Preview v1.12.0-rc1

Ingress Core Module Release 1.12.0

Welcome to the latest release of Ingress module of (Kubernetes Fury Distribution)[https://github.com/sighupio/fury-distribution] maintained by team
SIGHUP.

This latest release is an attempt on upgrading the components in the module to
its latest stable release along with adding the tech preview of the latest
kubernetes release v1.23.0.

Component Images 🚢

Component	Supported Version	Previous Version
cert-manager	v1.6.1	v1.5.3
forecastle	v1.0.70	v1.0.66
nginx	v1.1.0	v1.0.1
pomerium	v0.15.8	v0.15.8
nginx-ldap-auth	v1.0.6	No update

Please refer the individual release notes to get a detailed info on the
releases

Known Issues ⚠️

• Forecastle is not supported in the versions 1.22 and 1.23 of Kubernetes
• We drop support of Kubernetes versions <= v1.19.x, this is especially
  important for Ingress due to its deprecation of apiVersions

Breaking Changes 💔

• cert-manager: Following their deprecation in version 1.11.0, the cert-manager APIVersions v1alpha2, v1alpha3, and v1beta1 are no longer served.This means if your deployment manifests contain any of these API versions, you will not be able to deploy them after upgrading

Features 💥

• #54 Added e2e-test support for k8s runtime 1.23
• #55 Added Kubernetes labels to all the components of the module
• #55 Added Makefile, JSON builder and .bumpversion config to the module
• #56 Updated the
  certmanager CRDs to drop apiVersion support < v1 and some syncing with upstream

Bug Fixes 🐞

• #580148 Fixed broken Ingress Config for Pomerium

Update Guide 🦮

Warnings

• Make sure none of the cert-manager CRDs like Certificate, ClusterIssuer,
  Challenge, etc. are using apiVersion < v1
• Make sure you use the latest Ingress syntax following version 1.22 of Kubernetes.

Process

To upgrade this core module from v1.11.x to v1.12.0, you need to download this new version, then apply the kustomize project.

kustomize build katalog/cert-manager | kubectl apply -f -
# And
kustomize build katalog/forecastle | kubectl apply -f -
# And
kustomize build katalog/pomerium | kubectl apply -f -
# And
kustomize build katalog/nginx | kubectl apply -f -
# Or
kustomize build katalog/dual-nginx | kubectl apply -f -
# Or
kustomize build katalog/nginx-gke | kubectl apply -f -
# Or
kustomize build katalog/nginx-ovh | kubectl apply -f -

Release v1.11.3

Ingress Core Module version 1.11.3

fury-kubernetes-ingress is part of the SIGHUP maintained Kubernetes
Fury Distribution. The
module ships Ingress Controller and TLS certificate management
components you need to manage external access to your services in your
cluster. Team SIGHUP makes it a priority to maintain these modules in
compliance with CNCF and with all the latest features from upstream.

This is a HOTFIX release fixing wrong syntax of pomerium in previous release.

Changelog

Known Issues

• forecastle component is broken of kubernetes 1.22. This is due to apiVersion incombatibilities upstream

Breaking changes

Features

Bug fixes

• #58 Fixing the syntax in Pomerium ymls

Upgrade Guide

Process

To upgrade this core module from v1.11.2 to v1.11.3, you need to download this new version, then apply the kustomize project.

kustomize build katalog/pomerium | kubectl apply -f -
# Configured

Release v1.11.2

Ingress Core Module version 1.11.2

fury-kubernetes-ingress is part of the SIGHUP maintained Kubernetes Fury Distribution. The module ships Ingress Controller and TLS certificate management components you need to manage external access to your services in your cluster. Team SIGHUP makes it a priority to maintain these modules in compliance with CNCF and with all the latest features from upstream.

This is a HOTFIX release fixing a leader selection behavior change issue.

Changelog

Known issues

• forecastle component is broken of kubernetes 1.22. This is due to apiVersion incombatibilities upstream

Breaking changes

None

Features

Bug fixes

• #53 Fixing leader election and RBAC permissions

Upgrade Guide

Process

To upgrade this core module from v1.11.1 to v1.11.2, you need to download this new version, then apply the kustomize project.

kustomize build katalog/nginx | kubectl apply -f -
# Configured

Release v1.11.1

Ingress Core Module version 1.11.1

fury-kubernetes-ingress is part of the SIGHUP maintained Kubernetes
Fury Distribution. The
module ships Ingress Controller and TLS certificate management
components you need to manage external access to your services in your
cluster. Team SIGHUP makes it a priority to maintain these modules in
compliance with CNCF and with all the latest features from upstream.

This is a minor release fixing a permission issue.

Changelog

Known issues

• forecastle component is broken of kubernetes 1.22. This is due to apiVersion incombatibilities upstream

Breaking changes

None

Features

Bug fixes

• #52 Fixing permission issue for ingress-nginx-metrics svc

Upgrade Guide

Process

To upgrade this core module from v1.11.0 to v1.11.1, you need to download this new version, then apply the kustomize project.

kustomize build katalog/nginx/configs/ | kubectl apply -f -
# Configured

Release v1.11.0

Ingress Core Module version 1.11.0

fury-kubernetes-ingress is part of the SIGHUP maintained Kubernetes
Fury Distribution. The
module ships Ingress Controller and TLS certificate management
components you need to manage external access to your services in your
cluster. Team SIGHUP makes it a priority to maintain these modules in
compliance with CNCF and with all the latest features from upstream.

This release introduces the support for Kubernetes runtime 1.22 and drops support for 1.18. Refer the Compatibility Matrix for more. Refer the Compatibility Matrix for more.

Known Issues

• forecastle component is broken of kubernetes 1.22. This is due to apiVersion incombatibilities upstream

• Once the cert-manager CRDs are deployed a certain wait time is necessary before deploying resources using these CRDs.

Changelog

Breaking changes

None

Features

• #48 Adding e2e-tests for cluster based on Kubernetes 1.22
• #49 Fixing the apiVersion of Ingress and IngressClass to v1 to support 1.22 along with adapting the latest Ingress path definition
• #50 Upgrading component images:
  • nginx to 1.0.0
  • cert-manager to 1.5.3
  • forecastle to 1.0.66
  • pomerium to 0.15.0
• #50 Updating the cert-manager CRDs as per upstream

Bug fixes

None

Security Fixes

None

Documentation updates

None

Upgrade Guide

Warnings

• Note that, from the release 1.22 on, Kubernetes drops Ingress support in extensions/v1beta1 and networking.k8s.io/v1beta1. Any resources using this versions will have to be re-written.
• The changes to spec.backend is also to be referred.
• Upgrade process for Cert-manager and ingress as far as this module is concerned should be smooth.

Process

To upgrade this core module from v1.10.0 to v1.11.0, you need to download this new version, then apply the kustomize project.

kustomize build katalog/cert-manager | kubectl apply -f -
# And
kustomize build katalog/forecastle | kubectl apply -f -
# And
kustomize build katalog/pomerium | kubectl apply -f -
# And
kustomize build katalog/nginx | kubectl apply -f -
# Or
kustomize build katalog/dual-nginx | kubectl apply -f -
# Or
kustomize build katalog/nginx-gke | kubectl apply -f -
# Or
kustomize build katalog/nginx-ovh | kubectl apply -f -

Pre-release v1.11.0-rc3

Ingress Core Module version 1.11.0

fury-kubernetes-ingress is part of the SIGHUP maintained Kubernetes Fury Distribution. The module ships Ingress Controller and TLS certificate management components you need to manage external access to your services in your cluster. Team SIGHUP makes it a priority to maintain these modules in compliance with CNCF and with all the latest features from upstream.

This release introduces the support for Kubernetes runtime 1.22 and drops support for 1.18. Refer the Compatibility Matrix for more.

Changelog

Breaking changes

None

Features

• #48 Adding e2e-tests for cluster based on Kubernetes 1.22
• #49 Fixing the apiVersion of Ingress and IngressClass to v1 to support 1.22 along with adapting the latest Ingress path definition
• #50 Upgrading component images:
  • nginx to 1.0.0
  • cert-manager to 1.5.3
  • forecastle to 1.0.66
  • pomerium to 0.15.0
• #50 Updating the cert-manager CRDs as per upstream

Bug fixes

None

Security Fixes

None

Documentation updates

None

Known Issues

• Once the cert-manager CRDs are deployed a certain wait time is necessary before deploying resources using these CRDs.

Upgrade Guide

Warnings

• Note that, from the release 1.22 on, Kubernetes drops Ingress support in extensions/v1beta1 and networking.k8s.io/v1beta1. Any resources using this versions will have to be re-written.
• The changes to spec.backend is also to be referred.
• Upgrade process for Cert-manager and ingress as far as this module is concerned should be smooth.

Process

To upgrade this core module from v1.10.0 to v1.11.0, you need to download this new version, then apply the
kustomize project.

kustomize build katalog/cert-manager | kubectl apply -f -
# And
kustomize build katalog/forecastle | kubectl apply -f -
# And
kustomize build katalog/pomerium | kubectl apply -f -
# And
kustomize build katalog/nginx | kubectl apply -f -
# Or
kustomize build katalog/dual-nginx | kubectl apply -f -
# Or
kustomize build katalog/nginx-gke | kubectl apply -f -
# Or
kustomize build katalog/nginx-ovh | kubectl apply -f -

Pre-release v1.11.0-rc2

Ingress Infra Module version v1.11.0-rc2

fury-kubernetes-ingress is production ready ingress module that is maintained by the SIGHUP team. The module is battle tested against 4 Kubernetes runtimes including the latest 1.22 release. This new release ships support for the release 1.22 along with some important upgrades to the images used in the module.

Changelog

• Using the Ingress and IngressClass from the apiVersion networking.k8s.io/v1.
• Fixing nginx paths syntax to be compatible with Kubernetes 1.22.
• Upgrade nginx-ingress-controller and its variants from v0.46.0 to v1.0.0:
  • dual-nginx
  • nginx-gke
  • nginx-ovh
• Upgrade cert-manager from v1.3.1 to v1.5.3.
• Upgrade forecastle from 1.0.64 to 1.0.66
• Upgrade pomerium from 0.14.4 to 0.15.0
• Update RBAC permissions and CRD definitions
• Kubernetes support:
  • Deprecates Kubernetes 1.18 support.
  • Add tech-preview support to Kubernetes 1.22.

Upgrade path

To upgrade this module from v1.10.0 to v1.11.0, you need to download this new version, then apply the
kustomize project.

kustomize build katalog/cert-manager | kubectl apply -f -
# And
kustomize build katalog/forecastle | kubectl apply -f -
# And
kustomize build katalog/pomerium | kubectl apply -f -
# And
kustomize build katalog/nginx | kubectl apply -f -
# Or
kustomize build katalog/dual-nginx | kubectl apply -f -
# Or
kustomize build katalog/nginx-gke | kubectl apply -f -
# Or
kustomize build katalog/nginx-ovh | kubectl apply -f -

Important note

Before writing nginx resources, please be mindful of the changes happened to Ingress API in Kubernetes.

Pre-release v1.11.0-rc

Ingress Infra Module version v1.11.0-rc

fury-kubernetes-ingress is production ready ingress module that is maintained by the SIGHUP team. The module is battle tested against 4 Kubernetes runtimes including the latest 1.22 release. This new release ships support for the release 1.22 along with some important upgrades to the images used in the module.

Changelog

• Using the Ingress and IngressClass from the apiVersion networking.k8s.io/v1.
• Fixing nginx paths syntax to be compatible with Kubernetes 1.22.
• Upgrade nginx-ingress-controller and its variants from v0.46.0 to v1.0.0:
  • dual-nginx
  • nginx-gke
  • nginx-ovh
• Upgrade cert-manager from v1.3.1 to v1.5.3.
• Upgrade forecastle from 1.0.64 to 1.0.66
• Upgrade pomerium from 0.14.4 to 0.15.0
• Kubernetes support:
  • Deprecates Kubernetes 1.18 support.
  • Add tech-preview support to Kubernetes 1.22.

Upgrade path

To upgrade this module from v1.10.0 to v1.11.0, you need to download this new version, then apply the
kustomize project.

kustomize build katalog/cert-manager | kubectl apply -f -
# And
kustomize build katalog/forecastle | kubectl apply -f -
# And
kustomize build katalog/pomerium | kubectl apply -f -
# And
kustomize build katalog/nginx | kubectl apply -f -
# Or
kustomize build katalog/dual-nginx | kubectl apply -f -
# Or
kustomize build katalog/nginx-gke | kubectl apply -f -
# Or
kustomize build katalog/nginx-ovh | kubectl apply -f -

Important note

Before writing nginx resources, please be mindful of the changes happened to Ingress API in Kubernetes.

Release v1.10.0

Ingress Core Module version 1.10.0

SIGHUP team maintains this module updated and tested. That is the main reason why we worked on this new release.
With the Kubernetes 1.21 release, it became the perfect time to start testing this module against this Kubernetes
release.

Continue reading the Changelog to discover them:

Changelog

• Upgrade cert-manager. From v1.1.0 to
  v1.3.1
• Upgrade nginx-ingress-controller and its variants
  (from v0.43.0 to v0.46.0):
  • dual-nginx
  • nginx-gke
  • nginx-ovh
  • Add IngressClass support.
• Upgrade forecastle. From 1.0.61 to
  1.0.64
• Kubernetes support:
  • Deprecate Kubernetes 1.17 support.
  • Kubernetes 1.20 is considered stable.
  • Add tech-preview support to Kubernetes 1.21.
• Adds pomerium package. Thanks to @lzecca78

Upgrade path

To upgrade this core module from v1.9.2 to v1.10.0, you need to download this new version, then apply the
kustomize project.

kustomize build katalog/cert-manager | kubectl apply -f -
# And
kustomize build katalog/forecastle | kubectl apply -f -
# And
kustomize build katalog/pomerium | kubectl apply -f -
# And
kustomize build katalog/nginx | kubectl apply -f -
# Or
kustomize build katalog/dual-nginx | kubectl apply -f -
# Or
kustomize build katalog/nginx-gke | kubectl apply -f -
# Or
kustomize build katalog/nginx-ovh | kubectl apply -f -

In order to clean up legacy deprecated objects:

kubectl delete clusterrolebinding cert-manager-cainjector-leaderelection cert-manager-leaderelection
kubectl delete clusterrole cert-manager-leaderelection

Preview v1.10.0-rc2

Ingress Core Module version 1.10.0

SIGHUP team maintains this module updated and tested. That is the main reason why we worked on this new release.
With the Kubernetes 1.21 release, it became the perfect time to start testing this module against this Kubernetes
release.

Continue reading the Changelog to discover them:

Changelog

• Upgrade cert-manager. From v1.0.1 to
  v1.1.0
• Upgrade nginx-ingress-controller and its variants
  (from v0.43.0 to v0.46.0):
  • dual-nginx
  • nginx-gke
  • nginx-ovh
  • Add IngressClass support.
• Upgrade forecastle. From 1.0.61 to
  1.0.64
• Kubernetes support:
  • Deprecate Kubernetes 1.17 support.
  • Kubernetes 1.20 is considered stable.
  • Add tech-preview support to Kubernetes 1.21.
• Adds pomerium package. Thanks to @lzecca78

Upgrade path

To upgrade this core module from v1.9.2 to v1.10.0, you need to download this new version, then apply the
kustomize project.

kustomize build katalog/cert-manager | kubectl apply -f -
# And
kustomize build katalog/forecastle | kubectl apply -f -
# And
kustomize build katalog/pomerium | kubectl apply -f -
# And
kustomize build katalog/nginx | kubectl apply -f -
# Or
kustomize build katalog/dual-nginx | kubectl apply -f -
# Or
kustomize build katalog/nginx-gke | kubectl apply -f -
# Or
kustomize build katalog/nginx-ovh | kubectl apply -f -

In order to clean up legacy deprecated objects:

kubectl delete clusterrolebinding cert-manager-cainjector-leaderelection cert-manager-leaderelection
kubectl delete clusterrole cert-manager-leaderelection