feat(helm): update chart ingress-nginx to v4.13.3 #5189

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

renovate wants to merge 1 commit into main from renovate/cluster-0-ingress-nginx-4.x

Contributor

renovate bot commented Mar 2, 2024 •

edited

Loading

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Update	Change
ingress-nginx	minor	`4.9.0` -> `4.13.3`
ingress-nginx	minor	`4.11.3` -> `4.13.3`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

kubernetes/ingress-nginx (ingress-nginx)

`v4.13.3`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.3

Update Ingress-Nginx version controller-v1.13.3

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.2...helm-chart-4.13.3

`v4.13.2`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.2

Update Ingress-Nginx version controller-v1.13.2

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.1...helm-chart-4.13.2

`v4.13.1`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.1

Make: Add helm-test target. (#13659)
Update Ingress-Nginx version controller-v1.13.1

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.13.0...helm-chart-4.13.1

`v4.13.0`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.13.0

Update Ingress-Nginx version controller-v1.13.0

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.0...helm-chart-4.13.0

`v4.12.7`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.7

Update Ingress-Nginx version controller-v1.12.7

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.7...helm-chart-4.12.7

`v4.12.6`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.6

Update Ingress-Nginx version controller-v1.12.6

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.5...helm-chart-4.12.6

`v4.12.5`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.5

Make: Add helm-test target. (#13660)
Update Ingress-Nginx version controller-v1.12.5

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.4...helm-chart-4.12.5

`v4.12.4`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.4

Update Ingress-Nginx version controller-v1.12.4

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.3...helm-chart-4.12.4

`v4.12.3`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.3

Update Ingress-Nginx version controller-v1.12.3

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.2...helm-chart-4.12.3

`v4.12.2`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.2

Update Ingress-Nginx version controller-v1.12.2

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.12.1...helm-chart-4.12.2

`v4.11.8`

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.11.8

Update Ingress-Nginx version controller-v1.11.8

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.11.7...helm-chart-4.11.8

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added renovate/helm type/minor labels

carpenike-bot bot added area/kubernetes cluster/main labels

Contributor

carpenike-bot bot commented Mar 2, 2024 •

edited

Loading

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
❌ COPYPASTE	jscpd	yes		2	no	1.43s
✅ REPOSITORY	git_diff	yes		no	no	0.04s
✅ REPOSITORY	secretlint	yes		no	no	3.9s
✅ YAML	prettier	3		0	0	0.54s
✅ YAML	yamllint	3		0	0	0.71s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Contributor

carpenike-bot bot commented Mar 2, 2024 •

edited

Loading

--- kubernetes/cluster-0/apps/network/ingress-nginx/external Kustomization: flux-system/nginx-external HelmRelease: network/nginx-external

+++ kubernetes/cluster-0/apps/network/ingress-nginx/external Kustomization: flux-system/nginx-external HelmRelease: network/nginx-external

@@ -14,13 +14,13 @@

       chart: ingress-nginx
       interval: 30m
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
         namespace: flux-system
-      version: 4.11.3
+      version: 4.12.1
   interval: 30m
   values:
     controller:
       admissionWebhooks:
         objectSelector:
           matchExpressions:
--- kubernetes/cluster-0/apps/network/ingress-nginx/internal Kustomization: flux-system/nginx-internal HelmRelease: network/nginx-internal

+++ kubernetes/cluster-0/apps/network/ingress-nginx/internal Kustomization: flux-system/nginx-internal HelmRelease: network/nginx-internal

@@ -14,13 +14,13 @@

       chart: ingress-nginx
       interval: 30m
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
         namespace: flux-system
-      version: 4.11.3
+      version: 4.12.1
   interval: 30m
   values:
     controller:
       admissionWebhooks:
         objectSelector:
           matchExpressions:

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch 2 times, most recently from b03e34f to 1a637e5 Compare

March 2, 2024 17:42

Contributor

carpenike-bot bot commented Mar 2, 2024 •

edited

Loading

--- HelmRelease: network/nginx-external Deployment: network/nginx-external-controller

+++ HelmRelease: network/nginx-external Deployment: network/nginx-external-controller

@@ -30,34 +30,35 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: controller
     spec:
       dnsPolicy: ClusterFirst
       containers:
       - name: controller
-        image: registry.k8s.io/ingress-nginx/controller:v1.11.3@sha256:d56f135b6462cfc476447cfe564b83a45e8bb7da2774963b00d12161112270b7
+        image: registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
               command:
               - /wait-shutdown
         args:
         - /nginx-ingress-controller
-        - --enable-annotation-validation=true
         - --publish-service=$(POD_NAMESPACE)/nginx-external-controller
         - --election-id=nginx-external-leader
         - --controller-class=k8s.io/ingress-nginx-external
         - --ingress-class=nginx
         - --configmap=$(POD_NAMESPACE)/nginx-external-controller
         - --validating-webhook=:8443
         - --validating-webhook-certificate=/usr/local/certificates/cert
         - --validating-webhook-key=/usr/local/certificates/key
+        - --enable-metrics=true
         - --default-ssl-certificate=network/holthome-net-tls
         securityContext:
           runAsNonRoot: true
           runAsUser: 101
+          runAsGroup: 82
           allowPrivilegeEscalation: false
           seccompProfile:
             type: RuntimeDefault
           capabilities:
             drop:
             - ALL
--- HelmRelease: network/nginx-external ServiceMonitor: network/nginx-external-controller

+++ HelmRelease: network/nginx-external ServiceMonitor: network/nginx-external-controller

@@ -8,17 +8,17 @@

     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: nginx-external
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
 spec:
-  endpoints:
-  - port: metrics
-    interval: 30s
   namespaceSelector:
     any: true
   selector:
     matchLabels:
       app.kubernetes.io/name: ingress-nginx
       app.kubernetes.io/instance: nginx-external
       app.kubernetes.io/component: controller
+  endpoints:
+  - port: metrics
+    interval: 30s
 
--- HelmRelease: network/nginx-external Job: network/nginx-external-admission-create

+++ HelmRelease: network/nginx-external Job: network/nginx-external-admission-create

@@ -23,13 +23,13 @@

         app.kubernetes.io/part-of: ingress-nginx
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: admission-webhook
     spec:
       containers:
       - name: create
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
         imagePullPolicy: IfNotPresent
         args:
         - create
         - --host=nginx-external-controller-admission,nginx-external-controller-admission.$(POD_NAMESPACE).svc
         - --namespace=$(POD_NAMESPACE)
         - --secret-name=nginx-external-admission
@@ -41,12 +41,13 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       restartPolicy: OnFailure
       serviceAccountName: nginx-external-admission
--- HelmRelease: network/nginx-external Job: network/nginx-external-admission-patch

+++ HelmRelease: network/nginx-external Job: network/nginx-external-admission-patch

@@ -23,13 +23,13 @@

         app.kubernetes.io/part-of: ingress-nginx
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: admission-webhook
     spec:
       containers:
       - name: patch
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
         imagePullPolicy: IfNotPresent
         args:
         - patch
         - --webhook-name=nginx-external-admission
         - --namespace=$(POD_NAMESPACE)
         - --patch-mutating=false
@@ -43,12 +43,13 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       restartPolicy: OnFailure
       serviceAccountName: nginx-external-admission
--- HelmRelease: network/nginx-internal Deployment: network/nginx-internal-controller

+++ HelmRelease: network/nginx-internal Deployment: network/nginx-internal-controller

@@ -30,34 +30,35 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: controller
     spec:
       dnsPolicy: ClusterFirst
       containers:
       - name: controller
-        image: registry.k8s.io/ingress-nginx/controller:v1.11.3@sha256:d56f135b6462cfc476447cfe564b83a45e8bb7da2774963b00d12161112270b7
+        image: registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
               command:
               - /wait-shutdown
         args:
         - /nginx-ingress-controller
-        - --enable-annotation-validation=true
         - --publish-service=$(POD_NAMESPACE)/nginx-internal-controller
         - --election-id=nginx-internal-leader
         - --controller-class=k8s.io/ingress-nginx-internal
         - --ingress-class=nginx
         - --configmap=$(POD_NAMESPACE)/nginx-internal-controller
         - --validating-webhook=:8443
         - --validating-webhook-certificate=/usr/local/certificates/cert
         - --validating-webhook-key=/usr/local/certificates/key
+        - --enable-metrics=true
         - --default-ssl-certificate=network/holthome-net-tls
         securityContext:
           runAsNonRoot: true
           runAsUser: 101
+          runAsGroup: 82
           allowPrivilegeEscalation: false
           seccompProfile:
             type: RuntimeDefault
           capabilities:
             drop:
             - ALL
--- HelmRelease: network/nginx-internal ServiceMonitor: network/nginx-internal-controller

+++ HelmRelease: network/nginx-internal ServiceMonitor: network/nginx-internal-controller

@@ -8,17 +8,17 @@

     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: nginx-internal
     app.kubernetes.io/part-of: ingress-nginx
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
 spec:
-  endpoints:
-  - port: metrics
-    interval: 30s
   namespaceSelector:
     any: true
   selector:
     matchLabels:
       app.kubernetes.io/name: ingress-nginx
       app.kubernetes.io/instance: nginx-internal
       app.kubernetes.io/component: controller
+  endpoints:
+  - port: metrics
+    interval: 30s
 
--- HelmRelease: network/nginx-internal Job: network/nginx-internal-admission-create

+++ HelmRelease: network/nginx-internal Job: network/nginx-internal-admission-create

@@ -23,13 +23,13 @@

         app.kubernetes.io/part-of: ingress-nginx
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: admission-webhook
     spec:
       containers:
       - name: create
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
         imagePullPolicy: IfNotPresent
         args:
         - create
         - --host=nginx-internal-controller-admission,nginx-internal-controller-admission.$(POD_NAMESPACE).svc
         - --namespace=$(POD_NAMESPACE)
         - --secret-name=nginx-internal-admission
@@ -41,12 +41,13 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       restartPolicy: OnFailure
       serviceAccountName: nginx-internal-admission
--- HelmRelease: network/nginx-internal Job: network/nginx-internal-admission-patch

+++ HelmRelease: network/nginx-internal Job: network/nginx-internal-admission-patch

@@ -23,13 +23,13 @@

         app.kubernetes.io/part-of: ingress-nginx
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: admission-webhook
     spec:
       containers:
       - name: patch
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2@sha256:e8825994b7a2c7497375a9b945f386506ca6a3eda80b89b74ef2db743f66a5ea
         imagePullPolicy: IfNotPresent
         args:
         - patch
         - --webhook-name=nginx-internal-admission
         - --namespace=$(POD_NAMESPACE)
         - --patch-mutating=false
@@ -43,12 +43,13 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       restartPolicy: OnFailure
       serviceAccountName: nginx-internal-admission

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch 2 times, most recently from d544aa0 to 34c4538 Compare

March 4, 2024 20:55

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 34c4538 to 6b650d5 Compare

April 26, 2024 16:35

renovate bot changed the title ~~feat(helm): update chart ingress-nginx ( 4.9.0 → 4.10.0 )~~ feat(helm): update chart ingress-nginx ( 4.9.0 → 4.10.1 )

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 6b650d5 to b5772f2 Compare

July 8, 2024 21:23

renovate bot changed the title ~~feat(helm): update chart ingress-nginx ( 4.9.0 → 4.10.1 )~~ feat(helm): update chart ingress-nginx ( 4.9.0 → 4.11.0 )

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from b5772f2 to 6503a4b Compare

July 18, 2024 19:49

renovate bot changed the title ~~feat(helm): update chart ingress-nginx ( 4.9.0 → 4.11.0 )~~ feat(helm): update chart ingress-nginx ( 4.9.0 → 4.11.1 )

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 6503a4b to 7db7280 Compare

August 16, 2024 07:28

renovate bot changed the title ~~feat(helm): update chart ingress-nginx ( 4.9.0 → 4.11.1 )~~ feat(helm): update chart ingress-nginx ( 4.9.0 → 4.11.2 )

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 7db7280 to 524874e Compare

October 8, 2024 22:49

renovate bot changed the title ~~feat(helm): update chart ingress-nginx ( 4.9.0 → 4.11.2 )~~ feat(helm): update chart ingress-nginx ( 4.9.0 → 4.11.3 )

renovate bot changed the title ~~feat(helm): update chart ingress-nginx ( 4.9.0 → 4.11.3 )~~ feat(helm): update chart ingress-nginx to v4.12.0

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 524874e to d42dc36 Compare

January 23, 2025 17:26

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from d42dc36 to 1d7c672 Compare

March 25, 2025 02:33

renovate bot changed the title ~~feat(helm): update chart ingress-nginx to v4.12.0~~ feat(helm): update chart ingress-nginx to v4.12.1

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 1d7c672 to 51ded05 Compare

April 30, 2025 12:36

renovate bot changed the title ~~feat(helm): update chart ingress-nginx to v4.12.1~~ feat(helm): update chart ingress-nginx to v4.12.2

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 51ded05 to a65d1f8 Compare

June 5, 2025 06:40

renovate bot changed the title ~~feat(helm): update chart ingress-nginx to v4.12.2~~ feat(helm): update chart ingress-nginx to v4.12.3

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from a65d1f8 to 5e881cb Compare

July 7, 2025 22:10

renovate bot changed the title ~~feat(helm): update chart ingress-nginx to v4.12.3~~ feat(helm): update chart ingress-nginx to v4.13.0

renovate bot changed the title ~~feat(helm): update chart ingress-nginx to v4.13.0~~ feat(helm): update chart ingress-nginx to v4.13.1

renovate bot changed the title ~~feat(helm): update chart ingress-nginx to v4.13.1~~ feat(helm): update chart ingress-nginx to v4.13.2

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 5e881cb to 7d2123b Compare

August 31, 2025 11:16


          feat(helm): update chart ingress-nginx to v4.13.3

0ced77d

| datasource | package       | from   | to     |
| ---------- | ------------- | ------ | ------ |
| helm       | ingress-nginx | 4.9.0  | 4.13.3 |
| helm       | ingress-nginx | 4.11.3 | 4.13.3 |

renovate bot force-pushed the renovate/cluster-0-ingress-nginx-4.x branch from 7d2123b to 0ced77d Compare

September 30, 2025 15:35

renovate bot changed the title ~~feat(helm): update chart ingress-nginx to v4.13.2~~ feat(helm): update chart ingress-nginx to v4.13.3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/kubernetes cluster/main renovate/helm type/minor