Update Helm release ingress-nginx to v4.10.0

Signed-off-by: Renovate Bot <tech+renovate@vshn.ch>
projectsyn · Feb 29, 2024 · 51b8e6a · 51b8e6a
1 parent 09e3f8a
commit 51b8e6a
Show file tree

Hide file tree

Showing 22 changed files with 75 additions and 61 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -3,7 +3,7 @@ parameters:
     namespace: syn-ingress-nginx
     release_name: ingress-nginx
     charts:
-      ingress-nginx: '4.7.3'
+      ingress-nginx: '4.10.0'
     chroot: false
     pod_security_admission:
       enabled: false

diff --git a/...ess_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/clusterrole.yaml b/...ess_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/clusterrole.yaml
@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-admission
 rules:
   - apiGroups:

diff --git a/...nx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/clusterrolebinding.yaml b/...nx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/clusterrolebinding.yaml
@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-admission
 roleRef:
   apiGroup: rbac.authorization.k8s.io

diff --git a/...ginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml b/...ginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml
@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-admission-create
   namespace: syn-ingress-nginx
 spec:
@@ -23,8 +23,8 @@ spec:
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.8.4
-        helm.sh/chart: ingress-nginx-4.7.3
+        app.kubernetes.io/version: 1.10.0
+        helm.sh/chart: ingress-nginx-4.10.0
       name: ingress-nginx-admission-create
     spec:
       containers:
@@ -38,16 +38,20 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0@sha256:a7943503b45d552785aa3b5e457f169a5661fb94d82b8a3373bcd9ebaf9aac80
+          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.0@sha256:44d1d0e9f19c63f58b380c5fddaca7cf22c7cee564adeff365225a5df5ef3334
           imagePullPolicy: IfNotPresent
           name: create
           securityContext:
             allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 65532
+            seccompProfile:
+              type: RuntimeDefault
       nodeSelector:
         kubernetes.io/os: linux
       restartPolicy: OnFailure
-      securityContext:
-        fsGroup: 2000
-        runAsNonRoot: true
-        runAsUser: 2000
       serviceAccountName: ingress-nginx-admission
diff --git a/...ginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/job-patchWebhook.yaml b/...ginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/job-patchWebhook.yaml
@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-admission-patch
   namespace: syn-ingress-nginx
 spec:
@@ -23,8 +23,8 @@ spec:
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.8.4
-        helm.sh/chart: ingress-nginx-4.7.3
+        app.kubernetes.io/version: 1.10.0
+        helm.sh/chart: ingress-nginx-4.10.0
       name: ingress-nginx-admission-patch
     spec:
       containers:
@@ -40,16 +40,20 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0@sha256:a7943503b45d552785aa3b5e457f169a5661fb94d82b8a3373bcd9ebaf9aac80
+          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.0@sha256:44d1d0e9f19c63f58b380c5fddaca7cf22c7cee564adeff365225a5df5ef3334
           imagePullPolicy: IfNotPresent
           name: patch
           securityContext:
             allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 65532
+            seccompProfile:
+              type: RuntimeDefault
       nodeSelector:
         kubernetes.io/os: linux
       restartPolicy: OnFailure
-      securityContext:
-        fsGroup: 2000
-        runAsNonRoot: true
-        runAsUser: 2000
       serviceAccountName: ingress-nginx-admission
diff --git a/...10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/role.yaml b/...10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/role.yaml
@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-admission
   namespace: syn-ingress-nginx
 rules:

diff --git a/...ess_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/rolebinding.yaml b/...ess_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/rolebinding.yaml
@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-admission
   namespace: syn-ingress-nginx
 roleRef:

diff --git a/..._nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/serviceaccount.yaml b/..._nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/serviceaccount.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-admission
   namespace: syn-ingress-nginx
diff --git a/...ngress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/validating-webhook.yaml b/...ngress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/validating-webhook.yaml
@@ -8,8 +8,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-admission
 webhooks:
   - admissionReviewVersions:

diff --git a/...s-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/clusterrole.yaml b/...s-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/clusterrole.yaml
@@ -6,8 +6,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx
 rules:
   - apiGroups:

diff --git a/.../ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/clusterrolebinding.yaml b/.../ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/clusterrolebinding.yaml
@@ -6,8 +6,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx
 roleRef:
   apiGroup: rbac.authorization.k8s.io

diff --git a/...ngress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-configmap.yaml b/...ngress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-configmap.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 data:
-  allow-snippet-annotations: 'true'
+  allow-snippet-annotations: 'false'
 kind: ConfigMap
 metadata:
   labels:
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-controller
   namespace: syn-ingress-nginx
diff --git a/...gress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-deployment.yaml b/...gress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-deployment.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-controller
   namespace: syn-ingress-nginx
 spec:
@@ -28,8 +28,8 @@ spec:
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.8.4
-        helm.sh/chart: ingress-nginx-4.7.3
+        app.kubernetes.io/version: 1.10.0
+        helm.sh/chart: ingress-nginx-4.10.0
     spec:
       containers:
         - args:
@@ -53,7 +53,7 @@ spec:
                   fieldPath: metadata.namespace
             - name: LD_PRELOAD
               value: /usr/local/lib/libmimalloc.so
-          image: registry.k8s.io/ingress-nginx/controller-chroot:v1.8.4@sha256:76100ab4c1b3cdc2697dd26492ba42c6519e99c5df1bc839ac5d6444a2c58d17
+          image: registry.k8s.io/ingress-nginx/controller-chroot:v1.10.0@sha256:7eb46ff733429e0e46892903c7394aff149ac6d284d92b3946f3baf7ff26a096
           imagePullPolicy: IfNotPresent
           lifecycle:
             preStop:
@@ -103,10 +103,15 @@ spec:
             capabilities:
               add:
                 - NET_BIND_SERVICE
+                - SYS_ADMIN
                 - SYS_CHROOT
               drop:
                 - ALL
+            readOnlyRootFilesystem: false
+            runAsNonRoot: true
             runAsUser: 101
+            seccompProfile:
+              type: RuntimeDefault
           volumeMounts:
             - mountPath: /usr/local/certificates/
               name: webhook-cert

diff --git a/...ess-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-ingressclass.yaml b/...ess-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-ingressclass.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: nginx
 spec:
   controller: k8s.io/ingress-nginx
diff --git a/...nx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-poddisruptionbudget.yaml b/...nx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-poddisruptionbudget.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-controller
   namespace: syn-ingress-nginx
 spec:

diff --git a/...inx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-role.yaml b/...inx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-role.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx
   namespace: syn-ingress-nginx
 rules:

diff --git a/...ress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-rolebinding.yaml b/...ress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-rolebinding.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx
   namespace: syn-ingress-nginx
 roleRef:

diff --git a/...-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-service-metrics.yaml b/...-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-service-metrics.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-controller-metrics
   namespace: syn-ingress-nginx
 spec:

diff --git a/...-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-service-webhook.yaml b/...-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-service-webhook.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-controller-admission
   namespace: syn-ingress-nginx
 spec:

diff --git a/.../ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-service.yaml b/.../ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-service.yaml
@@ -8,8 +8,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-controller
   namespace: syn-ingress-nginx
 spec:

diff --git a/...s-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-serviceaccount.yaml b/...s-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-serviceaccount.yaml
@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx
   namespace: syn-ingress-nginx
diff --git a/...s-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-servicemonitor.yaml b/...s-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/controller-servicemonitor.yaml
@@ -7,9 +7,10 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.8.4
-    helm.sh/chart: ingress-nginx-4.7.3
+    app.kubernetes.io/version: 1.10.0
+    helm.sh/chart: ingress-nginx-4.10.0
   name: ingress-nginx-controller
+  namespace: syn-ingress-nginx
 spec:
   endpoints:
     - interval: 30s