GitHub Workflows security hardening #9001

sashashura · 2022-08-31T09:07:04Z

This PR adds explicit permissions section to workflows. This is a security best practice because by default workflows run with extended set of permissions (except from on: pull_request from external forks). By specifying any permission explicitly all others are set to none. By using the principle of least privilege the damage a compromised workflow can do (because of an injection or compromised third party tool or action) is restricted.
It is recommended to have most strict permissions on the top level and grant write permissions on job level case by case.

Signed-off-by: sashashura <[email protected]>

k8s-ci-robot · 2022-08-31T09:07:11Z

@sashashura: This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

k8s-ci-robot · 2022-08-31T09:07:12Z

Welcome @sashashura!

It looks like this is your first PR to kubernetes/ingress-nginx 🎉. Please refer to our pull request process documentation to help your PR have a smooth ride to approval.

You will be prompted by a bot to use commands during the review process. Do not be afraid to follow the prompts! It is okay to experiment. Here is the bot commands documentation.

You can also check if kubernetes/ingress-nginx has its own contribution guidelines.

You may want to refer to our testing guide if you run into trouble with your tests not passing.

If you are having difficulty getting your pull request seen, please follow the recommended escalation practices. Also, for tips and tricks in the contribution process you may want to read the Kubernetes contributor cheat sheet. We want to make sure your contribution gets all the attention it needs!

Thank you, and welcome to Kubernetes. 😃

k8s-ci-robot · 2022-08-31T09:07:13Z

Hi @sashashura. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

k8s-triage-robot · 2022-08-31T11:14:51Z

Unknown CLA label state. Rechecking for CLA labels.

Send feedback to sig-contributor-experience at kubernetes/community.

/check-cla
/easycla

strongjz · 2022-08-31T13:12:10Z

/ok-to-test

strongjz · 2022-09-01T13:32:01Z

/lgtm

k8s-ci-robot · 2022-09-01T13:32:23Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: sashashura, strongjz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~OWNERS~~ [strongjz]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Wulf · 2022-09-01T15:18:39Z

@sashashura @strongjz

The pull request number... it's over 9000!!!

* change sha e2etestrunner and echoserver (#8740) * Bump github.com/stretchr/testify from 1.7.2 to 1.7.5 (#8751) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.2 to 1.7.5. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.2...v1.7.5) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * updated URLs (#8767) * Fix typos and add links to developer guide (#8769) * Bump github/codeql-action from 1.0.26 to 2.1.14 (#8765) Signed-off-by: Jintao Zhang <[email protected]> * Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#8752) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.4.0 to 1.5.0. - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](https://github.com/spf13/cobra/compare/v1.4.0...v1.5.0) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.14 to 2.1.15 (#8773) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.14 to 2.1.15. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/41a4ada31ba866a7f1196b9602703a89edd69e22...3f62b754e23e0dd60f91b744033e1dc1654c0ec6) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump ossf/scorecard-action from 1.1.1 to 1.1.2 (#8772) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.1 to 1.1.2. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/3e15ea8318eee9b333819ec77a36aca8d39df13e...ce330fde6b1a5c9c75b417e7efc510b822a35564) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix bullet md format (#8771) * Update deploy.yaml (#8365) * Update deploy.yaml Removed the *service.beta.kubernetes.io/exoscale-loadbalancer-name* annotation so it uses service UID by default. It thus removes the current limitation that prevent the installation of several ingress nginx controllers on different clusters belonging to the same organization. * Removing default loadbalancer name * Update docs to make it easier for noobs to follow step by step (#8738) * Change helm release name in docs Following step by step instructions in readme I ran into error: Error: release: not found And realized the commandline was differnent from description. Let change description to match commandline? * Fix verb tense in docs * Remove stable (#8775) * update stable.txt * remove stable.txt since kind doesnt need it * chore: remove stable.txt from release process (#8778) Signed-off-by: Jintao Zhang <[email protected]> * Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#8781) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.5 to 1.8.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.5...v1.8.0) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * added announcement (#8750) * changed to alpine-v3.16 (#8793) * Update nginx base image in one place (#8400) * update files to use one base image file Signed-off-by: James Strong <[email protected]> * add chart test as well Signed-off-by: James Strong <[email protected]> * update e2e-test image building Signed-off-by: James Strong <[email protected]> * update e2e base image arg Signed-off-by: James Strong <[email protected]> * add current e2e so test run Signed-off-by: James Strong <[email protected]> * working on fixing build * getting dev-env and make release to work * test * i think buildx is working on mac * updates * why docker for mac and linux cli differ * fix target arch * fix target arch * fix loag issue * fix issue * update the chroot docker file * fix docker base build * mac is the issue * env not getting to the e2e deployment.go file * fix pull issue * fix pull issue * move test scripts into test folder * clean up ci * updates for PR * remove unnesscary var * feat: migrate leaderelection lock to leases (#8733) * feat: migrate leaderelection lock to leases Signed-off-by: Jintao Zhang <[email protected]> * Update RBAC Co-authored-by: Shafeeque E S <[email protected]> * fix: add MAC_OS variable for static-check (#8796) * Add condition for monitoring.coreos.com/v1 API (#8770) * Add v1.24.0 to test matrix (#8798) * Fix example Helm chart values to enable custom http errors (#8558) * bumped to alpine3.16 (#8803) * chore: start v1.3.0 release process (#8802) Signed-off-by: Jintao Zhang <[email protected]> * revert arch var name (#8808) * Bump k8s.io/klog/v2 from 2.60.1 to 2.70.1 (#8805) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.60.1 to 2.70.1. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.60.1...v2.70.1) --- updated-dependencies: - dependency-name: k8s.io/klog/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Prepare for v1.3.0 (#8810) * Release v1.3.0 (#8811) * Release v1.3.0 * Update charts/ingress-nginx/CHANGELOG.md Co-authored-by: Jintao Zhang <[email protected]> * Update charts/ingress-nginx/README.md * Update Changelog.md Co-authored-by: Jintao Zhang <[email protected]> Co-authored-by: James Strong <[email protected]> Co-authored-by: Jintao Zhang <[email protected]> * Fixed typo (#8817) * fix(docs): describe MetalLB configuration via CRDs rather than configMap (#8821) Signed-off-by: Philipp Born <[email protected]> * feat: update mimalloc to 1.7.6 (#8827) Signed-off-by: Guilhem Lettron <[email protected]> * Migrate ginkgo to v2 in e2e-test-runner (#8830) * Bump actions/setup-go from 3.2.0 to 3.2.1 (#8835) Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.2.0 to 3.2.1. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/b22fbbc2921299758641fab08929b4ac52b32923...84cbf8094393cdc5fe1fe1671ff2647332956b1a) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/dependency-review-action from 2.0.2 to 2.0.4 (#8836) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.0.2 to 2.0.4. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/1c59cdf2a9c7f29c90e8da32237eb04b81bad9f0...94145f3150bfabdc97540cbd5f7e926306ea7744) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/prometheus/common from 0.35.0 to 0.37.0 (#8832) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.35.0 to 0.37.0. - [Release notes](https://github.com/prometheus/common/releases) - [Commits](https://github.com/prometheus/common/compare/v0.35.0...v0.37.0) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.15 to 2.1.16 (#8837) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.15 to 2.1.16. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/3f62b754e23e0dd60f91b744033e1dc1654c0ec6...3e7e3b32d0fb8283594bb0a76cc60a00918b0969) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump google.golang.org/grpc from 1.47.0 to 1.48.0 (#8833) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.47.0 to 1.48.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.47.0...v1.48.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: test-runner Makefile (#8840) Signed-off-by: Jintao Zhang <[email protected]> * FIx typo x_forwarded_for (#8838) * bumped kubectl to v1.24.0 (#8807) * Decouple shared functions between controllers (#8829) * Decouple shared functions between controllers * Apply suggestions from code review Co-authored-by: Jintao Zhang <[email protected]> * Fix package names and fmt Co-authored-by: Jintao Zhang <[email protected]> * added fixes for make dev-env (#8804) * Move util to specific package location * Move TCPProxy to pkg * Move APIs to be used by both controller and configurer (#8854) * Add docs on Election ID to Multiple Ingress Controller guide (#8855) * bump to alpine-3.16.1 (#8858) * update dd-opentracing-cpp version in nginx build script (#8848) * update dd-opentracing-cpp version in nginx build script * idiomatic placement of "v" prefix in Datadog plugin version tag * changed baseimage sha & bumped ginkgo to 2.1.4 in test (#8860) * update baseimage after bump of opentracing-cpp (#8861) * fix: test-runner prow build Signed-off-by: Jintao Zhang <[email protected]> * fix: make use of sed portable for BSD and GNU (#8859) Signed-off-by: Ismayil Mirzali <[email protected]> * fix: test-runner prow build (#8864) Signed-off-by: Jintao Zhang <[email protected]> * Revert "fix: test-runner prow build" (#8865) This reverts commit 423008b75282616413b743321d60d3a9557a570e. * version (commit sha) bump for dependency github.com/moul/pb due to dependency licence (#8841) * fix: change cloudbuild configuration (#8869) Signed-off-by: Jintao Zhang <[email protected]> * Update gce docs (#8866) * update GCE doc with proxy protocol and some fixes Signed-off-by: James Strong <[email protected]> * update gke docs Signed-off-by: James Strong <[email protected]> * fix: change all cloudbuild jobs configuration (#8870) Signed-off-by: Jintao Zhang <[email protected]> * add X-Forwarded-For in custom error template (#7892) * migrate ginkgo to v2 (#8826) * Migrate ginkgo to v2 * Update test/e2e/annotations/ipwhitelist.go Co-authored-by: Jintao Zhang <[email protected]> * Update test/e2e/annotations/modsecurity/modsecurity.go Co-authored-by: Jintao Zhang <[email protected]> * Update test/e2e/settings/access_log.go Co-authored-by: Jintao Zhang <[email protected]> * remove unnecessary blank line * re-order packages * less change Co-authored-by: Jintao Zhang <[email protected]> * update to baseiamge built after CI changes (#8892) * Bump github/codeql-action from 2.1.16 to 2.1.17 (#8894) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.16 to 2.1.17. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/3e7e3b32d0fb8283594bb0a76cc60a00918b0969...0c670bbf0414f39666df6ce8e718ec5662c21e03) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.17 to 2.1.18 (#8914) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.17 to 2.1.18. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/0c670bbf0414f39666df6ce8e718ec5662c21e03...2ca79b6fa8d3ec278944088b4aa5f46912db5d63) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#8913) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.2 to 1.13.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.12.2...v1.13.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * updated to new images built today (#8896) * add scanning to CI Signed-off-by: James Strong <[email protected]> * remove var Signed-off-by: James Strong <[email protected]> * need short tags Signed-off-by: James Strong <[email protected]> * it seems sarif upload needs git information Signed-off-by: James Strong <[email protected]> * fix permissions Signed-off-by: James Strong <[email protected]> * testing output of sarif file Signed-off-by: James Strong <[email protected]> * sarif upload issues Signed-off-by: James Strong <[email protected]> * stesting pathing * remove on pushes Signed-off-by: James Strong <[email protected]> * Improve `hack/generate-deploy-scripts.sh` to no longer generate versioned manifests (#8877) * feat: no longer generate versioned manifests Updates the script to no longer generate multiple versioned deploy manifests. The script will only generate the manifests for one given version of Kubernetes. See: https://github.com/kubernetes/ingress-nginx/issues/8824 Signed-off-by: Ismayil Mirzali <[email protected]> * fix: delete unnecessary versioned deploy manifests See: https://github.com/kubernetes/ingress-nginx/issues/8824 Signed-off-by: Ismayil Mirzali <[email protected]> * Reimplement kubectl plugin release workflow (#8812) * Feat: reimplement kubectl plugin release system This commit does the following changes: - Add GitHub Actions pipeline for releasing the plugin - Removes the build/build-plugin.sh and replaces this with GoReleaser - Adds the use of krew-release-bot for automatically updating the krew release - Removes the make target for build/build-plugin.sh Signed-off-by: Ismayil Mirzali <[email protected]> * Fix: pin github actions stages with commit sha Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * bump alpine to v3.16.2 (#8934) * bump baseimage alpine to v3.16.2 for zlib CVE fix (#8939) * Clean old code and move helper functions (#8946) * updated testrunner and testecho images (#8948) * Bump github/codeql-action from 2.1.18 to 2.1.19 (#8950) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.18 to 2.1.19. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2.1.18...f5d217be74900c6ac8fbbe53f3c10376ba4e64da) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump geekyeggo/delete-artifact (#8951) Bumps [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact) from a6ab43859c960a8b74cbc6291f362c7fb51829ba to 1. This release includes the previously tagged commit. - [Release notes](https://github.com/geekyeggo/delete-artifact/releases) - [Commits](https://github.com/geekyeggo/delete-artifact/compare/a6ab43859c960a8b74cbc6291f362c7fb51829ba...b73cb986740e466292a536d0e32e2666c56fdeb3) --- updated-dependencies: - dependency-name: geekyeggo/delete-artifact dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump securego/gosec (#8952) Bumps [securego/gosec](https://github.com/securego/gosec) from b99b5f7838e43a4104354ad92a6a1774302ee1f9 to 2.13.1. This release includes the previously tagged commit. - [Release notes](https://github.com/securego/gosec/releases) - [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml) - [Commits](https://github.com/securego/gosec/compare/b99b5f7838e43a4104354ad92a6a1774302ee1f9...19fa856badad483cae700ee1213dd7f1a933d6d3) --- updated-dependencies: - dependency-name: securego/gosec dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump aquasecurity/trivy-action from 0.5.1 to 0.7.1 (#8953) Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.5.1 to 0.7.1. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0105373003c89c494a3f436bd5efc57f3ac1ca20...d63413b0a4a4482237085319f7f4a1ce99a8f2ac) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/dependency-review-action from 2.0.4 to 2.1.0 (#8954) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.0.4 to 2.1.0. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/94145f3150bfabdc97540cbd5f7e926306ea7744...23d1ffffb6fa5401173051ec21eba8c35242733f) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump azure/setup-helm from 2.1 to 3.3 (#8956) Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 2.1 to 3.3. - [Release notes](https://github.com/azure/setup-helm/releases) - [Commits](https://github.com/azure/setup-helm/compare/217bf70cbd2e930ba2e81ba7e1de2f7faecc42ba...b5b231a831f96336bbfeccc1329990f0005c5bb1) --- updated-dependencies: - dependency-name: azure/setup-helm dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.19 to 2.1.20 (#8957) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.19 to 2.1.20. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f5d217be74900c6ac8fbbe53f3c10376ba4e64da...7fee4ca032ac341c12486c4c06822c5221c76533) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Don't error log when no OCSP responder URL exists (#8881) * feat: using LeaseLock for election (#8921) We removed the use of configmap as an election lock, so we will use the Lease API to complete the election. Before this, we used `MultiLock` to facilitate smooth migration of existing users of ingress-nginx from configmap to LeaseLock. Signed-off-by: Jintao Zhang <[email protected]> Signed-off-by: Jintao Zhang <[email protected]> * Add NetworkPolicy support (#8928) * Add NetworkPolicy support * add doc for np * securityContext in admission-webhook now configurable e.g. to set seccompProfiles (#8930) * Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles Signed-off-by: Oliver Michels <[email protected]> * Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles Signed-off-by: Oliver Michels <[email protected]> * Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles Signed-off-by: Oliver Michels <[email protected]> * Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles Signed-off-by: Oliver Michels <[email protected]> Signed-off-by: Oliver Michels <[email protected]> * Document internal-logger-address cli arg (#8873) Signed-off-by: Edvin Norling <[email protected]> Signed-off-by: Edvin Norling <[email protected]> * Metrics port name (Helm) (#8665) * fix(controller): typo in catch-all CheckIngress error message (#8905) * Fix defaultServer backend update for Ingress with defaultBackend. (#8825) * make keep-alive docs more explicit #8927 (#8944) Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * revert changes to configmap resource permissions (#8959) Signed-off-by: Jintao Zhang <[email protected]> Signed-off-by: Jintao Zhang <[email protected]> * upgrade yamale and yamllint version (#8960) Signed-off-by: Jintao Zhang <[email protected]> Signed-off-by: Jintao Zhang <[email protected]> * updated to testrunnerimage with updated yamle yamllint (#8967) * fix: bump k8s dependencies to fix go-restful CVE (#8969) [1] https://nvd.nist.gov/vuln/detail/CVE-2022-1996 [2] https://github.com/kubernetes/ingress-nginx/issues/8745 Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * added note on digitalocean annotations (#8966) * adding cve finding and adding release-notes to PR template (#8916) * adding cve finding and adding release-notes to PR template Signed-off-by: James Strong <[email protected]> * update cve report with verbiage around open CVEs and not disclosures Signed-off-by: James Strong <[email protected]> * fix then assignees Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * Update apiserver to 0.25 to remove v2 go-restful (#8976) Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * bump Golang to 1.19 #8932 (#8970) * fix: convert to LF line endings Signed-off-by: Ismayil Mirzali <[email protected]> * Pin exact Go bugfix versions for CI jobs Signed-off-by: Ismayil Mirzali <[email protected]> * Bump go.mod and Dockerfiles to Go 1.19.0 Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * fixed deprecated ginkgo flags (#8984) * Bump actions/setup-go from 3.2.1 to 3.3.0 (#8981) Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.2.1 to 3.3.0. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v3.2.1...268d8c0ca0432bb2cf416faae41297df9d262d7f) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 (#8992) Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.3 to 1.1.4. - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.1.4/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.1.3...v1.1.4) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump goreleaser/goreleaser-action from 3.0.0 to 3.1.0 (#8986) Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3.0.0 to 3.1.0. - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](https://github.com/goreleaser/goreleaser-action/compare/68acf3b1adf004ac9c2f0a4259e85c5f66e99bef...ff11ca24a9b39f2d36796d1fbd7a4e39c182630a) --- updated-dependencies: - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.20 to 2.1.21 (#8982) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.20 to 2.1.21. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7fee4ca032ac341c12486c4c06822c5221c76533...c7f292ea4f542c473194b33813ccd4c207a6c725) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update plugin.yaml (#9001) Signed-off-by: sashashura <[email protected]> Signed-off-by: sashashura <[email protected]> * Bump github/codeql-action from 2.1.21 to 2.1.22 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.21 to 2.1.22. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/c7f292ea4f542c473194b33813ccd4c207a6c725...b398f525a5587552e573b247ac661067fafa920b) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> * Bump google.golang.org/grpc from 1.48.0 to 1.49.0 (#8991) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.48.0 to 1.49.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.48.0...v1.49.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * start 1.3.1 release Signed-off-by: James Strong <[email protected]> * issue:8739 fix doc issue (#9006) Signed-off-by: sreelakshminarayananm <[email protected]> Signed-off-by: sreelakshminarayananm <[email protected]> * Fix cloud build git error (#9012) * testing the fix Signed-off-by: James Strong <[email protected]> * revert 1.3.1 while we fix the build Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * 1.3.1 for real (#9013) Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * Add v1.25 test and reduce amount of e2e tests (#9018) * Bump chart testing from 3.0.0 to 3.7.0 (#9000) * Adding a simpler interface for the HTTP request library. (#8862) * release 1.3.1 (#9014) * release 1.3.1 Signed-off-by: James Strong <[email protected]> * fix readme Signed-off-by: James Strong <[email protected]> * fix readme Signed-off-by: James Strong <[email protected]> * fix readme Signed-off-by: James Strong <[email protected]> * Fix chart linter * Fix helm docs * Fix helm docs * fix helm docs * Add warning about lease change * Disable PSP in v1.25 * rollback cluster in helmchart to psp tests Signed-off-by: James Strong <[email protected]> Co-authored-by: Ricardo Pchevuzinske Katz <[email protected]> * fix LD_LIBRARY_PATH (#9017) * updates for fixing 1.3.1 release (#9023) * updates for fixing 1.3.1 release Signed-off-by: James Strong <[email protected]> * update chart readmea Signed-off-by: James Strong <[email protected]> * updating chart Signed-off-by: James Strong <[email protected]> * supdate wording of legacy drop * supgraded helm docs * one more time Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * Bump k8s.io/klog/v2 from 2.70.1 to 2.80.0 (#9021) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.70.1 to 2.80.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.70.1...v2.80.0) --- updated-dependencies: - dependency-name: k8s.io/klog/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.1.6 (#9022) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.1.4 to 2.1.6. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.1.4...v2.1.6) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix otel init_module (#9028) * Added instructions for Rancher Desktop (#9035) Signed-off-by: Gunasekhar Matamalam <[email protected]> Signed-off-by: Gunasekhar Matamalam <[email protected]> * Revert "Metrics port name (Helm) (#8665)" This reverts commit adeb84aa38cbccb8dde471ab222b799b7cc439d3. * parameterize port name * Document new values key * Fix for Docs check * Bump ossf/scorecard-action from 1.1.2 to 2.0.2 (#9044) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.2 to 2.0.2. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/ce330fde6b1a5c9c75b417e7efc510b822a35564...68bf5b3327e4fd443d2add8ab122280547b4a16d) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/upload-artifact from 3.0.0 to 3.1.0 (#9045) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.0.0 to 3.1.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v3...3cea5372237819ed00197afe530f5a7ea3e805c8) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump k8s.io/klog/v2 from 2.80.0 to 2.80.1 (#9043) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.80.0 to 2.80.1. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.80.0...v2.80.1) --- updated-dependencies: - dependency-name: k8s.io/klog/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * update OpenTelemetry image (#9036) * update OpenTelemetry image * use promoted image * Bump github/codeql-action from 2.1.22 to 2.1.23 (#9052) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.22 to 2.1.23. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b398f525a5587552e573b247ac661067fafa920b...6a38b7d4a1af70deb1b561eb77db2b5e5a6a1e69) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump ossf/scorecard-action from 2.0.2 to 2.0.3 (#9053) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.2 to 2.0.3. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/68bf5b3327e4fd443d2add8ab122280547b4a16d...865b4092859256271290c77adbd10a43f4779972) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * bump go to v1.19.1 (#9057) * updated testrunner image sha after bump to go1191 (#9058) * Bump github/codeql-action from 2.1.23 to 2.1.24 (#9066) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.23 to 2.1.24. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/6a38b7d4a1af70deb1b561eb77db2b5e5a6a1e69...904260d7d935dff982205cbdb42025ce30b7a34f) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.2.0 (#9064) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.1.6 to 2.2.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.1.6...v2.2.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Tips for new contributors (#8924) This commit adds tips for new contributors along with references and examples Signed-off-by: afro-coder <[email protected]> Co-authored-by: Tanisha Banik <[email protected]> Signed-off-by: afro-coder <[email protected]> Co-authored-by: Tanisha Banik <[email protected]> * Bump k8s.io/component-base from 0.25.0 to 0.25.1 (#9065) Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.25.0 to 0.25.1. - [Release notes](https://github.com/kubernetes/component-base/releases) - [Commits](https://github.com/kubernetes/component-base/compare/v0.25.0...v0.25.1) --- updated-dependencies: - dependency-name: k8s.io/component-base dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Add missing space to error message (#9069) * feat: switch from endpoints to endpointslices (#8890) * endpointslices Signed-off-by: tombokombo <[email protected]> * cleanup Signed-off-by: tombokombo <[email protected]> * fix rbac Signed-off-by: tombokombo <[email protected]> * fix comments Signed-off-by: tombokombo <[email protected]> * cleanup store, add store tests Signed-off-by: tombokombo <[email protected]> * fix copyright date Signed-off-by: tombokombo <[email protected]> Signed-off-by: tombokombo <[email protected]> * fix: do not apply job-patch psp on Kubernetes 1.25 and newer (#9074) * fix: do not apply job-patch psp on Kubernetes 1.25 and newer Signed-off-by: wilmarguida <[email protected]> * fix: bump kubernetes version for helm chart CI to 1.25.0 Signed-off-by: wilmarguida <[email protected]> Signed-off-by: wilmarguida <[email protected]> * Bump github/codeql-action from 2.1.24 to 2.1.25 (#9083) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.24 to 2.1.25. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/904260d7d935dff982205cbdb42025ce30b7a34f...86f3159a697a097a813ad9bfa0002412d97690a4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/dependency-review-action from 2.1.0 to 2.4.0 (#9085) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.1.0 to 2.4.0. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/23d1ffffb6fa5401173051ec21eba8c35242733f...375c5370086bfff256c37f8beec0f437e2e72ae1) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/checkout from 1 to 3 (#9084) Bumps [actions/checkout](https://github.com/actions/checkout) from 1 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v1...2541b1294d2704b0964813337f33b291d3f8596b) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update Version ModSecurity and Coreruleset (#9086) This is related to some new bugs that found in LiveHackingEvent 1337up0522. The latest coreruleset need *ModSecurity version 2.9.6 or 3.0.8* - https://terjanq.medium.com/waf-bypasses-via-0days-d4ef1f212ec - https://coreruleset.org/20220920/crs-version-3-3-4-and-3-2-3/ - https://coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves/ - https://github.com/coreruleset/coreruleset/releases/tag/v3.3.4 * Added a Link to the New Contributors Tips (#9072) This adds a link to the new contributor tips in the developer guide present on the docs page Signed-off-by: afro-coder <[email protected]> Signed-off-by: afro-coder <[email protected]> * Bump k8s.io/component-base from 0.25.1 to 0.25.2 (#9089) Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.25.1 to 0.25.2. - [Release notes](https://github.com/kubernetes/component-base/releases) - [Commits](https://github.com/kubernetes/component-base/compare/v0.25.1...v0.25.2) --- updated-dependencies: - dependency-name: k8s.io/component-base dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Add annotation for setting sticky cookie domain (#9088) This adds the new annotation `nginx.ingress.kubernetes.io/session-cookie-domain` for setting the cookie `Domain` attribute of the sticky cookie. Signed-off-by: Matthias Neugebauer <[email protected]> Signed-off-by: Matthias Neugebauer <[email protected]> * plugin - endpoints to slices (#9081) Signed-off-by: tombokombo <[email protected]> Signed-off-by: tombokombo <[email protected]> * fix chroot module mount path (#9090) * kubewebhookcertgen sha change after go1191 (#9059) * expand CI testing for all stable versions of Kubernetes (#9078) * ci: setup version matrix for the helm chart e2e Signed-off-by: wilmarguida <[email protected]> * ci: sync all k8s version on CI steps Signed-off-by: wilmarguida <[email protected]> * ci: bump all k8s version to latest stable Signed-off-by: wilmarguida <[email protected]> Signed-off-by: wilmarguida <[email protected]> * Support none keyword in log-format escape (#8692) * Support none keyword in log-format escape ## What this PR does / why we need it: ingress-nginx does not support disabling escaping of special characters in the nginx log. This PR exposes the setting to support that functionality. ## Types of changes - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Breaking change (fix or feature that would cause existing functionality to change) - [ ] Documentation only ## Which issue/s this PR fixes  ## How Has This Been Tested? Followed the [getting-started](https://github.com/kubernetes/ingress-nginx/blob/96b6228a6b65a85e421b8a348a149e99181664d1/docs/developer-guide/getting-started.md) guide. Used ppa:longsleep/golang-backports on WSL Ubuntu to establish a golang-1.18 environment with latest docker and recommended kind. Built the dev-env successfully; had issues with make test, but they are entirely unrelated to anything I touched. Ultimate test was ``` FOCUS=log-format make kind-e2e-test ... Ginkgo ran 1 suite in 6m29.7437865s Test Suite Passed ``` ## Checklist:   - [x] My change requires a change to the documentation. - [x] I have updated the documentation accordingly. - [x] I've read the [CONTRIBUTION](https://github.com/kubernetes/ingress-nginx/blob/main/CONTRIBUTING.md) guide - [x] I have added tests to cover my changes. - [x] All new and existing tests passed. I did not update docs/e2e-tests.md. * gofmt -s ./internal/ingress/controller/config/config.go * Consistent prometheus metric names and documentation (#8728) * clean prometheus metrics - add new histogram metrics with consistent names - deprecate summary metrics with inconsistent names * update prometheus metrics tests * remove ingress_upstream_header_seconds metric It hasn't been released so it is safe. Use header_duration_seconds metric. * add documentation on prometheus metrics * Fix yaml formatting error with multiple annotations (#9104) When using multiple values for the `serviceAccount.annotations` values, the first line ends up indented 2 further than the following lines, resulting in a invalid yaml * tag 1.4.0 to start release Signed-off-by: James Strong <[email protected]> * remove vcs build and resolve git issues Signed-off-by: James Strong <[email protected]> * update tag to start build Signed-off-by: James Strong <[email protected]> * fixed broken helm version comparision (#9113) * update for 1.4.0 release Signed-off-by: James Strong <[email protected]> * Fixed to supported versions (#9117) * Updated incorrect version number in the Installation Guide (#9120) Fixes the incorrect version v.1.4.0 to v1.4.0 Signed-off-by: afro-coder <[email protected]> Signed-off-by: afro-coder <[email protected]> * Updated the Developer guide with New Contributor information (#9114) Added more clarity to the docs with regards to the getting-started page for developers. Signed-off-by: afro-coder <[email protected]> Signed-off-by: afro-coder <[email protected]> * Remove deprecated net dependency (#9110) * Fixed docs helm-docs version (#9121) * update x/net to remove vul CVE-2022-27664 (#9109) Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * fix wrong tag * Rename controller-wehbooks-networkpolicy.yaml -> controller-webhooks-networkpolicy.yaml. (#9123) * Bump helm/chart-releaser-action from 1.4.0 to 1.4.1 (#9136) Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/helm/chart-releaser-action/releases) - [Commits](https://github.com/helm/chart-releaser-action/compare/v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: helm/chart-releaser-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.25 to 2.1.27 (#9137) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.25 to 2.1.27. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/86f3159a697a097a813ad9bfa0002412d97690a4...807578363a7869ca324a79039e6db9c843e0e100) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump ossf/scorecard-action from 2.0.3 to 2.0.4 (#9138) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.3 to 2.0.4. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/865b4092859256271290c77adbd10a43f4779972...e363bfca00e752f91de7b7d2a77340e2e523cb18) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump google.golang.org/grpc from 1.49.0 to 1.50.0 (#9134) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.49.0 to 1.50.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.49.0...v1.50.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/checkout from 3.0.2 to 3.1.0 (#9135) Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.1.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/2541b1294d2704b0964813337f33b291d3f8596b...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * upgrade to golang 1.19.2 (#9124) * upgrade to golang 1.19.2 Signed-off-by: James Strong <[email protected]> * update e2e testing to 1.25 kind Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * fix e2e resource leak when ginkgo exit before clear resource (#9103) * fix: handle 401 and 403 by external auth (#9131) * Move bowei to emeritus owner (#9150) * fix ports (#9149) * #7652 - Updated Helm chart to use the fullname for the electionID if not specified. (#9133) * Automatically generate electionID from the fullname or use the set value. * Updated the chart readme to include the new empty default. * Rebuilt the Helm readme with helm-docs. * Documentation added for implemented redirection in the proxy to ensure image pulling (#9098) * Documentation added for redirection in the proxy to ensure image pulling * Update troubleshooting.md * Update troubleshooting.md * Update troubleshooting.md * updating runner with golang 1.19.2 (#9158) Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * feat: add ovhcloud (#9171) * GitHub Templates: Remove trailing whitespaces. (#9172) * Update CHANGELOG.md (#9147) * add troubleshooting for port listen issues (#9185) * Bump docker/setup-buildx-action from 2.0.0 to 2.1.0 (#9180) Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.0.0 to 2.1.0. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/dc7b9719a96d48369863986a06765841d7ea23f6...95cb08cb2672c73d4ffd2f422e6d11953d2a9c70) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump dorny/paths-filter from 2.10.2 to 2.11.1 (#9183) Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 2.10.2 to 2.11.1. - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](https://github.com/dorny/paths-filter/compare/b2feaf19c27470162a626bd6fa8438ae5b263721...4512585405083f25c027a35db413c2b3b9006d50) --- updated-dependencies: - dependency-name: dorny/paths-filter dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * start 1.4.1 release Signed-off-by: James Strong <[email protected]> * Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#9173) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.5.0 to 1.6.0. - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](https://github.com/spf13/cobra/compare/v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump google.golang.org/grpc from 1.50.0 to 1.50.1 (#9174) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.50.0 to 1.50.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.50.0...v1.50.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump k8s.io/component-base from 0.25.2 to 0.25.3 (#9175) Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.25.2 to 0.25.3. - [Release notes](https://github.com/kubernetes/component-base/releases) - [Commits](https://github.com/kubernetes/component-base/compare/v0.25.2...v0.25.3) --- updated-dependencies: - dependency-name: k8s.io/component-base dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 (#9176) Bumps [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) from 1.5.4 to 1.6.0. - [Release notes](https://github.com/fsnotify/fsnotify/releases) - [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md) - [Commits](https://github.com/fsnotify/fsnotify/compare/v1.5.4...v1.6.0) --- updated-dependencies: - dependency-name: github.com/fsnotify/fsnotify dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/onsi/ginkgo/v2 from 2.2.0 to 2.3.1 (#9177) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.2.0 to 2.3.1. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.2.0...v2.3.1) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump geekyeggo/delete-artifact from 1.0.0 to 2.0.0 (#9178) Bumps [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact) from 1.0.0 to 2.0.0. - [Release notes](https://github.com/geekyeggo/delete-artifact/releases) - [Commits](https://github.com/geekyeggo/delete-artifact/compare/b73cb986740e466292a536d0e32e2666c56fdeb3...54ab544f12cdb7b71613a16a2b5a37a9ade990af) --- updated-dependencies: - dependency-name: geekyeggo/delete-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/dependency-review-action from 2.4.0 to 2.5.0 (#9179) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/375c5370086bfff256c37f8beec0f437e2e72ae1...fd675ced9c17f1393071e1a2e685ab527e585a0c) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump docker/setup-qemu-action from 2.0.0 to 2.1.0 (#9181) Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2.0.0 to 2.1.0. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/8b122486cedac8393e77aa9734c3528886e4a1a8...e81a89b1732b9c48d79cd809d8d81d79c4647a18) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump securego/gosec from 2.13.1 to 2.14.0 (#9182) Bumps [securego/gosec](https://github.com/securego/gosec) from 2.13.1 to 2.14.0. - [Release notes](https://github.com/securego/gosec/releases) - [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml) - [Commits](https://github.com/securego/gosec/compare/19fa856badad483cae700ee1213dd7f1a933d6d3...1af1d5bb49259b62e45c505db397dd2ada5d74f8) --- updated-dependencies: - dependency-name: securego/gosec dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Implement parseFloat for annotations (#9195) * Bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.4.0 (#9201) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.3.1...v2.4.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-…

…ernetes#14) * change sha e2etestrunner and echoserver (#8740) * Bump github.com/stretchr/testify from 1.7.2 to 1.7.5 (#8751) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.2 to 1.7.5. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.2...v1.7.5) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * updated URLs (#8767) * Fix typos and add links to developer guide (#8769) * Bump github/codeql-action from 1.0.26 to 2.1.14 (#8765) Signed-off-by: Jintao Zhang <[email protected]> * Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#8752) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.4.0 to 1.5.0. - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](https://github.com/spf13/cobra/compare/v1.4.0...v1.5.0) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.14 to 2.1.15 (#8773) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.14 to 2.1.15. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/41a4ada31ba866a7f1196b9602703a89edd69e22...3f62b754e23e0dd60f91b744033e1dc1654c0ec6) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump ossf/scorecard-action from 1.1.1 to 1.1.2 (#8772) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.1 to 1.1.2. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/3e15ea8318eee9b333819ec77a36aca8d39df13e...ce330fde6b1a5c9c75b417e7efc510b822a35564) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix bullet md format (#8771) * Update deploy.yaml (#8365) * Update deploy.yaml Removed the *service.beta.kubernetes.io/exoscale-loadbalancer-name* annotation so it uses service UID by default. It thus removes the current limitation that prevent the installation of several ingress nginx controllers on different clusters belonging to the same organization. * Removing default loadbalancer name * Update docs to make it easier for noobs to follow step by step (#8738) * Change helm release name in docs Following step by step instructions in readme I ran into error: Error: release: not found And realized the commandline was differnent from description. Let change description to match commandline? * Fix verb tense in docs * Remove stable (#8775) * update stable.txt * remove stable.txt since kind doesnt need it * chore: remove stable.txt from release process (#8778) Signed-off-by: Jintao Zhang <[email protected]> * Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#8781) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.5 to 1.8.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.5...v1.8.0) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * added announcement (#8750) * changed to alpine-v3.16 (#8793) * Update nginx base image in one place (#8400) * update files to use one base image file Signed-off-by: James Strong <[email protected]> * add chart test as well Signed-off-by: James Strong <[email protected]> * update e2e-test image building Signed-off-by: James Strong <[email protected]> * update e2e base image arg Signed-off-by: James Strong <[email protected]> * add current e2e so test run Signed-off-by: James Strong <[email protected]> * working on fixing build * getting dev-env and make release to work * test * i think buildx is working on mac * updates * why docker for mac and linux cli differ * fix target arch * fix target arch * fix loag issue * fix issue * update the chroot docker file * fix docker base build * mac is the issue * env not getting to the e2e deployment.go file * fix pull issue * fix pull issue * move test scripts into test folder * clean up ci * updates for PR * remove unnesscary var * feat: migrate leaderelection lock to leases (#8733) * feat: migrate leaderelection lock to leases Signed-off-by: Jintao Zhang <[email protected]> * Update RBAC Co-authored-by: Shafeeque E S <[email protected]> * fix: add MAC_OS variable for static-check (#8796) * Add condition for monitoring.coreos.com/v1 API (#8770) * Add v1.24.0 to test matrix (#8798) * Fix example Helm chart values to enable custom http errors (#8558) * bumped to alpine3.16 (#8803) * chore: start v1.3.0 release process (#8802) Signed-off-by: Jintao Zhang <[email protected]> * revert arch var name (#8808) * Bump k8s.io/klog/v2 from 2.60.1 to 2.70.1 (#8805) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.60.1 to 2.70.1. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.60.1...v2.70.1) --- updated-dependencies: - dependency-name: k8s.io/klog/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Prepare for v1.3.0 (#8810) * Release v1.3.0 (#8811) * Release v1.3.0 * Update charts/ingress-nginx/CHANGELOG.md Co-authored-by: Jintao Zhang <[email protected]> * Update charts/ingress-nginx/README.md * Update Changelog.md Co-authored-by: Jintao Zhang <[email protected]> Co-authored-by: James Strong <[email protected]> Co-authored-by: Jintao Zhang <[email protected]> * Fixed typo (#8817) * fix(docs): describe MetalLB configuration via CRDs rather than configMap (#8821) Signed-off-by: Philipp Born <[email protected]> * feat: update mimalloc to 1.7.6 (#8827) Signed-off-by: Guilhem Lettron <[email protected]> * Migrate ginkgo to v2 in e2e-test-runner (#8830) * Bump actions/setup-go from 3.2.0 to 3.2.1 (#8835) Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.2.0 to 3.2.1. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/b22fbbc2921299758641fab08929b4ac52b32923...84cbf8094393cdc5fe1fe1671ff2647332956b1a) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/dependency-review-action from 2.0.2 to 2.0.4 (#8836) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.0.2 to 2.0.4. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/1c59cdf2a9c7f29c90e8da32237eb04b81bad9f0...94145f3150bfabdc97540cbd5f7e926306ea7744) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/prometheus/common from 0.35.0 to 0.37.0 (#8832) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.35.0 to 0.37.0. - [Release notes](https://github.com/prometheus/common/releases) - [Commits](https://github.com/prometheus/common/compare/v0.35.0...v0.37.0) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.15 to 2.1.16 (#8837) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.15 to 2.1.16. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/3f62b754e23e0dd60f91b744033e1dc1654c0ec6...3e7e3b32d0fb8283594bb0a76cc60a00918b0969) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump google.golang.org/grpc from 1.47.0 to 1.48.0 (#8833) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.47.0 to 1.48.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.47.0...v1.48.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: test-runner Makefile (#8840) Signed-off-by: Jintao Zhang <[email protected]> * FIx typo x_forwarded_for (#8838) * bumped kubectl to v1.24.0 (#8807) * Decouple shared functions between controllers (#8829) * Decouple shared functions between controllers * Apply suggestions from code review Co-authored-by: Jintao Zhang <[email protected]> * Fix package names and fmt Co-authored-by: Jintao Zhang <[email protected]> * added fixes for make dev-env (#8804) * Move util to specific package location * Move TCPProxy to pkg * Move APIs to be used by both controller and configurer (#8854) * Add docs on Election ID to Multiple Ingress Controller guide (#8855) * bump to alpine-3.16.1 (#8858) * update dd-opentracing-cpp version in nginx build script (#8848) * update dd-opentracing-cpp version in nginx build script * idiomatic placement of "v" prefix in Datadog plugin version tag * changed baseimage sha & bumped ginkgo to 2.1.4 in test (#8860) * update baseimage after bump of opentracing-cpp (#8861) * fix: test-runner prow build Signed-off-by: Jintao Zhang <[email protected]> * fix: make use of sed portable for BSD and GNU (#8859) Signed-off-by: Ismayil Mirzali <[email protected]> * fix: test-runner prow build (#8864) Signed-off-by: Jintao Zhang <[email protected]> * Revert "fix: test-runner prow build" (#8865) This reverts commit 423008b75282616413b743321d60d3a9557a570e. * version (commit sha) bump for dependency github.com/moul/pb due to dependency licence (#8841) * fix: change cloudbuild configuration (#8869) Signed-off-by: Jintao Zhang <[email protected]> * Update gce docs (#8866) * update GCE doc with proxy protocol and some fixes Signed-off-by: James Strong <[email protected]> * update gke docs Signed-off-by: James Strong <[email protected]> * fix: change all cloudbuild jobs configuration (#8870) Signed-off-by: Jintao Zhang <[email protected]> * add X-Forwarded-For in custom error template (#7892) * migrate ginkgo to v2 (#8826) * Migrate ginkgo to v2 * Update test/e2e/annotations/ipwhitelist.go Co-authored-by: Jintao Zhang <[email protected]> * Update test/e2e/annotations/modsecurity/modsecurity.go Co-authored-by: Jintao Zhang <[email protected]> * Update test/e2e/settings/access_log.go Co-authored-by: Jintao Zhang <[email protected]> * remove unnecessary blank line * re-order packages * less change Co-authored-by: Jintao Zhang <[email protected]> * update to baseiamge built after CI changes (#8892) * Bump github/codeql-action from 2.1.16 to 2.1.17 (#8894) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.16 to 2.1.17. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/3e7e3b32d0fb8283594bb0a76cc60a00918b0969...0c670bbf0414f39666df6ce8e718ec5662c21e03) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.17 to 2.1.18 (#8914) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.17 to 2.1.18. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/0c670bbf0414f39666df6ce8e718ec5662c21e03...2ca79b6fa8d3ec278944088b4aa5f46912db5d63) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#8913) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.2 to 1.13.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.12.2...v1.13.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * updated to new images built today (#8896) * add scanning to CI Signed-off-by: James Strong <[email protected]> * remove var Signed-off-by: James Strong <[email protected]> * need short tags Signed-off-by: James Strong <[email protected]> * it seems sarif upload needs git information Signed-off-by: James Strong <[email protected]> * fix permissions Signed-off-by: James Strong <[email protected]> * testing output of sarif file Signed-off-by: James Strong <[email protected]> * sarif upload issues Signed-off-by: James Strong <[email protected]> * stesting pathing * remove on pushes Signed-off-by: James Strong <[email protected]> * Improve `hack/generate-deploy-scripts.sh` to no longer generate versioned manifests (#8877) * feat: no longer generate versioned manifests Updates the script to no longer generate multiple versioned deploy manifests. The script will only generate the manifests for one given version of Kubernetes. See: https://github.com/kubernetes/ingress-nginx/issues/8824 Signed-off-by: Ismayil Mirzali <[email protected]> * fix: delete unnecessary versioned deploy manifests See: https://github.com/kubernetes/ingress-nginx/issues/8824 Signed-off-by: Ismayil Mirzali <[email protected]> * Reimplement kubectl plugin release workflow (#8812) * Feat: reimplement kubectl plugin release system This commit does the following changes: - Add GitHub Actions pipeline for releasing the plugin - Removes the build/build-plugin.sh and replaces this with GoReleaser - Adds the use of krew-release-bot for automatically updating the krew release - Removes the make target for build/build-plugin.sh Signed-off-by: Ismayil Mirzali <[email protected]> * Fix: pin github actions stages with commit sha Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * bump alpine to v3.16.2 (#8934) * bump baseimage alpine to v3.16.2 for zlib CVE fix (#8939) * Clean old code and move helper functions (#8946) * updated testrunner and testecho images (#8948) * Bump github/codeql-action from 2.1.18 to 2.1.19 (#8950) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.18 to 2.1.19. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2.1.18...f5d217be74900c6ac8fbbe53f3c10376ba4e64da) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump geekyeggo/delete-artifact (#8951) Bumps [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact) from a6ab43859c960a8b74cbc6291f362c7fb51829ba to 1. This release includes the previously tagged commit. - [Release notes](https://github.com/geekyeggo/delete-artifact/releases) - [Commits](https://github.com/geekyeggo/delete-artifact/compare/a6ab43859c960a8b74cbc6291f362c7fb51829ba...b73cb986740e466292a536d0e32e2666c56fdeb3) --- updated-dependencies: - dependency-name: geekyeggo/delete-artifact dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump securego/gosec (#8952) Bumps [securego/gosec](https://github.com/securego/gosec) from b99b5f7838e43a4104354ad92a6a1774302ee1f9 to 2.13.1. This release includes the previously tagged commit. - [Release notes](https://github.com/securego/gosec/releases) - [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml) - [Commits](https://github.com/securego/gosec/compare/b99b5f7838e43a4104354ad92a6a1774302ee1f9...19fa856badad483cae700ee1213dd7f1a933d6d3) --- updated-dependencies: - dependency-name: securego/gosec dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump aquasecurity/trivy-action from 0.5.1 to 0.7.1 (#8953) Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.5.1 to 0.7.1. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0105373003c89c494a3f436bd5efc57f3ac1ca20...d63413b0a4a4482237085319f7f4a1ce99a8f2ac) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/dependency-review-action from 2.0.4 to 2.1.0 (#8954) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.0.4 to 2.1.0. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/94145f3150bfabdc97540cbd5f7e926306ea7744...23d1ffffb6fa5401173051ec21eba8c35242733f) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump azure/setup-helm from 2.1 to 3.3 (#8956) Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 2.1 to 3.3. - [Release notes](https://github.com/azure/setup-helm/releases) - [Commits](https://github.com/azure/setup-helm/compare/217bf70cbd2e930ba2e81ba7e1de2f7faecc42ba...b5b231a831f96336bbfeccc1329990f0005c5bb1) --- updated-dependencies: - dependency-name: azure/setup-helm dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.19 to 2.1.20 (#8957) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.19 to 2.1.20. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f5d217be74900c6ac8fbbe53f3c10376ba4e64da...7fee4ca032ac341c12486c4c06822c5221c76533) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Don't error log when no OCSP responder URL exists (#8881) * feat: using LeaseLock for election (#8921) We removed the use of configmap as an election lock, so we will use the Lease API to complete the election. Before this, we used `MultiLock` to facilitate smooth migration of existing users of ingress-nginx from configmap to LeaseLock. Signed-off-by: Jintao Zhang <[email protected]> Signed-off-by: Jintao Zhang <[email protected]> * Add NetworkPolicy support (#8928) * Add NetworkPolicy support * add doc for np * securityContext in admission-webhook now configurable e.g. to set seccompProfiles (#8930) * Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles Signed-off-by: Oliver Michels <[email protected]> * Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles Signed-off-by: Oliver Michels <[email protected]> * Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles Signed-off-by: Oliver Michels <[email protected]> * Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles Signed-off-by: Oliver Michels <[email protected]> Signed-off-by: Oliver Michels <[email protected]> * Document internal-logger-address cli arg (#8873) Signed-off-by: Edvin Norling <[email protected]> Signed-off-by: Edvin Norling <[email protected]> * Metrics port name (Helm) (#8665) * fix(controller): typo in catch-all CheckIngress error message (#8905) * Fix defaultServer backend update for Ingress with defaultBackend. (#8825) * make keep-alive docs more explicit #8927 (#8944) Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * revert changes to configmap resource permissions (#8959) Signed-off-by: Jintao Zhang <[email protected]> Signed-off-by: Jintao Zhang <[email protected]> * upgrade yamale and yamllint version (#8960) Signed-off-by: Jintao Zhang <[email protected]> Signed-off-by: Jintao Zhang <[email protected]> * updated to testrunnerimage with updated yamle yamllint (#8967) * fix: bump k8s dependencies to fix go-restful CVE (#8969) [1] https://nvd.nist.gov/vuln/detail/CVE-2022-1996 [2] https://github.com/kubernetes/ingress-nginx/issues/8745 Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * added note on digitalocean annotations (#8966) * adding cve finding and adding release-notes to PR template (#8916) * adding cve finding and adding release-notes to PR template Signed-off-by: James Strong <[email protected]> * update cve report with verbiage around open CVEs and not disclosures Signed-off-by: James Strong <[email protected]> * fix then assignees Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * Update apiserver to 0.25 to remove v2 go-restful (#8976) Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * bump Golang to 1.19 #8932 (#8970) * fix: convert to LF line endings Signed-off-by: Ismayil Mirzali <[email protected]> * Pin exact Go bugfix versions for CI jobs Signed-off-by: Ismayil Mirzali <[email protected]> * Bump go.mod and Dockerfiles to Go 1.19.0 Signed-off-by: Ismayil Mirzali <[email protected]> Signed-off-by: Ismayil Mirzali <[email protected]> * fixed deprecated ginkgo flags (#8984) * Bump actions/setup-go from 3.2.1 to 3.3.0 (#8981) Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.2.1 to 3.3.0. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v3.2.1...268d8c0ca0432bb2cf416faae41297df9d262d7f) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 (#8992) Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.3 to 1.1.4. - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.1.4/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.1.3...v1.1.4) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump goreleaser/goreleaser-action from 3.0.0 to 3.1.0 (#8986) Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3.0.0 to 3.1.0. - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](https://github.com/goreleaser/goreleaser-action/compare/68acf3b1adf004ac9c2f0a4259e85c5f66e99bef...ff11ca24a9b39f2d36796d1fbd7a4e39c182630a) --- updated-dependencies: - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.20 to 2.1.21 (#8982) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.20 to 2.1.21. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7fee4ca032ac341c12486c4c06822c5221c76533...c7f292ea4f542c473194b33813ccd4c207a6c725) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update plugin.yaml (#9001) Signed-off-by: sashashura <[email protected]> Signed-off-by: sashashura <[email protected]> * Bump github/codeql-action from 2.1.21 to 2.1.22 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.21 to 2.1.22. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/c7f292ea4f542c473194b33813ccd4c207a6c725...b398f525a5587552e573b247ac661067fafa920b) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> * Bump google.golang.org/grpc from 1.48.0 to 1.49.0 (#8991) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.48.0 to 1.49.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.48.0...v1.49.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * start 1.3.1 release Signed-off-by: James Strong <[email protected]> * issue:8739 fix doc issue (#9006) Signed-off-by: sreelakshminarayananm <[email protected]> Signed-off-by: sreelakshminarayananm <[email protected]> * Fix cloud build git error (#9012) * testing the fix Signed-off-by: James Strong <[email protected]> * revert 1.3.1 while we fix the build Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * 1.3.1 for real (#9013) Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * Add v1.25 test and reduce amount of e2e tests (#9018) * Bump chart testing from 3.0.0 to 3.7.0 (#9000) * Adding a simpler interface for the HTTP request library. (#8862) * release 1.3.1 (#9014) * release 1.3.1 Signed-off-by: James Strong <[email protected]> * fix readme Signed-off-by: James Strong <[email protected]> * fix readme Signed-off-by: James Strong <[email protected]> * fix readme Signed-off-by: James Strong <[email protected]> * Fix chart linter * Fix helm docs * Fix helm docs * fix helm docs * Add warning about lease change * Disable PSP in v1.25 * rollback cluster in helmchart to psp tests Signed-off-by: James Strong <[email protected]> Co-authored-by: Ricardo Pchevuzinske Katz <[email protected]> * fix LD_LIBRARY_PATH (#9017) * updates for fixing 1.3.1 release (#9023) * updates for fixing 1.3.1 release Signed-off-by: James Strong <[email protected]> * update chart readmea Signed-off-by: James Strong <[email protected]> * updating chart Signed-off-by: James Strong <[email protected]> * supdate wording of legacy drop * supgraded helm docs * one more time Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * Bump k8s.io/klog/v2 from 2.70.1 to 2.80.0 (#9021) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.70.1 to 2.80.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.70.1...v2.80.0) --- updated-dependencies: - dependency-name: k8s.io/klog/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.1.6 (#9022) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.1.4 to 2.1.6. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.1.4...v2.1.6) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix otel init_module (#9028) * Added instructions for Rancher Desktop (#9035) Signed-off-by: Gunasekhar Matamalam <[email protected]> Signed-off-by: Gunasekhar Matamalam <[email protected]> * Revert "Metrics port name (Helm) (#8665)" This reverts commit adeb84aa38cbccb8dde471ab222b799b7cc439d3. * parameterize port name * Document new values key * Fix for Docs check * Bump ossf/scorecard-action from 1.1.2 to 2.0.2 (#9044) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.2 to 2.0.2. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/ce330fde6b1a5c9c75b417e7efc510b822a35564...68bf5b3327e4fd443d2add8ab122280547b4a16d) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/upload-artifact from 3.0.0 to 3.1.0 (#9045) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.0.0 to 3.1.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v3...3cea5372237819ed00197afe530f5a7ea3e805c8) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump k8s.io/klog/v2 from 2.80.0 to 2.80.1 (#9043) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.80.0 to 2.80.1. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.80.0...v2.80.1) --- updated-dependencies: - dependency-name: k8s.io/klog/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * update OpenTelemetry image (#9036) * update OpenTelemetry image * use promoted image * Bump github/codeql-action from 2.1.22 to 2.1.23 (#9052) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.22 to 2.1.23. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b398f525a5587552e573b247ac661067fafa920b...6a38b7d4a1af70deb1b561eb77db2b5e5a6a1e69) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump ossf/scorecard-action from 2.0.2 to 2.0.3 (#9053) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.2 to 2.0.3. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/68bf5b3327e4fd443d2add8ab122280547b4a16d...865b4092859256271290c77adbd10a43f4779972) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * bump go to v1.19.1 (#9057) * updated testrunner image sha after bump to go1191 (#9058) * Bump github/codeql-action from 2.1.23 to 2.1.24 (#9066) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.23 to 2.1.24. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/6a38b7d4a1af70deb1b561eb77db2b5e5a6a1e69...904260d7d935dff982205cbdb42025ce30b7a34f) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.2.0 (#9064) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.1.6 to 2.2.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.1.6...v2.2.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Tips for new contributors (#8924) This commit adds tips for new contributors along with references and examples Signed-off-by: afro-coder <[email protected]> Co-authored-by: Tanisha Banik <[email protected]> Signed-off-by: afro-coder <[email protected]> Co-authored-by: Tanisha Banik <[email protected]> * Bump k8s.io/component-base from 0.25.0 to 0.25.1 (#9065) Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.25.0 to 0.25.1. - [Release notes](https://github.com/kubernetes/component-base/releases) - [Commits](https://github.com/kubernetes/component-base/compare/v0.25.0...v0.25.1) --- updated-dependencies: - dependency-name: k8s.io/component-base dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Add missing space to error message (#9069) * feat: switch from endpoints to endpointslices (#8890) * endpointslices Signed-off-by: tombokombo <[email protected]> * cleanup Signed-off-by: tombokombo <[email protected]> * fix rbac Signed-off-by: tombokombo <[email protected]> * fix comments Signed-off-by: tombokombo <[email protected]> * cleanup store, add store tests Signed-off-by: tombokombo <[email protected]> * fix copyright date Signed-off-by: tombokombo <[email protected]> Signed-off-by: tombokombo <[email protected]> * fix: do not apply job-patch psp on Kubernetes 1.25 and newer (#9074) * fix: do not apply job-patch psp on Kubernetes 1.25 and newer Signed-off-by: wilmarguida <[email protected]> * fix: bump kubernetes version for helm chart CI to 1.25.0 Signed-off-by: wilmarguida <[email protected]> Signed-off-by: wilmarguida <[email protected]> * Bump github/codeql-action from 2.1.24 to 2.1.25 (#9083) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.24 to 2.1.25. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/904260d7d935dff982205cbdb42025ce30b7a34f...86f3159a697a097a813ad9bfa0002412d97690a4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/dependency-review-action from 2.1.0 to 2.4.0 (#9085) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.1.0 to 2.4.0. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/23d1ffffb6fa5401173051ec21eba8c35242733f...375c5370086bfff256c37f8beec0f437e2e72ae1) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/checkout from 1 to 3 (#9084) Bumps [actions/checkout](https://github.com/actions/checkout) from 1 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v1...2541b1294d2704b0964813337f33b291d3f8596b) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update Version ModSecurity and Coreruleset (#9086) This is related to some new bugs that found in LiveHackingEvent 1337up0522. The latest coreruleset need *ModSecurity version 2.9.6 or 3.0.8* - https://terjanq.medium.com/waf-bypasses-via-0days-d4ef1f212ec - https://coreruleset.org/20220920/crs-version-3-3-4-and-3-2-3/ - https://coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves/ - https://github.com/coreruleset/coreruleset/releases/tag/v3.3.4 * Added a Link to the New Contributors Tips (#9072) This adds a link to the new contributor tips in the developer guide present on the docs page Signed-off-by: afro-coder <[email protected]> Signed-off-by: afro-coder <[email protected]> * Bump k8s.io/component-base from 0.25.1 to 0.25.2 (#9089) Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.25.1 to 0.25.2. - [Release notes](https://github.com/kubernetes/component-base/releases) - [Commits](https://github.com/kubernetes/component-base/compare/v0.25.1...v0.25.2) --- updated-dependencies: - dependency-name: k8s.io/component-base dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Add annotation for setting sticky cookie domain (#9088) This adds the new annotation `nginx.ingress.kubernetes.io/session-cookie-domain` for setting the cookie `Domain` attribute of the sticky cookie. Signed-off-by: Matthias Neugebauer <[email protected]> Signed-off-by: Matthias Neugebauer <[email protected]> * plugin - endpoints to slices (#9081) Signed-off-by: tombokombo <[email protected]> Signed-off-by: tombokombo <[email protected]> * fix chroot module mount path (#9090) * kubewebhookcertgen sha change after go1191 (#9059) * expand CI testing for all stable versions of Kubernetes (#9078) * ci: setup version matrix for the helm chart e2e Signed-off-by: wilmarguida <[email protected]> * ci: sync all k8s version on CI steps Signed-off-by: wilmarguida <[email protected]> * ci: bump all k8s version to latest stable Signed-off-by: wilmarguida <[email protected]> Signed-off-by: wilmarguida <[email protected]> * Support none keyword in log-format escape (#8692) * Support none keyword in log-format escape ## What this PR does / why we need it: ingress-nginx does not support disabling escaping of special characters in the nginx log. This PR exposes the setting to support that functionality. ## Types of changes - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Breaking change (fix or feature that would cause existing functionality to change) - [ ] Documentation only ## Which issue/s this PR fixes  ## How Has This Been Tested? Followed the [getting-started](https://github.com/kubernetes/ingress-nginx/blob/96b6228a6b65a85e421b8a348a149e99181664d1/docs/developer-guide/getting-started.md) guide. Used ppa:longsleep/golang-backports on WSL Ubuntu to establish a golang-1.18 environment with latest docker and recommended kind. Built the dev-env successfully; had issues with make test, but they are entirely unrelated to anything I touched. Ultimate test was ``` FOCUS=log-format make kind-e2e-test ... Ginkgo ran 1 suite in 6m29.7437865s Test Suite Passed ``` ## Checklist:   - [x] My change requires a change to the documentation. - [x] I have updated the documentation accordingly. - [x] I've read the [CONTRIBUTION](https://github.com/kubernetes/ingress-nginx/blob/main/CONTRIBUTING.md) guide - [x] I have added tests to cover my changes. - [x] All new and existing tests passed. I did not update docs/e2e-tests.md. * gofmt -s ./internal/ingress/controller/config/config.go * Consistent prometheus metric names and documentation (#8728) * clean prometheus metrics - add new histogram metrics with consistent names - deprecate summary metrics with inconsistent names * update prometheus metrics tests * remove ingress_upstream_header_seconds metric It hasn't been released so it is safe. Use header_duration_seconds metric. * add documentation on prometheus metrics * Fix yaml formatting error with multiple annotations (#9104) When using multiple values for the `serviceAccount.annotations` values, the first line ends up indented 2 further than the following lines, resulting in a invalid yaml * tag 1.4.0 to start release Signed-off-by: James Strong <[email protected]> * remove vcs build and resolve git issues Signed-off-by: James Strong <[email protected]> * update tag to start build Signed-off-by: James Strong <[email protected]> * fixed broken helm version comparision (#9113) * update for 1.4.0 release Signed-off-by: James Strong <[email protected]> * Fixed to supported versions (#9117) * Updated incorrect version number in the Installation Guide (#9120) Fixes the incorrect version v.1.4.0 to v1.4.0 Signed-off-by: afro-coder <[email protected]> Signed-off-by: afro-coder <[email protected]> * Updated the Developer guide with New Contributor information (#9114) Added more clarity to the docs with regards to the getting-started page for developers. Signed-off-by: afro-coder <[email protected]> Signed-off-by: afro-coder <[email protected]> * Remove deprecated net dependency (#9110) * Fixed docs helm-docs version (#9121) * update x/net to remove vul CVE-2022-27664 (#9109) Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * fix wrong tag * Rename controller-wehbooks-networkpolicy.yaml -> controller-webhooks-networkpolicy.yaml. (#9123) * Bump helm/chart-releaser-action from 1.4.0 to 1.4.1 (#9136) Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/helm/chart-releaser-action/releases) - [Commits](https://github.com/helm/chart-releaser-action/compare/v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: helm/chart-releaser-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github/codeql-action from 2.1.25 to 2.1.27 (#9137) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.25 to 2.1.27. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/86f3159a697a097a813ad9bfa0002412d97690a4...807578363a7869ca324a79039e6db9c843e0e100) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump ossf/scorecard-action from 2.0.3 to 2.0.4 (#9138) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.3 to 2.0.4. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/865b4092859256271290c77adbd10a43f4779972...e363bfca00e752f91de7b7d2a77340e2e523cb18) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump google.golang.org/grpc from 1.49.0 to 1.50.0 (#9134) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.49.0 to 1.50.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.49.0...v1.50.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/checkout from 3.0.2 to 3.1.0 (#9135) Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.1.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/2541b1294d2704b0964813337f33b291d3f8596b...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * upgrade to golang 1.19.2 (#9124) * upgrade to golang 1.19.2 Signed-off-by: James Strong <[email protected]> * update e2e testing to 1.25 kind Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * fix e2e resource leak when ginkgo exit before clear resource (#9103) * fix: handle 401 and 403 by external auth (#9131) * Move bowei to emeritus owner (#9150) * fix ports (#9149) * #7652 - Updated Helm chart to use the fullname for the electionID if not specified. (#9133) * Automatically generate electionID from the fullname or use the set value. * Updated the chart readme to include the new empty default. * Rebuilt the Helm readme with helm-docs. * Documentation added for implemented redirection in the proxy to ensure image pulling (#9098) * Documentation added for redirection in the proxy to ensure image pulling * Update troubleshooting.md * Update troubleshooting.md * Update troubleshooting.md * updating runner with golang 1.19.2 (#9158) Signed-off-by: James Strong <[email protected]> Signed-off-by: James Strong <[email protected]> * feat: add ovhcloud (#9171) * GitHub Templates: Remove trailing whitespaces. (#9172) * Update CHANGELOG.md (#9147) * add troubleshooting for port listen issues (#9185) * Bump docker/setup-buildx-action from 2.0.0 to 2.1.0 (#9180) Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.0.0 to 2.1.0. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/dc7b9719a96d48369863986a06765841d7ea23f6...95cb08cb2672c73d4ffd2f422e6d11953d2a9c70) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump dorny/paths-filter from 2.10.2 to 2.11.1 (#9183) Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 2.10.2 to 2.11.1. - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](https://github.com/dorny/paths-filter/compare/b2feaf19c27470162a626bd6fa8438ae5b263721...4512585405083f25c027a35db413c2b3b9006d50) --- updated-dependencies: - dependency-name: dorny/paths-filter dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * start 1.4.1 release Signed-off-by: James Strong <[email protected]> * Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#9173) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.5.0 to 1.6.0. - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](https://github.com/spf13/cobra/compare/v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump google.golang.org/grpc from 1.50.0 to 1.50.1 (#9174) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.50.0 to 1.50.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.50.0...v1.50.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump k8s.io/component-base from 0.25.2 to 0.25.3 (#9175) Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.25.2 to 0.25.3. - [Release notes](https://github.com/kubernetes/component-base/releases) - [Commits](https://github.com/kubernetes/component-base/compare/v0.25.2...v0.25.3) --- updated-dependencies: - dependency-name: k8s.io/component-base dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 (#9176) Bumps [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) from 1.5.4 to 1.6.0. - [Release notes](https://github.com/fsnotify/fsnotify/releases) - [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md) - [Commits](https://github.com/fsnotify/fsnotify/compare/v1.5.4...v1.6.0) --- updated-dependencies: - dependency-name: github.com/fsnotify/fsnotify dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump github.com/onsi/ginkgo/v2 from 2.2.0 to 2.3.1 (#9177) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.2.0 to 2.3.1. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.2.0...v2.3.1) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump geekyeggo/delete-artifact from 1.0.0 to 2.0.0 (#9178) Bumps [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact) from 1.0.0 to 2.0.0. - [Release notes](https://github.com/geekyeggo/delete-artifact/releases) - [Commits](https://github.com/geekyeggo/delete-artifact/compare/b73cb986740e466292a536d0e32e2666c56fdeb3...54ab544f12cdb7b71613a16a2b5a37a9ade990af) --- updated-dependencies: - dependency-name: geekyeggo/delete-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/dependency-review-action from 2.4.0 to 2.5.0 (#9179) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/375c5370086bfff256c37f8beec0f437e2e72ae1...fd675ced9c17f1393071e1a2e685ab527e585a0c) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump docker/setup-qemu-action from 2.0.0 to 2.1.0 (#9181) Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2.0.0 to 2.1.0. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/8b122486cedac8393e77aa9734c3528886e4a1a8...e81a89b1732b9c48d79cd809d8d81d79c4647a18) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump securego/gosec from 2.13.1 to 2.14.0 (#9182) Bumps [securego/gosec](https://github.com/securego/gosec) from 2.13.1 to 2.14.0. - [Release notes](https://github.com/securego/gosec/releases) - [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml) - [Commits](https://github.com/securego/gosec/compare/19fa856badad483cae700ee1213dd7f1a933d6d3...1af1d5bb49259b62e45c505db397dd2ada5d74f8) --- updated-dependencies: - dependency-name: securego/gosec dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Implement parseFloat for annotations (#9195) * Bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.4.0 (#9201) Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.3.1...v2.4.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-…

Signed-off-by: sashashura <[email protected]> Signed-off-by: sashashura <[email protected]>

Update plugin.yaml

3b21a2b

Signed-off-by: sashashura <[email protected]>

k8s-ci-robot added the needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. label Aug 31, 2022

k8s-ci-robot added needs-kind Indicates a PR lacks a `kind/foo` label and requires one. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Aug 31, 2022

k8s-ci-robot added needs-priority size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Aug 31, 2022

k8s-ci-robot requested review from ElvinEfendi and strongjz August 31, 2022 09:07

k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Aug 31, 2022

k8s-ci-robot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Aug 31, 2022

k8s-ci-robot assigned strongjz Sep 1, 2022

k8s-ci-robot added lgtm "Looks good to me", indicates that a PR is ready to be merged. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Sep 1, 2022

k8s-ci-robot merged commit 542cfb7 into kubernetes:main Sep 1, 2022

rchshld pushed a commit to joomcode/ingress-nginx that referenced this pull request May 19, 2023

Update plugin.yaml (kubernetes#9001)

e229a23

Signed-off-by: sashashura <[email protected]> Signed-off-by: sashashura <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

GitHub Workflows security hardening #9001

GitHub Workflows security hardening #9001

sashashura commented Aug 31, 2022

k8s-ci-robot commented Aug 31, 2022

k8s-ci-robot commented Aug 31, 2022

k8s-ci-robot commented Aug 31, 2022

k8s-triage-robot commented Aug 31, 2022

strongjz commented Aug 31, 2022

strongjz commented Sep 1, 2022

k8s-ci-robot commented Sep 1, 2022

Wulf commented Sep 1, 2022

GitHub Workflows security hardening #9001

GitHub Workflows security hardening #9001

Conversation

sashashura commented Aug 31, 2022

k8s-ci-robot commented Aug 31, 2022

k8s-ci-robot commented Aug 31, 2022

k8s-ci-robot commented Aug 31, 2022

k8s-triage-robot commented Aug 31, 2022

strongjz commented Aug 31, 2022

strongjz commented Sep 1, 2022

k8s-ci-robot commented Sep 1, 2022

Wulf commented Sep 1, 2022