Marco Ebert
f6595f554a
Chart: Use generic values for ConfigMap test. ( #11877 )
2024-08-26 22:30:48 +02:00
Marco Ebert
e9f6c8e8f2
Security: Follow-up on recent changes. ( #11874 )
2024-08-26 21:09:16 +01:00
Seonghyeon Cho
8b20427d02
Update maxmind post link about geolite2 license changes ( #11861 )
...
Signed-off-by: Seonghyeon Cho <seonghyeoncho96@gmail.com>
2024-08-25 21:12:02 +01:00
Ricardo Katz
21cd966d1c
Remove global-rate-limit feature ( #11851 )
2024-08-25 21:03:29 +01:00
Ricardo Katz
7b4e4e2fa1
Enable security features by default ( #11819 )
2024-08-23 04:45:51 +01:00
Marco Ebert
d70b849d25
Release controller v1.11.2/v1.10.4 & chart v4.11.2/v4.10.4. ( #11816 )
2024-08-16 09:25:07 +02:00
Marco Ebert
593f05ed57
Chart: Bump Kube Webhook CertGen & OpenTelemetry. ( #11809 )
2024-08-15 13:33:14 +02:00
Marco Ebert
e972a35e98
Chart: Remove isControllerTagValid. ( #11710 )
2024-08-01 00:28:12 -07:00
Gerald Pape
36df47fcc4
Chart: Explicitly set runAsGroup. ( #11679 )
...
* Chart: Explicitly set `runAsGroup`.
Set a default value for the runAsGroup in container securityContexts of
the controller and default backend.
Also set the runAsGroup for opentelemetry and webhook Job container
securityContexts.
Signed-off-by: Gerald Pape <gerald@giantswarm.io>
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
---------
Signed-off-by: Gerald Pape <gerald@giantswarm.io>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-07-29 06:27:15 -07:00
Marco Ebert
56dbba3288
Release controller v1.11.1/v1.10.3 & chart v4.11.1/v4.10.3. ( #11654 )
2024-07-18 23:31:10 +02:00
Marco Ebert
cb2cdde10e
Repository: Add changelogs from release-v1.10. ( #11587 )
2024-07-09 00:32:49 -07:00
James Strong
b6fa279c0c
Release Notes 1.11.0 and chart 4.11.0
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-07-08 14:28:53 -04:00
Marco Ebert
e084ad0a5e
Chores: Align security contacts & chart maintainers to actual owners. ( #11465 )
2024-06-17 05:25:38 -07:00
TheRealNoob
af9e5246ad
Chart: Make pod affinity templatable. ( #11453 )
...
* [helm] template pod affinity
* update README
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* revert Chart.yaml version bump
* add unittests
* add docs defaultBackend.affinity
* add README section to values
* fix README syntax
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/values.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* update formatting of unittests + add README examples
* fix affinity labels on default-backend
* Apply suggestions from code review
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* remove double quotes on string
---------
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-06-14 02:13:44 -07:00
Marco Ebert
90ef45852c
Chart: Fix IngressClass annotations. ( #11416 )
2024-06-03 03:12:58 -07:00
Reddysekhar Gaduputi
0c17748c44
Chart: Make admission webhook patch job RBAC configurable. ( #11376 )
...
* Add an option to skip rbac resources creation in helm chart for admission-webhooks (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Add an option to skip rbac resources creation in helm chart update README (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Add an option to skip serviceAccount resources creation in helm chart for admission-webhooks (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Add helm chart tests for admission-webhooks (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Chart make admission webhook patch job RBAC configurable (#11375 )
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/clusterrole_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/clusterrolebinding_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/role_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/rolebinding_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/admission-webhooks/job-patch/serviceaccount_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
---------
Signed-off-by: Reddysekhar Gaduputi <gsekhar73@gmail.com>
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-06-03 02:17:23 -07:00
k8s-infra-cherrypick-robot
82c4d78a2f
Merge pull request #11277 from strongjz/chart-1.10.1 ( #11415 )
...
release chart 4.10.1
Co-authored-by: James Strong <strong.james.e@gmail.com>
2024-06-03 00:34:38 -07:00
Marco Ebert
987039c014
Chart: Remove controller.enableWorkerSerialReloads. ( #11400 )
2024-06-03 00:32:19 -07:00
Carlos Parada
95efaf3e39
Accept user defined annotations in IngressClass ( #11362 )
2024-05-22 06:08:30 -07:00
Rafael da Fonseca
4e11074323
Allow configuring nginx worker reload behaviour, to prevent multiple concurrent worker reloads which can lead to high resource usage and OOMKill ( #10884 )
...
* feat: allow configuring nginx worker reload behaviour, to prevent multiple concurrent worker reloads
Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
* appease linter, remove unnecessary log line
Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
* Flip to using a positive behaviour flag instead of negative
Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
* Update helm-docs
Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
* Avoid calling GetBackendConfiguration() twice, use clearer name for helm chart option
Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
* Fix helm-docs ordering
Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
---------
Signed-off-by: Rafael da Fonseca <rafael.fonseca@wildlifestudios.com>
2024-05-14 14:45:25 -07:00
NierYYDS
95554dccd2
fix: update kube version requirement to 1.21 ( #11275 )
...
The controller depends on the v1 version of EndpointSlice, but the discovery.k8s.io/v1 API was first introduced in Kubernetes version 1.21.
2024-04-18 10:06:32 -07:00
Marco Ebert
531b007b60
Chart: Add unit tests for default backend & topology spread constraints. ( #11218 )
...
Also remove trailing whitespaces.
2024-04-05 14:19:58 -07:00
Jozef Halgas
158ba45b0b
sort default backend hpa metrics ( #11215 )
2024-04-05 12:10:36 -07:00
Long Wu Yuan
5e0792ecb5
updated certgen image shatag ( #11214 )
2024-04-05 08:16:55 -07:00
Matheus Fidelis
e9509e27aa
feature(default_backend): topologySpreadConstraints on default backend ( #11197 )
...
feature(default_backend): topologySpread support
feature(default_backend): topologySpread support
feature(default_backend): helm-docs
feature(default_backend): helm-docs
feature(default_backend): helm-docs
feature(default_backend): helm-docs
feature(default_backend): nit
feature(default_backend): nit
feature(default_backend): nit
2024-04-05 04:54:48 -07:00
TheRealNoob
ad274ab2c6
Chart: Make controller.config templatable. ( #11181 )
...
* [helm] pass controller.config through tpl
* add unittest
* update README.md
* Update charts/ingress-nginx/README.md
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/controller-configmap_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/values.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
---------
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-04-04 12:50:05 -07:00
Marco Ebert
bf3fa53167
Owners: Promote Gacko to ingress-nginx-maintainers & ingress-nginx-reviewers. ( #11165 )
...
* Owners: Sort `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.
* Owners: Update URL in aliases.
* Images: Remove owners as it's identical to global owners.
* Images: Remove global owners from `kube-webhook-certgen` owners.
* Owners: Remove members from aliases covered by other aliases.
ingress-nginx-helm-maintainers:
- cpanato: Covered by ingress-nginx-maintainers
- strongjz: Covered by ingress-nginx-maintainers
ingress-nginx-helm-reviewers:
- cpanato: Covered by ingress-nginx-reviewers
- strongjz: Covered by ingress-nginx-reviewers
ingress-nginx-docs-maintainers:
- tao12345666333: Covered by ingress-nginx-maintainers
* Owners: Promote myself to `ingress-nginx-maintainers` & `ingress-nginx-reviewers`.
2024-04-04 08:01:10 -07:00
Karol Kieglerski
b233a96faa
Fix-semver ( #11193 )
2024-04-04 06:08:00 -07:00
Carlos Tadeu Panato Junior
c0767ccc61
refactor helm ci tests part I ( #11178 )
...
* refactor helm ci tests part I
Signed-off-by: cpanato <ctadeu@gmail.com>
* update indentation
Signed-off-by: cpanato <ctadeu@gmail.com>
* fix path
Signed-off-by: cpanato <ctadeu@gmail.com>
* more updates
Signed-off-by: cpanato <ctadeu@gmail.com>
* add helm-lint job
Signed-off-by: cpanato <ctadeu@gmail.com>
---------
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-31 13:21:33 -07:00
Matheus Fidelis
7c8af4928b
Controller: Make Leader Election TTL configurable. ( #11142 )
...
* feature(leader_ttl): feature to customize ttl to leader be re-elected
* fix(review): docs
2024-03-28 06:36:23 -07:00
Marco Ebert
56a0968675
Chart: Add IngressClass aliases. ( #11109 )
2024-03-17 14:27:27 -07:00
Marco Ebert
112b9bb028
Chart: Render controller.ingressClassResource.parameters natively. ( #11108 )
2024-03-14 06:23:13 -07:00
Marco Ebert
9480cde724
Chart: Align HPA & KEDA conditions. ( #11110 )
2024-03-12 06:43:51 -07:00
Marco Ebert
aa5deedae3
Chart: Add Gacko to maintainers. Again. ( #11107 )
2024-03-12 06:41:27 -07:00
Marco Ebert
2894b8a060
Chart: Improve IngressClass documentation. ( #11104 )
2024-03-12 06:39:07 -07:00
Ramon Borges
b5c447612c
Chart: Deploy PodDisruptionBudget with KEDA. ( #11032 )
...
* feat: deploy PDB if Keda is enabled and the minimum amount of replicas is greater than 1
* feat: add the corresponding unit-test to check PDB deployment with Keda
* chore: rename the test of PDB to follow suggested pattern
* chore: update the test-case suite name to the new format
* Update charts/ingress-nginx/templates/controller-poddisruptionbudget.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
* Update charts/ingress-nginx/tests/controller-poddisruptionbudget_test.yaml
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
---------
Co-authored-by: Marco Ebert <marco_ebert@icloud.com>
2024-03-11 14:14:25 -07:00
Matheus Fidelis
9b63559cbb
feature(leader_election): flag to disable leader election feature on controller ( #11064 )
2024-03-06 05:59:22 -08:00
Bartosz Fenski
683105ebdc
quotes around numbers fort ports definitions ( #11052 )
2024-03-02 22:54:36 -08:00
Ricardo Katz
dc999d81da
Release version v1.10.0 ( #11039 )
2024-02-28 16:41:06 -08:00
Ricardo Katz
7a75538dea
Bump kubewebhook certgen ( #11034 )
...
Signed-off-by: Ricardo Katz <rikatz@users.noreply.github.com>
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2024-02-27 21:32:13 -08:00
Bazze
bb6d1b77be
Update controller-prometheusrules.yaml ( #8902 )
...
As fixed in pull request #7829 for the ServiceMonitor resource, this is also needed for the PrometheusRule. When
upgrading the ingress-nginx chart in our environment (via Pulumi) from a really old version to the latest (4.2.0) we
noticed it wanted to delete the PrometheusRule resource. This PR should fix that.
2024-02-27 09:27:48 -08:00
Marco Ebert
3e740fe8e7
Chart: Set --enable-metrics depending on controller.metrics.enabled. ( #10959 )
2024-02-01 22:55:15 -08:00
Marco Ebert
48b9831122
Chart: Remove useless default from _params.tpl. ( #10957 )
2024-02-01 15:03:48 -08:00
James Strong
4e97379b4e
Release controller 1.9.6 and helm 4.9.1 ( #10919 )
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2024-01-26 23:45:19 -08:00
Marco Ebert
9de651aa7d
Chart: Add Gacko to maintainers. ( #10796 )
2023-12-21 14:42:18 +01:00
James Strong
0e47bfbfec
release 1.9.5 docs
...
Signed-off-by: James Strong <strong.james.e@gmail.com>
2023-12-21 10:42:28 +01:00
Mathieu Parent
9db2eb965e
Add controller.metrics.serviceMonitor.annotations in Helm chart ( #9677 )
...
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
2023-12-20 23:08:50 +01:00
Joshua Sleeper
707a5a0bea
fix(labels): use complete labels variable on default-backend deployment ( #10317 )
2023-12-20 21:50:46 +01:00
Marco Ebert
0e12525bdd
Chart: Revert verion 4.8.4.
2023-12-20 19:30:43 +01:00
Marco Ebert
2f7f4d70eb
Chart: Improve #10673 .
2023-12-19 10:01:41 +01:00
