From 98a6452989ec2945ba7b0845df07fa054d3040dd Mon Sep 17 00:00:00 2001 From: Carmine Vassallo Date: Mon, 27 Jan 2025 17:36:47 +0100 Subject: [PATCH] SONAR-24224 Update the nginx-ingress to 4.12.0 --- charts/sonarqube-dce/CHANGELOG.md | 1 + charts/sonarqube-dce/Chart.lock | 6 +- charts/sonarqube-dce/Chart.yaml | 4 +- charts/sonarqube/CHANGELOG.md | 3 +- charts/sonarqube/Chart.lock | 6 +- charts/sonarqube/Chart.yaml | 4 +- .../ingress-with-controller.yaml | 95 ++++++++++--------- .../sonarqube/ingress-with-controller.yaml | 95 ++++++++++--------- 8 files changed, 111 insertions(+), 103 deletions(-) diff --git a/charts/sonarqube-dce/CHANGELOG.md b/charts/sonarqube-dce/CHANGELOG.md index 14da4169a..c49136d7c 100644 --- a/charts/sonarqube-dce/CHANGELOG.md +++ b/charts/sonarqube-dce/CHANGELOG.md @@ -3,6 +3,7 @@ All changes to this chart will be documented in this file. ## [2025.2.0] * Update Chart's version to 2025.2.0 +* Update ingress-nginx subchart to 4.12.0 ## [2025.1.0] * Update Chart's version to 2025.1.0 diff --git a/charts/sonarqube-dce/Chart.lock b/charts/sonarqube-dce/Chart.lock index d357f0973..94b4a4852 100644 --- a/charts/sonarqube-dce/Chart.lock +++ b/charts/sonarqube-dce/Chart.lock @@ -4,6 +4,6 @@ dependencies: version: 10.15.0 - name: ingress-nginx repository: https://kubernetes.github.io/ingress-nginx - version: 4.11.3 -digest: sha256:66128c94376c72435f139d603ba24e208528d50bf0df0421abf1063a4cdb95c4 -generated: "2024-12-06T16:17:49.758961+01:00" + version: 4.12.0 +digest: sha256:f03be3f9956a16f18143380a5fff221ecceb4cc59dd81e0a6dd530beff76ebb3 +generated: "2025-01-27T16:26:08.00355+01:00" diff --git a/charts/sonarqube-dce/Chart.yaml b/charts/sonarqube-dce/Chart.yaml index 7fb2315f2..817f5cd38 100644 --- a/charts/sonarqube-dce/Chart.yaml +++ b/charts/sonarqube-dce/Chart.yaml @@ -27,6 +27,8 @@ annotations: artifacthub.io/changes: | - kind: changed description: "Update Chart's version to 2025.2.0" + - kind: changed + description: "Update ingress-nginx subchart to 4.12.0" artifacthub.io/links: | - name: support url: https://community.sonarsource.com/ @@ -45,6 +47,6 @@ dependencies: repository: https://raw.githubusercontent.com/bitnami/charts/archive-full-index/bitnami condition: postgresql.enabled - name: ingress-nginx - version: 4.11.3 + version: 4.12.0 repository: https://kubernetes.github.io/ingress-nginx condition: nginx.enabled,ingress-nginx.enabled diff --git a/charts/sonarqube/CHANGELOG.md b/charts/sonarqube/CHANGELOG.md index 7a15641b3..4b542e453 100644 --- a/charts/sonarqube/CHANGELOG.md +++ b/charts/sonarqube/CHANGELOG.md @@ -3,7 +3,8 @@ All changes to this chart will be documented in this file. ## [2025.2.0] * Update Chart's version to 2025.2.0 - +* Update ingress-nginx subchart to 4.12.0 + ## [2025.1.0] * Update Chart's version to 2025.1.0 * Upgrade SonarQube Server to 2025.1.0 diff --git a/charts/sonarqube/Chart.lock b/charts/sonarqube/Chart.lock index 3bf3609c4..554930d61 100644 --- a/charts/sonarqube/Chart.lock +++ b/charts/sonarqube/Chart.lock @@ -4,6 +4,6 @@ dependencies: version: 10.15.0 - name: ingress-nginx repository: https://kubernetes.github.io/ingress-nginx - version: 4.11.3 -digest: sha256:66128c94376c72435f139d603ba24e208528d50bf0df0421abf1063a4cdb95c4 -generated: "2024-12-06T16:09:08.066372+01:00" + version: 4.12.0 +digest: sha256:f03be3f9956a16f18143380a5fff221ecceb4cc59dd81e0a6dd530beff76ebb3 +generated: "2025-01-27T16:26:55.281405+01:00" diff --git a/charts/sonarqube/Chart.yaml b/charts/sonarqube/Chart.yaml index b2919652a..4f9f14ec9 100644 --- a/charts/sonarqube/Chart.yaml +++ b/charts/sonarqube/Chart.yaml @@ -32,6 +32,8 @@ annotations: artifacthub.io/changes: | - kind: changed description: "Update Chart's version to 2025.2.0" + - kind: changed + description: "Update ingress-nginx subchart to 4.12.0" artifacthub.io/containsSecurityUpdates: "false" artifacthub.io/images: | - name: sonarqube @@ -43,6 +45,6 @@ dependencies: repository: https://raw.githubusercontent.com/bitnami/charts/archive-full-index/bitnami condition: postgresql.enabled - name: ingress-nginx - version: 4.11.3 + version: 4.12.0 repository: https://kubernetes.github.io/ingress-nginx condition: nginx.enabled,ingress-nginx.enabled diff --git a/tests/unit-compatibility-test/fixtures/sonarqube-dce/ingress-with-controller.yaml b/tests/unit-compatibility-test/fixtures/sonarqube-dce/ingress-with-controller.yaml index 92d03e067..2b99b6c09 100644 --- a/tests/unit-compatibility-test/fixtures/sonarqube-dce/ingress-with-controller.yaml +++ b/tests/unit-compatibility-test/fixtures/sonarqube-dce/ingress-with-controller.yaml @@ -38,10 +38,10 @@ apiVersion: v1 kind: ServiceAccount metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -119,17 +119,16 @@ apiVersion: v1 kind: ConfigMap metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller name: ingress-with-controller.yaml-ingress-nginx-controller namespace: default data: - allow-snippet-annotations: "false" --- # Source: sonarqube-dce/templates/config.yaml apiVersion: v1 @@ -252,10 +251,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm name: ingress-with-controller.yaml-ingress-nginx @@ -336,10 +335,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm name: ingress-with-controller.yaml-ingress-nginx @@ -357,10 +356,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -451,10 +450,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -474,10 +473,10 @@ apiVersion: v1 kind: Service metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -501,10 +500,10 @@ kind: Service metadata: annotations: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -689,10 +688,10 @@ apiVersion: apps/v1 kind: Deployment metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -710,10 +709,10 @@ spec: template: metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -721,7 +720,7 @@ spec: dnsPolicy: ClusterFirst containers: - name: controller - image: registry.k8s.io/ingress-nginx/controller:v1.11.3@sha256:d56f135b6462cfc476447cfe564b83a45e8bb7da2774963b00d12161112270b7 + image: registry.k8s.io/ingress-nginx/controller:v1.12.0@sha256:e6b8de175acda6ca913891f0f727bca4527e797d52688cbe9fec9040d6f6b6fa imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -738,10 +737,10 @@ spec: - --validating-webhook=:8443 - --validating-webhook-certificate=/usr/local/certificates/cert - --validating-webhook-key=/usr/local/certificates/key - - --enable-metrics=false securityContext: runAsNonRoot: true runAsUser: 101 + runAsGroup: 82 allowPrivilegeEscalation: false seccompProfile: type: RuntimeDefault @@ -1405,10 +1404,10 @@ apiVersion: networking.k8s.io/v1 kind: IngressClass metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -1461,10 +1460,10 @@ kind: ValidatingWebhookConfiguration metadata: annotations: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1503,10 +1502,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1521,10 +1520,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1546,10 +1545,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1572,10 +1571,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1598,10 +1597,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1663,10 +1662,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1675,17 +1674,17 @@ spec: metadata: name: ingress-with-controller.yaml-ingress-nginx-admission-create labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook spec: containers: - name: create - image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f + image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4 imagePullPolicy: IfNotPresent args: - create @@ -1703,6 +1702,7 @@ spec: drop: - ALL readOnlyRootFilesystem: true + runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 seccompProfile: @@ -1722,10 +1722,10 @@ metadata: "helm.sh/hook": post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1734,17 +1734,17 @@ spec: metadata: name: ingress-with-controller.yaml-ingress-nginx-admission-patch labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook spec: containers: - name: patch - image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f + image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4 imagePullPolicy: IfNotPresent args: - patch @@ -1764,6 +1764,7 @@ spec: drop: - ALL readOnlyRootFilesystem: true + runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 seccompProfile: diff --git a/tests/unit-compatibility-test/fixtures/sonarqube/ingress-with-controller.yaml b/tests/unit-compatibility-test/fixtures/sonarqube/ingress-with-controller.yaml index 9e21fd789..f14ea1cb0 100644 --- a/tests/unit-compatibility-test/fixtures/sonarqube/ingress-with-controller.yaml +++ b/tests/unit-compatibility-test/fixtures/sonarqube/ingress-with-controller.yaml @@ -4,10 +4,10 @@ apiVersion: v1 kind: ServiceAccount metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -71,17 +71,16 @@ apiVersion: v1 kind: ConfigMap metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller name: ingress-with-controller.yaml-ingress-nginx-controller namespace: default data: - allow-snippet-annotations: "false" --- # Source: sonarqube/templates/config.yaml apiVersion: v1 @@ -175,10 +174,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm name: ingress-with-controller.yaml-ingress-nginx @@ -259,10 +258,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm name: ingress-with-controller.yaml-ingress-nginx @@ -280,10 +279,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -374,10 +373,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -397,10 +396,10 @@ apiVersion: v1 kind: Service metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -424,10 +423,10 @@ kind: Service metadata: annotations: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -534,10 +533,10 @@ apiVersion: apps/v1 kind: Deployment metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -555,10 +554,10 @@ spec: template: metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -566,7 +565,7 @@ spec: dnsPolicy: ClusterFirst containers: - name: controller - image: registry.k8s.io/ingress-nginx/controller:v1.11.3@sha256:d56f135b6462cfc476447cfe564b83a45e8bb7da2774963b00d12161112270b7 + image: registry.k8s.io/ingress-nginx/controller:v1.12.0@sha256:e6b8de175acda6ca913891f0f727bca4527e797d52688cbe9fec9040d6f6b6fa imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -583,10 +582,10 @@ spec: - --validating-webhook=:8443 - --validating-webhook-certificate=/usr/local/certificates/cert - --validating-webhook-key=/usr/local/certificates/key - - --enable-metrics=false securityContext: runAsNonRoot: true runAsUser: 101 + runAsGroup: 82 allowPrivilegeEscalation: false seccompProfile: type: RuntimeDefault @@ -1010,10 +1009,10 @@ apiVersion: networking.k8s.io/v1 kind: IngressClass metadata: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: controller @@ -1066,10 +1065,10 @@ kind: ValidatingWebhookConfiguration metadata: annotations: labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1108,10 +1107,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1126,10 +1125,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1151,10 +1150,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1177,10 +1176,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1203,10 +1202,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1268,10 +1267,10 @@ metadata: "helm.sh/hook": pre-install,pre-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1280,17 +1279,17 @@ spec: metadata: name: ingress-with-controller.yaml-ingress-nginx-admission-create labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook spec: containers: - name: create - image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f + image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4 imagePullPolicy: IfNotPresent args: - create @@ -1308,6 +1307,7 @@ spec: drop: - ALL readOnlyRootFilesystem: true + runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 seccompProfile: @@ -1327,10 +1327,10 @@ metadata: "helm.sh/hook": post-install,post-upgrade "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook @@ -1339,17 +1339,17 @@ spec: metadata: name: ingress-with-controller.yaml-ingress-nginx-admission-patch labels: - helm.sh/chart: ingress-nginx-4.11.3 + helm.sh/chart: ingress-nginx-4.12.0 app.kubernetes.io/name: ingress-nginx app.kubernetes.io/instance: ingress-with-controller.yaml - app.kubernetes.io/version: "1.11.3" + app.kubernetes.io/version: "1.12.0" app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/managed-by: Helm app.kubernetes.io/component: admission-webhook spec: containers: - name: patch - image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f + image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4 imagePullPolicy: IfNotPresent args: - patch @@ -1369,6 +1369,7 @@ spec: drop: - ALL readOnlyRootFilesystem: true + runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 seccompProfile: