feat(helm): update chart ingress-nginx to 4.8.1

[renovate]

This PR contains the following updates:

Package	Update	Change
ingress-nginx	minor	4.7.1 -> 4.8.1

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

kubernetes/ingress-nginx (ingress-nginx)

v4.8.1

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

v4.8.0

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

v4.7.2

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- kubernetes/apps/networking/nginx/external Kustomization: flux-system/cluster-apps-nginx-external HelmRelease: networking/nginx-external

+++ kubernetes/apps/networking/nginx/external Kustomization: flux-system/cluster-apps-nginx-external HelmRelease: networking/nginx-external

@@ -9,13 +9,13 @@

     spec:
       chart: ingress-nginx
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
         namespace: flux-system
-      version: 4.7.1
+      version: 4.8.1
   dependsOn:
   - name: cloudflared
     namespace: networking
   install:
     remediation:
       retries: 3
--- kubernetes/apps/networking/nginx/internal Kustomization: flux-system/cluster-apps-nginx-internal HelmRelease: networking/nginx-internal

+++ kubernetes/apps/networking/nginx/internal Kustomization: flux-system/cluster-apps-nginx-internal HelmRelease: networking/nginx-internal

@@ -9,13 +9,13 @@

     spec:
       chart: ingress-nginx
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
         namespace: flux-system
-      version: 4.7.1
+      version: 4.8.1
   install:
     remediation:
       retries: 3
   interval: 30m
   maxHistory: 2
   uninstall:

[github-actions]

--- kubernetes HelmRelease: networking/nginx-internal NetworkPolicy: networking/nginx-internal-admission

+++ kubernetes HelmRelease: networking/nginx-internal NetworkPolicy: networking/nginx-internal-admission

@@ -0,0 +1,27 @@

+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: nginx-internal-admission
+  namespace: networking
+  annotations:
+    helm.sh/hook: pre-install,pre-upgrade,post-install,post-upgrade
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
+  labels:
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/instance: nginx-internal
+    app.kubernetes.io/part-of: ingress-nginx
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: admission-webhook
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: ingress-nginx
+      app.kubernetes.io/instance: nginx-internal
+      app.kubernetes.io/component: admission-webhook
+  policyTypes:
+  - Ingress
+  - Egress
+  egress:
+  - {}
+
--- kubernetes HelmRelease: networking/nginx-internal Deployment: networking/nginx-internal-controller

+++ kubernetes HelmRelease: networking/nginx-internal Deployment: networking/nginx-internal-controller

@@ -28,13 +28,13 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: controller
     spec:
       dnsPolicy: ClusterFirst
       containers:
       - name: controller
-        image: registry.k8s.io/ingress-nginx/controller:v1.8.1@sha256:e5c4824e7375fcf2a393e1c03c293b69759af37a9ca6abdb91b13d78a93da8bd
+        image: registry.k8s.io/ingress-nginx/controller:v1.9.1@sha256:605a737877de78969493a4b1213b21de4ee425d2926906857b98050f57a95b25
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
               command:
               - /wait-shutdown
--- kubernetes HelmRelease: networking/nginx-internal ConfigMap: networking/nginx-internal-controller

+++ kubernetes HelmRelease: networking/nginx-internal ConfigMap: networking/nginx-internal-controller

@@ -8,13 +8,13 @@

     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
   name: nginx-internal-controller
   namespace: networking
 data:
-  allow-snippet-annotations: 'true'
+  allow-snippet-annotations: 'false'
   client-body-buffer-size: 100M
   client-body-timeout: '120'
   client-header-timeout: '120'
   enable-brotli: 'true'
   enable-real-ip: 'true'
   hsts-max-age: '3.14496e+07'
--- kubernetes HelmRelease: networking/nginx-external NetworkPolicy: networking/nginx-external-admission

+++ kubernetes HelmRelease: networking/nginx-external NetworkPolicy: networking/nginx-external-admission

@@ -0,0 +1,27 @@

+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: nginx-external-admission
+  namespace: networking
+  annotations:
+    helm.sh/hook: pre-install,pre-upgrade,post-install,post-upgrade
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
+  labels:
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/instance: nginx-external
+    app.kubernetes.io/part-of: ingress-nginx
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: admission-webhook
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: ingress-nginx
+      app.kubernetes.io/instance: nginx-external
+      app.kubernetes.io/component: admission-webhook
+  policyTypes:
+  - Ingress
+  - Egress
+  egress:
+  - {}
+
--- kubernetes HelmRelease: networking/nginx-external Deployment: networking/nginx-external-controller

+++ kubernetes HelmRelease: networking/nginx-external Deployment: networking/nginx-external-controller

@@ -28,13 +28,13 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: controller
     spec:
       dnsPolicy: ClusterFirst
       containers:
       - name: controller
-        image: registry.k8s.io/ingress-nginx/controller:v1.8.1@sha256:e5c4824e7375fcf2a393e1c03c293b69759af37a9ca6abdb91b13d78a93da8bd
+        image: registry.k8s.io/ingress-nginx/controller:v1.9.1@sha256:605a737877de78969493a4b1213b21de4ee425d2926906857b98050f57a95b25
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
               command:
               - /wait-shutdown
--- kubernetes HelmRelease: networking/nginx-external ConfigMap: networking/nginx-external-controller

+++ kubernetes HelmRelease: networking/nginx-external ConfigMap: networking/nginx-external-controller

@@ -8,13 +8,13 @@

     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
   name: nginx-external-controller
   namespace: networking
 data:
-  allow-snippet-annotations: 'true'
+  allow-snippet-annotations: 'false'
   client-body-buffer-size: 100M
   client-body-timeout: '120'
   client-header-timeout: '120'
   enable-brotli: 'true'
   enable-real-ip: 'true'
   hsts-max-age: '3.14496e+07'