Merge pull request #73 from projectsyn/commodore-renovate/ingress-nginx

Update Helm release ingress-nginx to v4.12.2

Author: Ronanc2797

class/defaults.yml

@@ -5,7 +5,7 @@ parameters:
     namespace: syn-ingress-nginx
     release_name: ingress-nginx
     charts:
-      ingress-nginx: '4.11.6'
+      ingress-nginx: '4.12.2'
     chroot: false
     pod_security_admission:
       enabled: false

docs/modules/ROOT/pages/how-tos/upgrade-11.x-to-12.x.adoc

@@ -0,0 +1,12 @@
+= Upgrade from 11.x to 12.x
+
+This guide describes the steps to perform an upgrade of the component from version 11.x to 12.x.
+
+== Introduction
+
+This release removes support for Kubernetes v1.26 and 1.27
+This release adds support for Kubernetes v1.30.0 and v1.31.0
+
+== Step-by-step guide
+
+No steps required if the Kubernetes version is equal or higher than v1.28.

docs/modules/ROOT/partials/nav.adoc

@@ -11,6 +11,7 @@
 * xref:how-tos/upgrade-8.x-to-9.x.adoc[Upgrade 8.x to 9.x]
 * xref:how-tos/upgrade-9.x-to-10.x.adoc[Upgrade 9.x to 10.x]
 * xref:how-tos/upgrade-10.x-to-11.x.adoc[Upgrade 10.x to 11.x]
+* xref:how-tos/upgrade-11.x-to-12.x.adoc[Upgrade 11.x to 12.x]
 * xref:cluster-default-ingress-class.adoc[Cluster Default IngressClass]
 * xref:how-tos/aws.adoc[AWS - Amazon Web Services Load Balancers]
 * xref:how-tos/logformat.adoc[NGINX upstream log format as JSON]

tests/golden/defaults/ingress-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/clusterrole.yaml

@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.11.6
-    helm.sh/chart: ingress-nginx-4.11.6
+    app.kubernetes.io/version: 1.12.2
+    helm.sh/chart: ingress-nginx-4.12.2
   name: ingress-nginx-admission
 rules:
   - apiGroups:

tests/golden/defaults/ingress-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/clusterrolebinding.yaml

@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.11.6
-    helm.sh/chart: ingress-nginx-4.11.6
+    app.kubernetes.io/version: 1.12.2
+    helm.sh/chart: ingress-nginx-4.12.2
   name: ingress-nginx-admission
 roleRef:
   apiGroup: rbac.authorization.k8s.io

tests/golden/defaults/ingress-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml

@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.11.6
-    helm.sh/chart: ingress-nginx-4.11.6
+    app.kubernetes.io/version: 1.12.2
+    helm.sh/chart: ingress-nginx-4.12.2
   name: ingress-nginx-admission-create
   namespace: syn-ingress-nginx
 spec:
@@ -23,8 +23,8 @@ spec:
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.11.6
-        helm.sh/chart: ingress-nginx-4.11.6
+        app.kubernetes.io/version: 1.12.2
+        helm.sh/chart: ingress-nginx-4.12.2
       name: ingress-nginx-admission-create
     spec:
       containers:
@@ -47,6 +47,7 @@ spec:
               drop:
                 - ALL
             readOnlyRootFilesystem: true
+            runAsGroup: 65532
             runAsNonRoot: true
             runAsUser: 65532
             seccompProfile:

tests/golden/defaults/ingress-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/job-patchWebhook.yaml

@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.11.6
-    helm.sh/chart: ingress-nginx-4.11.6
+    app.kubernetes.io/version: 1.12.2
+    helm.sh/chart: ingress-nginx-4.12.2
   name: ingress-nginx-admission-patch
   namespace: syn-ingress-nginx
 spec:
@@ -23,8 +23,8 @@ spec:
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.11.6
-        helm.sh/chart: ingress-nginx-4.11.6
+        app.kubernetes.io/version: 1.12.2
+        helm.sh/chart: ingress-nginx-4.12.2
       name: ingress-nginx-admission-patch
     spec:
       containers:
@@ -49,6 +49,7 @@ spec:
               drop:
                 - ALL
             readOnlyRootFilesystem: true
+            runAsGroup: 65532
             runAsNonRoot: true
             runAsUser: 65532
             seccompProfile:

tests/golden/defaults/ingress-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/role.yaml

@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.11.6
-    helm.sh/chart: ingress-nginx-4.11.6
+    app.kubernetes.io/version: 1.12.2
+    helm.sh/chart: ingress-nginx-4.12.2
   name: ingress-nginx-admission
   namespace: syn-ingress-nginx
 rules:

tests/golden/defaults/ingress-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/rolebinding.yaml

@@ -10,8 +10,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.11.6
-    helm.sh/chart: ingress-nginx-4.11.6
+    app.kubernetes.io/version: 1.12.2
+    helm.sh/chart: ingress-nginx-4.12.2
   name: ingress-nginx-admission
   namespace: syn-ingress-nginx
 roleRef:

tests/golden/defaults/ingress-nginx/ingress-nginx/10_ingress_nginx_helmchart/ingress-nginx/templates/admission-webhooks/job-patch/serviceaccount.yaml

@@ -11,7 +11,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.11.6
-    helm.sh/chart: ingress-nginx-4.11.6
+    app.kubernetes.io/version: 1.12.2
+    helm.sh/chart: ingress-nginx-4.12.2
   name: ingress-nginx-admission
   namespace: syn-ingress-nginx