3bd32316ba
docs: fix changelog formatting ( #8302 )
2022-03-07 08:32:55 -08:00
fb72fcd817
release-v1.1.2-continued ( #8294 )
...
* v1.1.2 release
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* release-v1.1.2-continued
Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-03-04 11:48:52 -08:00
73ff3e2128
Merge pull request #8291 from kubernetes/strongjz-patch-6
...
remove git tag env from cloud build
2022-03-02 15:03:04 -05:00
c5c35881c0
remove git tag env from cloud build
...
the latest git tag is from helm, so force the make file use of TAG ?=v$(shell date +%m%d%Y)-$(shell git rev-parse --short HEAD)
2022-03-02 14:49:01 -05:00
6064a1cd72
update tag for image ( #8290 )
2022-03-02 11:07:13 -08:00
7b96999eb9
Fix OpenTelemetry sidecar image build ( #8286 )
...
* fix wrong checksum for nginx image
* fix wrong platform. Arm64 has grpc, when arm doesn't
2022-03-02 08:39:14 -08:00
49761416e1
force prow job by changing something in images/ot dir ( #8281 )
...
Images dir was merged in before the test-infra prow job, so the image was never built.
https://github.com/kubernetes/ingress-nginx/pull/8013 Jan 16
https://github.com/kubernetes/test-infra/pull/25344/files Prow job 4 days ago.
2022-03-01 09:35:55 -08:00
1e2ce80846
fix: deny locations with invalid auth-url annotation ( #8256 )
...
* fix: deny locations with invalid auth-url annotation
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
* Delete duplicate test
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2022-03-01 02:13:51 -08:00
f3698d0445
Add OpenSSF Best practices badge ( #8277 )
2022-02-28 20:27:47 -08:00
4ecb3520c8
Add fsGroup value to admission-webhooks/job-patch charts ( #8267 )
...
* added fsGroup to admission createSecret and patchWebhook job
* added fsGroup to admission createSecret and patchWebhook job
* modified helm/README.md to add value for fsGroup
* fixed patch job values ordering
* remove manually edited README for replacement with helm-docs generated version
* re-adding charts/README.md generated by helm-docs
2022-02-28 07:10:57 -08:00
bab0fbab0c
Start Release process for v1.1.2 ( #8275 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-02-27 06:45:18 -08:00
fd87363b5e
Issue#8241 ( #8273 )
...
* replace daemon set for deployment manifest
* nit
2022-02-26 14:53:17 -08:00
1e66a54974
Add a certificate info metric ( #8253 )
...
When the ingress controller loads certificates (new ones or following a
secret update), it performs a series of check to ensure its validity.
In our systems, we detected a case where, when the secret object is
compromised, for example when the certificate does not match the secret
key, different pods of the ingress controller are serving a different
version of the certificate.
This behaviour is due to the cache mechanism of the ingress controller,
keeping the last known certificate in case of corruption. When this
happens, old ingress-controller pods will keep serving the old one,
while new pods, by failing to load the corrupted certificates, would
use the default certificate, causing invalid certificates for its
clients.
This generates a random error on the client side, depending on the
actual pod instance it reaches.
In order to allow detecting occurences of those situations, add a metric
to expose, for all ingress controlller pods, detailed informations of
the currently loaded certificate.
This will, for example, allow setting an alert when there is a
certificate discrepency across all ingress controller pods using a query
similar to `sum(nginx_ingress_controller_ssl_certificate_info{host="name.tld"})by(serial_number)`
This also allows to catch other exceptions loading certificates (failing
to load the certificate from the k8s API, ...
Co-authored-by: Daniel Ricart <danielricart@users.noreply.github.com>
Co-authored-by: Daniel Ricart <danielricart@users.noreply.github.com>
2022-02-24 07:08:32 -08:00
f85dd79221
Updated confusing error ( #8262 )
2022-02-21 11:52:01 -08:00
527361c8eb
Minor fix for missing pathType property ( #8244 )
2022-02-20 13:14:11 -08:00
d5772069e8
remove 0.46.0 from supported versions table ( #8258 )
2022-02-19 15:12:12 -08:00
c9f61211d3
Versioned static manifests ( #8162 )
...
* update deploy script to generate static manifests for all supported versions
* generate static manifests for all supported versions
2022-02-13 10:47:47 -08:00
5754eb60f4
Append elements on match, instead of removing for cors-annotations ( #8185 )
...
* fixes https://github.com/kubernetes/ingress-nginx/issues/8168 by appending elements on match, instead of removing
* refactor the corsOriginRegex comparison, and initialize CorsAllowOrigin
2022-02-13 10:39:47 -08:00
86964b15a8
fix inconsistent-label-cardinality for prometheus metrics: nginx_ingress_controller_requests ( #8225 )
...
* fix inconsistent-label-cardinality
for prometheus metrics: nginx_ingress_controller_requests
* add host to collectorLabels only if metricsPerHost is true
2022-02-13 10:33:47 -08:00
53a232f829
webhook: remove useless code. ( #8236 )
...
* webhook: remove useless code
Signed-off-by: SpecialYang <940129520@qq.com>
* Remove duplicated codec
2022-02-13 10:25:47 -08:00
c1be3499eb
Adding some geoip variables and default values ( #8159 )
...
* adding geoIp variables that Shopify uses
* adding source remote_addr for geoip2-isp
2022-02-07 09:53:44 -08:00
be65620b31
prometheus+grafana using servicemonitor ( #8186 )
...
* prometheus+grafana using servicemonitor
* fix review comments
* markdown changes
* more formatting changes
* fix review comments
2022-02-07 01:47:45 -08:00
935ea3d830
Update libraries in webhook image ( #8227 )
2022-02-06 12:42:51 -08:00
04035cc1c2
Do not validate ingresses with unknown ingress class in admission webhook endpoint. ( #8221 )
2022-02-06 12:28:51 -08:00
d769ceaa5b
Bump google.golang.org/grpc from 1.43.0 to 1.44.0 ( #8209 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.43.0 to 1.44.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.43.0...v1.44.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-06 12:22:52 -08:00
4b4895b53b
add ingress.class ( #8136 )
...
Signed-off-by: tombokombo <tombo@sysart.tech>
2022-02-06 12:18:51 -08:00
6b6ebf0a7c
Update the $req_id placeholder description ( #8163 )
2022-02-06 12:14:53 -08:00
a46626b259
8217 fix removed extra v ( #8218 )
2022-02-06 12:10:52 -08:00
dcd552ceb5
use functional options to reduce number of methods creating an EchoDeployment ( #8199 )
2022-02-02 05:12:22 -08:00
0f464333a9
Remove Capabilities.APIVersions for Kustomize to parse file ( #7829 )
2022-02-01 09:34:10 -08:00
a2a0e67fee
Bump github.com/prometheus/client_golang from 1.11.0 to 1.12.1 ( #8210 )
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.11.0 to 1.12.1.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.11.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-31 03:22:24 -08:00
fbdfc6505b
feat(metrics): add path and method labels to requests counter ( #8201 )
2022-01-30 03:52:23 -08:00
40c69a1ef7
chore: add Artifact Hub lint ( #8204 )
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-28 06:16:31 -08:00
8cf73d9720
Fix Indentation of example and link to cert-manager tutorial ( #8203 )
2022-01-27 08:34:59 -08:00
32aa3404f7
Bump github.com/opencontainers/runc from 1.0.3 to 1.1.0 ( #8179 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.3 to 1.1.0.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/master/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.3...v1.1.0 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-26 19:36:52 -08:00
0c2070ef4a
Adding annotations to the controller service account ( #8173 )
...
* fix: adding annotations to the controller service account
* fix: adding annotations to the controller service account
2022-01-26 19:12:50 -08:00
6eecefd3da
docs: fix inconsistent controller annotation ( #8196 )
...
The annotation for the controller class was inconsistent in the example. From my best understanding, I have tried to fix the inconsistency.
Also, removed an incomplete sentence. And made one sentence more clear by breaking it up.
2022-01-26 19:06:50 -08:00
53ac0ddd42
Using Go install for misspell ( #8191 )
...
* chore: using go install misspell
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* chore: fix typo
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
2022-01-26 18:52:50 -08:00
922e27fea7
reintroduce helm-docs step in ci ( #8164 )
2022-01-20 15:32:30 -08:00
39e721de73
Docs: add documentation about default ingress helm value, corrections to only ingress section ( #7943 )
...
* add explanation about ingressClassResource.default for helm users
Also cleaned up the entire "I have only one instance of the
Ingress-NGINX controller in my cluster" section
* docs: default ingressclass only when running one controller
* fix link to what is the flag watch ingress
* clarify usage of default ingress class annotation
2022-01-20 01:17:52 -08:00
feba7e1ffc
docs: correct typo ( #8169 )
...
* change docker-destkop to docker-desktop
2022-01-19 18:31:51 -08:00
d16e0dec48
Static manifest generation uses kustomize instead of python ( #8099 )
...
* regenerate at 4.0.12
* bash for loop and static values files
* add .tool-versions
* fixup static manifests with kustomize instead of python
* remove spec.replicas where set
* generate manifests for all supported versions
* update docs
* remove all versions except default (1.20) for now
* update to 1.1.1/4.0.15
2022-01-17 15:28:56 -08:00
a665a409da
helm: ServiceMonitor: sane default namespaceSelector ( #7998 )
...
* helm: service-monitor: sane default namespaceSelector
* chart version bump (4.0.16)
2022-01-17 15:28:49 -08:00
2aa34202c1
Allow to configure delay before controller exits ( #8143 )
...
* Allow to configure delay before controller exits
Signed-off-by: Aditya Kamath <theunrealgeek@gmail.com>
* Address comments
Signed-off-by: Aditya Kamath <theunrealgeek@gmail.com>
2022-01-17 15:24:49 -08:00
4badf20173
#7271 feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1 ( #8155 )
...
* feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1
* fix: added-eol
* feat: avoid-pdb-creation-when-default-backend-disabled-and-replicas-gt-1
* fix: added-eol
2022-01-17 15:16:49 -08:00
cce04fca48
Rollback on helmdoc generation ( #8154 )
2022-01-17 05:09:30 -08:00
c667cf083b
Last attempt to fix helm docs ( #8153 )
2022-01-16 22:59:36 -03:00
51fa86e690
Trigger new helmdoc generation
2022-01-16 22:52:10 -03:00
2db580a513
fix helmdoc push shell script ( #8152 )
2022-01-16 22:49:11 -03:00
0e5d4ad425
Automatically generate helm docs ( #8151 )
2022-01-16 17:25:28 -08:00
Niclas Mietz
Long Wu Yuan
James Strong
Damien Mathieu
Maksim Nabokikh
dylan-bitovi
Jintao Zhang
Indhu Kumar
Thibault Jamet
Goran
Romain Dauby
Noah Ispas
Alastair Firth
Aibek
Endre Kovács
Yang
Ana Claudia Riekstin
Ricardo Katz
Elvin Efendi
dependabot[bot]
Tomas Hulata
Alexander Brand
Kundan Kumar
stoupance
naseemkullah
Tiago Ferreira
Billy Walker
Sandip Bhattacharya
Frederik-Baetens
Rafael Maciel
Arthur Woimbée
Aditya Kamath
Marc Portabella Clotet