

* Update nginx base image

Signed-off-by: Aditya Kamath <theunrealgeek@gmail.com>

Co-authored-by: James Strong <strong.james.e@gmail.com>
 2022-03-31 13:43:04 -07:00
Long Wu Yuan
87979099fd
set execute bit on entrypoint.sh (#8404) 2022-03-31 04:25:00 -07:00
Aditya Kamath
5402d35663
Add execute permissions to nginx image entrypoint.sh (#8403) 2022-03-31 03:37:01 -07:00
Damien Mathieu
79aa43540c fix build and upgrade otel to latest version 2022-03-29 12:07:43 +02:00
Damien Mathieu
244d1dbcb0 ensure module directory exists before moving the library there 2022-03-29 10:28:48 +02:00
James Strong
9960efe1e9
remove (#8394) 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-28 07:49:23 -07:00
Tomoyuki KOYAMA
08fcd942c7
fix code highlight (#8392) 2022-03-28 02:29:23 -07:00
James Strong
5298448865
downgrade to 3.14.4 and fix tag (#8386) 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-25 10:21:58 -07:00
dependabot[bot]
b6c7061e07
Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#8360) 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.0...v1.7.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-03-23 12:45:20 -07:00
Tim Borkhodoev
f192ed0ed7
bump luarocks to 3.8.0 (#8379) 2022-03-22 18:53:58 -07:00
Nishant Jain
5c07c862e1
Removed s390x, linux/arm platform as docker build was crashing (#8121) 
Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
 2022-03-22 04:23:44 -07:00
Long Wu Yuan
d27d7c20b4
Updated semver in install docs URLs (#8368) 2022-03-21 15:46:47 -07:00
James Strong
e51c15160e
fix indent on env (#8352) 
* fix indent on env

* revert tag to      - TAG=$_GIT_TAG
 2022-03-18 10:04:41 -07:00
Ana Claudia Riekstin
3f19fd646f
bump Alpine image in Dockerfile (#8350) 2022-03-17 18:19:40 -07:00
James Strong
40bb6c3d2e
update cloud build (#8349) 2022-03-17 12:02:41 -07:00
James Strong
9602fc193d
Merge pull request #8346 from strongjz/update-builder 
update cloud build image
 2022-03-16 15:40:39 -04:00
James Strong
569b3c2a70
update cloud build image 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 15:32:45 -04:00
James Strong
a1853be930
Merge pull request #8344 from strongjz/tag-1.1.3 
update tag and force a new build
 2022-03-16 15:15:08 -04:00
James Strong
5c47803d0f
fix the cloud build 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 15:13:24 -04:00
James Strong
0e2447ed0e
add the date per request 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 15:07:38 -04:00
James Strong
952a6dc22c
control tag with short sha 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 14:52:06 -04:00
James Strong
2fefd714bd
update tag and force a new build 
Signed-off-by: James Strong <strong.james.e@gmail.com>
 2022-03-16 12:57:48 -04:00
James Strong
8c16e754b0
Merge pull request #8343 from strongjz/alpine-3.15 
Bump alpine base to 3.15
 2022-03-16 12:27:14 -04:00
James Strong
1953efa9d8
Bumping alpine base to 3.15 2022-03-16 11:52:38 -04:00
Ana Claudia Riekstin
ba7f295538
Fix 50% split between canary and mainline tests (#8315) 
* fix 50% canary test

* fix past tense

* after code review

* revert go.sum and go.mod

* run gofmt
 2022-03-16 06:25:49 -07:00
sskserk
01b92b8b3a
Nginx v1.19.10 (#8307) 2022-03-14 08:55:57 -07:00
thomasbruggink
9180ef1ee4
Add the shareProcessNamespace as a configurable setting. (#8287) 2022-03-14 08:51:57 -07:00
Rodrigo Riccitelli Vieira
1fb0aea2c5
Update monitoring.md (#8324) 
Added missing repo on "helm upgrade" command
 2022-03-14 08:47:58 -07:00
Naveen
974d038c2a
Pinned GitHub workflows by SHA (#8334) 
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for some of the actions. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

Dependabot can upgrade pinned version of actions.
 2022-03-14 08:29:58 -07:00
Daniel Lim
e1eff78160
Names cannot contain _ (underscore)! So I changed it to -. (#8300) 
* The name can't use _(underscore)! So fix it!

The name can't use _(underscore)! So fix it!

* Fix configMap name can't use _(underscore)

Fix configMap name can't use _(underscore)
 2022-03-09 06:56:13 -08:00
hongkunyoo
5a9fe30a5d
Missing annotations (#8288) 
Not quite sure but It seems that `nginx.ingress.kubernetes.io/canary-by-header` is missing.
 2022-03-09 06:54:13 -08:00
James Strong
a43346d975
leaving it the git tag (#8311) 
fixing the git tag for the image version, it is what it is .
 2022-03-07 09:38:53 -08:00
Niclas Mietz
3bd32316ba
docs: fix changelog formatting (#8302) 2022-03-07 08:32:55 -08:00
Long Wu Yuan
fb72fcd817
release-v1.1.2-continued (#8294) 
* v1.1.2 release

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>

* release-v1.1.2-continued

Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
 2022-03-04 11:48:52 -08:00
James Strong
73ff3e2128
Merge pull request #8291 from kubernetes/strongjz-patch-6 
remove git tag env from cloud build
 2022-03-02 15:03:04 -05:00
James Strong
c5c35881c0
remove git tag env from cloud build 
the latest git tag is from helm, so force the make file use of TAG ?=v$(shell date +%m%d%Y)-$(shell git rev-parse --short HEAD)
 2022-03-02 14:49:01 -05:00
James Strong
6064a1cd72
update tag for image (#8290) 2022-03-02 11:07:13 -08:00
Damien Mathieu
7b96999eb9
Fix OpenTelemetry sidecar image build (#8286) 
* fix wrong checksum for nginx image

* fix wrong platform. Arm64 has grpc, when arm doesn't
 2022-03-02 08:39:14 -08:00
James Strong
49761416e1
force prow job by changing something in images/ot dir (#8281) 
Images dir was merged in before the test-infra prow job, so the image was never built. 

https://github.com/kubernetes/ingress-nginx/pull/8013 Jan 16

https://github.com/kubernetes/test-infra/pull/25344/files Prow job 4 days ago.
 2022-03-01 09:35:55 -08:00
Maksim Nabokikh
1e2ce80846
fix: deny locations with invalid auth-url annotation (#8256) 
* fix: deny locations with invalid auth-url annotation

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>

* Delete duplicate test

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-03-01 02:13:51 -08:00
James Strong
f3698d0445
Add OpenSSF Best practices badge (#8277) 2022-02-28 20:27:47 -08:00
dylan-bitovi
4ecb3520c8
Add fsGroup value to admission-webhooks/job-patch charts (#8267) 
* added fsGroup to admission createSecret and patchWebhook job

* added fsGroup to admission createSecret and patchWebhook job

* modified helm/README.md to add value for fsGroup

* fixed patch job values ordering

* remove manually edited README for replacement with helm-docs generated version

* re-adding charts/README.md generated by helm-docs
 2022-02-28 07:10:57 -08:00
Jintao Zhang
bab0fbab0c
Start Release process for v1.1.2 (#8275) 
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
 2022-02-27 06:45:18 -08:00
Indhu Kumar
fd87363b5e
Issue#8241 (#8273) 
* replace daemon set for deployment manifest

* nit
 2022-02-26 14:53:17 -08:00
Thibault Jamet
1e66a54974
Add a certificate info metric (#8253) 
When the ingress controller loads certificates  (new ones or following a
secret update), it performs a series of check to ensure its validity.

In our systems, we detected a case where, when the secret object is
compromised, for example when the certificate does not match the secret
key, different pods of the ingress controller are serving a different
version of the certificate.

This behaviour is due to the cache mechanism of the ingress controller,
keeping the last known certificate in case of corruption. When this
happens, old ingress-controller pods will keep serving the old one,
while new pods, by failing to load the corrupted certificates, would
use the default certificate, causing invalid certificates for its
clients.

This generates a random error on the client side, depending on the
actual pod instance it reaches.

In order to allow detecting occurences of those situations, add a metric
to expose, for all ingress controlller pods, detailed informations of
the currently loaded certificate.

This will, for example, allow setting an alert when there is a
certificate discrepency across all ingress controller pods using a query
similar to `sum(nginx_ingress_controller_ssl_certificate_info{host="name.tld"})by(serial_number)`

This also allows to catch other exceptions loading certificates (failing
to load the certificate from the k8s API, ...

Co-authored-by: Daniel Ricart <danielricart@users.noreply.github.com>

Co-authored-by: Daniel Ricart <danielricart@users.noreply.github.com>
 2022-02-24 07:08:32 -08:00
Goran
f85dd79221
Updated confusing error (#8262) 2022-02-21 11:52:01 -08:00
Romain Dauby
527361c8eb
Minor fix for missing pathType property (#8244) 2022-02-20 13:14:11 -08:00
Noah Ispas
d5772069e8
remove 0.46.0 from supported versions table (#8258) 2022-02-19 15:12:12 -08:00
Alastair Firth
c9f61211d3
Versioned static manifests (#8162) 
* update deploy script to generate static manifests for all supported versions

* generate static manifests for all supported versions
 2022-02-13 10:47:47 -08:00
Aibek
5754eb60f4
Append elements on match, instead of removing for cors-annotations (#8185) 
* fixes https://github.com/kubernetes/ingress-nginx/issues/8168 by appending elements on match, instead of removing

* refactor the corsOriginRegex comparison, and initialize CorsAllowOrigin
 2022-02-13 10:39:47 -08:00