Skip to content

feat(helm): update chart ingress-nginx to 4.14.3 #37

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat(helm): update chart ingress-nginx to 4.14.3 #37

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jul 13, 2024 •
edited
Loading

This PR contains the following updates:

Package Update Change
ingress-nginx minor 4.10.1 → 4.14.3

Release Notes

kubernetes/ingress-nginx (ingress-nginx)

v4.14.3

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.14.3
  • Update Ingress-Nginx version controller-v1.14.3

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.14.2...helm-chart-4.14.3

v4.14.2

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.14.2
  • Update Ingress-Nginx version controller-v1.14.2

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.14.1...helm-chart-4.14.2

v4.14.1

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.14.1
  • Update Ingress-Nginx version controller-v1.14.1

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.14.0...helm-chart-4.14.1

v4.14.0

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.14.0
  • Update Ingress-Nginx version controller-v1.14.0

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.3...helm-chart-4.14.0

v4.13.7

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.7
  • Update Ingress-Nginx version controller-v1.13.7

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.6...helm-chart-4.13.7

v4.13.6

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.6
  • Update Ingress-Nginx version controller-v1.13.6

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.5...helm-chart-4.13.6

v4.13.5

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.5
  • Update Ingress-Nginx version controller-v1.13.5

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.4...helm-chart-4.13.5

v4.13.4

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.4
  • Update Ingress-Nginx version controller-v1.13.4

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.3...helm-chart-4.13.4

v4.13.3

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.3
  • Update Ingress-Nginx version controller-v1.13.3

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.2...helm-chart-4.13.3

v4.13.2

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.2
  • Update Ingress-Nginx version controller-v1.13.2

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.1...helm-chart-4.13.2

v4.13.1

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.1
  • Make: Add helm-test target. (#​13659)
  • Update Ingress-Nginx version controller-v1.13.1

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.0...helm-chart-4.13.1

v4.13.0

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.0
  • Update Ingress-Nginx version controller-v1.13.0

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.0...helm-chart-4.13.0

v4.12.8

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.8
  • Update Ingress-Nginx version controller-v1.12.8

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.7...helm-chart-4.12.8

v4.12.7

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.7
  • Update Ingress-Nginx version controller-v1.12.7

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.7...helm-chart-4.12.7

v4.12.6

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.6
  • Update Ingress-Nginx version controller-v1.12.6

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.5...helm-chart-4.12.6

v4.12.5

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.5
  • Make: Add helm-test target. (#​13660)
  • Update Ingress-Nginx version controller-v1.12.5

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.4...helm-chart-4.12.5

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

github-actions bot commented Jul 13, 2024 •
edited
Loading 

--- kubernetes/apps/network/ingress-nginx/internal Kustomization: flux-system/ingress-nginx-internal HelmRelease: network/ingress-nginx-internal

+++ kubernetes/apps/network/ingress-nginx/internal Kustomization: flux-system/ingress-nginx-internal HelmRelease: network/ingress-nginx-internal

@@ -13,13 +13,13 @@

     spec:
       chart: ingress-nginx
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
         namespace: flux-system
-      version: 4.10.1
+      version: 4.14.3
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true
--- kubernetes/apps/network/ingress-nginx/external Kustomization: flux-system/ingress-nginx-external HelmRelease: network/ingress-nginx-external

+++ kubernetes/apps/network/ingress-nginx/external Kustomization: flux-system/ingress-nginx-external HelmRelease: network/ingress-nginx-external

@@ -13,13 +13,13 @@

     spec:
       chart: ingress-nginx
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
         namespace: flux-system
-      version: 4.10.1
+      version: 4.14.3
   dependsOn:
   - name: cloudflared
     namespace: network
   install:
     remediation:
       retries: 3

@github-actions
Copy link

github-actions bot commented Jul 13, 2024 •
edited
Loading 

--- HelmRelease: network/ingress-nginx-external ConfigMap: network/ingress-nginx-external-controller

+++ HelmRelease: network/ingress-nginx-external ConfigMap: network/ingress-nginx-external-controller

@@ -8,13 +8,12 @@

     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
   name: ingress-nginx-external-controller
   namespace: network
 data:
-  allow-snippet-annotations: 'false'
   client-body-buffer-size: 100M
   client-body-timeout: '120'
   client-header-timeout: '120'
   enable-brotli: 'true'
   enable-real-ip: 'true'
   hsts-max-age: '3.14496e+07'
--- HelmRelease: network/ingress-nginx-external Deployment: network/ingress-nginx-external-controller

+++ HelmRelease: network/ingress-nginx-external Deployment: network/ingress-nginx-external-controller

@@ -28,13 +28,13 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: controller
     spec:
       dnsPolicy: ClusterFirst
       containers:
       - name: controller
-        image: registry.k8s.io/ingress-nginx/controller:v1.10.1@sha256:e24f39d3eed6bcc239a56f20098878845f62baa34b9f2be2fd2c38ce9fb0f29e
+        image: registry.k8s.io/ingress-nginx/controller:v1.14.3@sha256:82917be97c0939f6ada1717bb39aa7e66c229d6cfb10dcfc8f1bd42f9efe0f81
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
               command:
               - /wait-shutdown
@@ -45,16 +45,18 @@

         - --controller-class=k8s.io/external
         - --ingress-class=nginx
         - --configmap=$(POD_NAMESPACE)/ingress-nginx-external-controller
         - --validating-webhook=:8443
         - --validating-webhook-certificate=/usr/local/certificates/cert
         - --validating-webhook-key=/usr/local/certificates/key
+        - --enable-metrics=true
         - --default-ssl-certificate=network/-.PLACEHOLDER_SECRET_DOMAIN..-production-tls
         securityContext:
           runAsNonRoot: true
           runAsUser: 101
+          runAsGroup: 82
           allowPrivilegeEscalation: false
           seccompProfile:
             type: RuntimeDefault
           capabilities:
             drop:
             - ALL
@@ -124,12 +126,13 @@

             app.kubernetes.io/instance: ingress-nginx-external
             app.kubernetes.io/name: ingress-nginx
         maxSkew: 1
         topologyKey: kubernetes.io/hostname
         whenUnsatisfiable: DoNotSchedule
       serviceAccountName: ingress-nginx-external
+      automountServiceAccountToken: true
       terminationGracePeriodSeconds: 300
       volumes:
       - name: webhook-cert
         secret:
           secretName: ingress-nginx-external-admission
 
--- HelmRelease: network/ingress-nginx-external ValidatingWebhookConfiguration: network/ingress-nginx-external-admission

+++ HelmRelease: network/ingress-nginx-external ValidatingWebhookConfiguration: network/ingress-nginx-external-admission

@@ -27,12 +27,13 @@

   admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: ingress-nginx-external-controller-admission
       namespace: network
+      port: 443
       path: /networking/v1/ingresses
   objectSelector:
     matchExpressions:
     - key: ingress-class
       operator: In
       values:
--- HelmRelease: network/ingress-nginx-external ServiceMonitor: network/ingress-nginx-external-controller

+++ HelmRelease: network/ingress-nginx-external ServiceMonitor: network/ingress-nginx-external-controller

@@ -8,17 +8,17 @@

     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx-external
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
 spec:
-  endpoints:
-  - port: metrics
-    interval: 30s
   namespaceSelector:
     any: true
   selector:
     matchLabels:
       app.kubernetes.io/name: ingress-nginx
       app.kubernetes.io/instance: ingress-nginx-external
       app.kubernetes.io/component: controller
+  endpoints:
+  - port: metrics
+    interval: 30s
 
--- HelmRelease: network/ingress-nginx-external ServiceAccount: network/ingress-nginx-external-admission

+++ HelmRelease: network/ingress-nginx-external ServiceAccount: network/ingress-nginx-external-admission

@@ -10,7 +10,8 @@

   labels:
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx-external
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: admission-webhook
+automountServiceAccountToken: true
 
--- HelmRelease: network/ingress-nginx-external Job: network/ingress-nginx-external-admission-create

+++ HelmRelease: network/ingress-nginx-external Job: network/ingress-nginx-external-admission-create

@@ -11,25 +11,26 @@

     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx-external
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: admission-webhook
 spec:
+  ttlSecondsAfterFinished: 0
   template:
     metadata:
       name: ingress-nginx-external-admission-create
       labels:
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/instance: ingress-nginx-external
         app.kubernetes.io/part-of: ingress-nginx
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: admission-webhook
     spec:
       containers:
       - name: create
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.1@sha256:36d05b4077fb8e3d13663702fa337f124675ba8667cbd949c03a8e8ea6fa4366
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.7@sha256:7c74a715af2c94cb734785b4d3ea1357b4f02b88e1e123c622a9cb68b62f669c
         imagePullPolicy: IfNotPresent
         args:
         - create
         - --host=ingress-nginx-external-controller-admission,ingress-nginx-external-controller-admission.$(POD_NAMESPACE).svc
         - --namespace=$(POD_NAMESPACE)
         - --secret-name=ingress-nginx-external-admission
@@ -41,15 +42,17 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       restartPolicy: OnFailure
       serviceAccountName: ingress-nginx-external-admission
+      automountServiceAccountToken: true
       nodeSelector:
         kubernetes.io/os: linux
 
--- HelmRelease: network/ingress-nginx-external Job: network/ingress-nginx-external-admission-patch

+++ HelmRelease: network/ingress-nginx-external Job: network/ingress-nginx-external-admission-patch

@@ -11,25 +11,26 @@

     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx-external
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: admission-webhook
 spec:
+  ttlSecondsAfterFinished: 0
   template:
     metadata:
       name: ingress-nginx-external-admission-patch
       labels:
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/instance: ingress-nginx-external
         app.kubernetes.io/part-of: ingress-nginx
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: admission-webhook
     spec:
       containers:
       - name: patch
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.1@sha256:36d05b4077fb8e3d13663702fa337f124675ba8667cbd949c03a8e8ea6fa4366
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.7@sha256:7c74a715af2c94cb734785b4d3ea1357b4f02b88e1e123c622a9cb68b62f669c
         imagePullPolicy: IfNotPresent
         args:
         - patch
         - --webhook-name=ingress-nginx-external-admission
         - --namespace=$(POD_NAMESPACE)
         - --patch-mutating=false
@@ -43,15 +44,17 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       restartPolicy: OnFailure
       serviceAccountName: ingress-nginx-external-admission
+      automountServiceAccountToken: true
       nodeSelector:
         kubernetes.io/os: linux
 
--- HelmRelease: network/ingress-nginx-internal ConfigMap: network/ingress-nginx-internal-controller

+++ HelmRelease: network/ingress-nginx-internal ConfigMap: network/ingress-nginx-internal-controller

@@ -8,13 +8,12 @@

     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
   name: ingress-nginx-internal-controller
   namespace: network
 data:
-  allow-snippet-annotations: 'false'
   client-body-buffer-size: 100M
   client-body-timeout: '120'
   client-header-timeout: '120'
   enable-brotli: 'true'
   enable-real-ip: 'true'
   hsts-max-age: '3.14496e+07'
--- HelmRelease: network/ingress-nginx-internal Deployment: network/ingress-nginx-internal-controller

+++ HelmRelease: network/ingress-nginx-internal Deployment: network/ingress-nginx-internal-controller

@@ -28,13 +28,13 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: controller
     spec:
       dnsPolicy: ClusterFirst
       containers:
       - name: controller
-        image: registry.k8s.io/ingress-nginx/controller:v1.10.1@sha256:e24f39d3eed6bcc239a56f20098878845f62baa34b9f2be2fd2c38ce9fb0f29e
+        image: registry.k8s.io/ingress-nginx/controller:v1.14.3@sha256:82917be97c0939f6ada1717bb39aa7e66c229d6cfb10dcfc8f1bd42f9efe0f81
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
               command:
               - /wait-shutdown
@@ -45,16 +45,18 @@

         - --controller-class=k8s.io/internal
         - --ingress-class=nginx
         - --configmap=$(POD_NAMESPACE)/ingress-nginx-internal-controller
         - --validating-webhook=:8443
         - --validating-webhook-certificate=/usr/local/certificates/cert
         - --validating-webhook-key=/usr/local/certificates/key
+        - --enable-metrics=true
         - --default-ssl-certificate=network/-.PLACEHOLDER_SECRET_DOMAIN..-production-tls
         securityContext:
           runAsNonRoot: true
           runAsUser: 101
+          runAsGroup: 82
           allowPrivilegeEscalation: false
           seccompProfile:
             type: RuntimeDefault
           capabilities:
             drop:
             - ALL
@@ -124,12 +126,13 @@

             app.kubernetes.io/instance: ingress-nginx-internal
             app.kubernetes.io/name: ingress-nginx
         maxSkew: 1
         topologyKey: kubernetes.io/hostname
         whenUnsatisfiable: DoNotSchedule
       serviceAccountName: ingress-nginx-internal
+      automountServiceAccountToken: true
       terminationGracePeriodSeconds: 300
       volumes:
       - name: webhook-cert
         secret:
           secretName: ingress-nginx-internal-admission
 
--- HelmRelease: network/ingress-nginx-internal ValidatingWebhookConfiguration: network/ingress-nginx-internal-admission

+++ HelmRelease: network/ingress-nginx-internal ValidatingWebhookConfiguration: network/ingress-nginx-internal-admission

@@ -27,12 +27,13 @@

   admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: ingress-nginx-internal-controller-admission
       namespace: network
+      port: 443
       path: /networking/v1/ingresses
   objectSelector:
     matchExpressions:
     - key: ingress-class
       operator: In
       values:
--- HelmRelease: network/ingress-nginx-internal ServiceMonitor: network/ingress-nginx-internal-controller

+++ HelmRelease: network/ingress-nginx-internal ServiceMonitor: network/ingress-nginx-internal-controller

@@ -8,17 +8,17 @@

     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx-internal
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
 spec:
-  endpoints:
-  - port: metrics
-    interval: 30s
   namespaceSelector:
     any: true
   selector:
     matchLabels:
       app.kubernetes.io/name: ingress-nginx
       app.kubernetes.io/instance: ingress-nginx-internal
       app.kubernetes.io/component: controller
+  endpoints:
+  - port: metrics
+    interval: 30s
 
--- HelmRelease: network/ingress-nginx-internal ServiceAccount: network/ingress-nginx-internal-admission

+++ HelmRelease: network/ingress-nginx-internal ServiceAccount: network/ingress-nginx-internal-admission

@@ -10,7 +10,8 @@

   labels:
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx-internal
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: admission-webhook
+automountServiceAccountToken: true
 
--- HelmRelease: network/ingress-nginx-internal Job: network/ingress-nginx-internal-admission-create

+++ HelmRelease: network/ingress-nginx-internal Job: network/ingress-nginx-internal-admission-create

@@ -11,25 +11,26 @@

     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx-internal
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: admission-webhook
 spec:
+  ttlSecondsAfterFinished: 0
   template:
     metadata:
       name: ingress-nginx-internal-admission-create
       labels:
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/instance: ingress-nginx-internal
         app.kubernetes.io/part-of: ingress-nginx
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: admission-webhook
     spec:
       containers:
       - name: create
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.1@sha256:36d05b4077fb8e3d13663702fa337f124675ba8667cbd949c03a8e8ea6fa4366
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.7@sha256:7c74a715af2c94cb734785b4d3ea1357b4f02b88e1e123c622a9cb68b62f669c
         imagePullPolicy: IfNotPresent
         args:
         - create
         - --host=ingress-nginx-internal-controller-admission,ingress-nginx-internal-controller-admission.$(POD_NAMESPACE).svc
         - --namespace=$(POD_NAMESPACE)
         - --secret-name=ingress-nginx-internal-admission
@@ -41,15 +42,17 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       restartPolicy: OnFailure
       serviceAccountName: ingress-nginx-internal-admission
+      automountServiceAccountToken: true
       nodeSelector:
         kubernetes.io/os: linux
 
--- HelmRelease: network/ingress-nginx-internal Job: network/ingress-nginx-internal-admission-patch

+++ HelmRelease: network/ingress-nginx-internal Job: network/ingress-nginx-internal-admission-patch

@@ -11,25 +11,26 @@

     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx-internal
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: admission-webhook
 spec:
+  ttlSecondsAfterFinished: 0
   template:
     metadata:
       name: ingress-nginx-internal-admission-patch
       labels:
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/instance: ingress-nginx-internal
         app.kubernetes.io/part-of: ingress-nginx
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: admission-webhook
     spec:
       containers:
       - name: patch
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.1@sha256:36d05b4077fb8e3d13663702fa337f124675ba8667cbd949c03a8e8ea6fa4366
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.7@sha256:7c74a715af2c94cb734785b4d3ea1357b4f02b88e1e123c622a9cb68b62f669c
         imagePullPolicy: IfNotPresent
         args:
         - patch
         - --webhook-name=ingress-nginx-internal-admission
         - --namespace=$(POD_NAMESPACE)
         - --patch-mutating=false
@@ -43,15 +44,17 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       restartPolicy: OnFailure
       serviceAccountName: ingress-nginx-internal-admission
+      automountServiceAccountToken: true
       nodeSelector:
         kubernetes.io/os: linux

@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.11.0 feat(helm): update chart ingress-nginx to 4.11.1 Jul 18, 2024
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 9444837 to 6eda014 Compare July 18, 2024 20:53
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 6eda014 to 1ce99fd Compare August 16, 2024 07:40
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.11.1 feat(helm): update chart ingress-nginx to 4.11.2 Aug 16, 2024
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.11.2 feat(helm): update chart ingress-nginx to 4.11.3 Oct 9, 2024
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 1ce99fd to 4a495e3 Compare October 9, 2024 11:11
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.11.3 feat(helm): update chart ingress-nginx to 4.12.0 Dec 30, 2024
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 4a495e3 to e18611f Compare December 30, 2024 19:54
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from e18611f to 11fcac6 Compare March 25, 2025 04:00
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.12.0 feat(helm): update chart ingress-nginx to 4.12.1 Mar 25, 2025
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 11fcac6 to 88eb51b Compare April 30, 2025 13:35
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.12.1 feat(helm): update chart ingress-nginx to 4.12.2 Apr 30, 2025
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 88eb51b to c51ab2d Compare June 5, 2025 05:54
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.12.2 feat(helm): update chart ingress-nginx to 4.12.3 Jun 5, 2025
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from c51ab2d to 39d1bd8 Compare July 7, 2025 22:53
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.12.3 feat(helm): update chart ingress-nginx to 4.13.0 Jul 7, 2025
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.13.0 feat(helm): update chart ingress-nginx to 4.13.1 Aug 12, 2025
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 39d1bd8 to a405af1 Compare August 12, 2025 14:12
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from a405af1 to b2d994c Compare August 31, 2025 10:51
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.13.1 feat(helm): update chart ingress-nginx to 4.13.2 Aug 31, 2025
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from b2d994c to 761e44e Compare September 30, 2025 15:11
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.13.2 feat(helm): update chart ingress-nginx to 4.13.3 Sep 30, 2025
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 761e44e to ebef4fd Compare November 3, 2025 17:50
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.13.3 feat(helm): update chart ingress-nginx to 4.14.0 Nov 3, 2025
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from ebef4fd to 67db612 Compare December 5, 2025 14:11
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.14.0 feat(helm): update chart ingress-nginx to 4.14.1 Dec 5, 2025
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 67db612 to 1861c4e Compare January 26, 2026 22:06
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.14.1 feat(helm): update chart ingress-nginx to 4.14.2 Jan 26, 2026
@renovate renovate bot force-pushed the renovate/ingress-nginx-4.x branch from 1861c4e to 719f1e6 Compare February 3, 2026 02:41
@renovate renovate bot changed the title feat(helm): update chart ingress-nginx to 4.14.2 feat(helm): update chart ingress-nginx to 4.14.3 Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/bootstrap area/kubernetes renovate/helm type/minor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants