Update nginx-ingress with edits made in Replicated Ship Cloud

nginx-ingress/nginx-ingress.yaml

@@ -42,6 +42,7 @@ rules:
   - watch
 - apiGroups:
   - extensions
+  - networking.k8s.io
   resources:
   - ingresses
   verbs:
@@ -50,6 +51,7 @@ rules:
   - watch
 - apiGroups:
   - extensions
+  - networking.k8s.io
   resources:
   - ingresses/status
   verbs:
@@ -121,6 +123,7 @@ rules:
   - watch
 - apiGroups:
   - extensions
+  - networking.k8s.io
   resources:
   - ingresses
   verbs:
@@ -136,6 +139,7 @@ rules:
   - patch
 - apiGroups:
   - extensions
+  - networking.k8s.io
   resources:
   - ingresses/status
   verbs:
@@ -174,17 +178,6 @@ subjects:
   namespace: default
 ---
 apiVersion: v1
-data:
-  enable-vts-status: "false"
-kind: ConfigMap
-metadata:
-  labels:
-    app: nginx-ingress
-    component: controller
-    release: nginx-ingress
-  name: nginx-ingress-controller
----
-apiVersion: v1
 kind: Service
 metadata:
   labels:
@@ -240,7 +233,7 @@ metadata:
   name: nginx-ingress-controller
 spec:
   minReadySeconds: 0
-  replicas: 3
+  replicas: 1
   revisionHistoryLimit: 10
   strategy: {}
   template:
@@ -266,10 +259,10 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.24.1
+        image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.25.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
-          failureThreshold: 10
+          failureThreshold: 3
           httpGet:
             path: /healthz
             port: 10254
@@ -298,6 +291,7 @@ spec:
           timeoutSeconds: 1
         resources: {}
         securityContext:
+          allowPrivilegeEscalation: true
           capabilities:
             add:
             - NET_BIND_SERVICE
@@ -329,20 +323,34 @@ spec:
     spec:
       containers:
       - args: []
-        image: k8s.gcr.io/defaultbackend:1.4
+        image: k8s.gcr.io/defaultbackend-amd64:1.5
         imagePullPolicy: IfNotPresent
         livenessProbe:
+          failureThreshold: 3
           httpGet:
             path: /healthz
             port: 8080
             scheme: HTTP
           initialDelaySeconds: 30
+          periodSeconds: 10
+          successThreshold: 1
           timeoutSeconds: 5
         name: nginx-ingress-default-backend
         ports:
         - containerPort: 8080
           name: http
           protocol: TCP
+        readinessProbe:
+          failureThreshold: 6
+          httpGet:
+            path: /healthz
+            port: 8080
+            scheme: HTTP
+          initialDelaySeconds: 0
+          periodSeconds: 5
+          successThreshold: 1
+          timeoutSeconds: 5
         resources: {}
-      serviceAccountName: nginx-ingress
+        securityContext:
+          runAsUser: 65534
       terminationGracePeriodSeconds: 60