Release 2.1.0 (#220)

nginxinc · Dec 20, 2023 · 0e84bbd · 0e84bbd
1 parent 85ac631
commit 0e84bbd
Show file tree

Hide file tree

Showing 1,103 changed files with 5,777 additions and 3,816 deletions.
diff --git a/Makefile b/Makefile
@@ -3,7 +3,7 @@
 # To re-generate a bundle for another specific version without changing the standard setup, you can:
 # - use the VERSION as arg of the bundle target (e.g make bundle VERSION=0.0.2)
 # - use environment variables to overwrite this value (e.g export VERSION=0.0.2)
-VERSION ?= 2.0.2
+VERSION ?= 2.1.0
 
 # CHANNELS define the bundle channels used in the bundle.
 # Add a new line here if you would like to change its default config. (E.g CHANNELS = "candidate,fast,stable")

diff --git a/README.md b/README.md
@@ -17,6 +17,7 @@ The following table shows the relation between the versions of the two projects:
 
 | NGINX Ingress Controller | NGINX Ingress Operator |
 | ------------------------ | ---------------------- |
+| 3.4.x                    | 2.1.0                  |
 | 3.3.x                    | 2.0.2                  |
 | 3.2.x                    | 1.5.2                  |
 | 3.1.x                    | 1.4.2                  |
@@ -72,7 +73,7 @@ See [upgrade docs](./docs/upgrades.md)
 
 We publish NGINX Ingress Operator releases on GitHub. See our [releases page](https://github.com/nginxinc/nginx-ingress-helm-operator/releases).
 
-The latest stable release is [2.0.2](https://github.com/nginxinc/nginx-ingress-helm-operator/releases/tag/v2.0.2). For production use, we recommend that you choose the latest stable release.
+The latest stable release is [2.1.0](https://github.com/nginxinc/nginx-ingress-helm-operator/releases/tag/v2.1.0). For production use, we recommend that you choose the latest stable release.
 
 ## Development
 

diff --git a/bundle/manifests/nginx-ingress-operator.clusterserviceversion.yaml b/bundle/manifests/nginx-ingress-operator.clusterserviceversion.yaml
@@ -26,6 +26,7 @@ metadata:
               },
               "autoscaling": {
                 "annotations": {},
+                "behavior": {},
                 "enabled": false,
                 "maxReplicas": 3,
                 "minReplicas": 1,
@@ -42,6 +43,8 @@ metadata:
               },
               "customConfigMap": "",
               "customPorts": [],
+              "defaultHTTPListenerPort": 80,
+              "defaultHTTPSListenerPort": 443,
               "defaultTLS": {
                 "cert": "",
                 "key": "",
@@ -54,7 +57,7 @@ metadata:
               "enableExternalDNS": false,
               "enableLatencyMetrics": false,
               "enableOIDC": false,
-              "enablePreviewPolicies": false,
+              "enableSSLDynamicReload": true,
               "enableSnippets": false,
               "enableTLSPassthrough": false,
               "env": [],
@@ -82,6 +85,12 @@ metadata:
                 "name": "nginx",
                 "setAsDefaultIngress": false
               },
+              "initContainerResources": {
+                "requests": {
+                  "cpu": "100m",
+                  "memory": "128Mi"
+                }
+              },
               "initContainers": [],
               "kind": "deployment",
               "lifecycle": {},
@@ -115,7 +124,8 @@ metadata:
                 "annotations": {},
                 "enable": true,
                 "enableLeaderElection": true,
-                "ingressLink": ""
+                "ingressLink": "",
+                "leaderElectionLockName": "nginx-ingress-leader"
               },
               "resources": {
                 "requests": {
@@ -148,8 +158,10 @@ metadata:
               },
               "serviceAccount": {
                 "annotations": {},
-                "imagePullSecretName": ""
+                "imagePullSecretName": "",
+                "imagePullSecretsNames": []
               },
+              "shareProcessNamespace": false,
               "strategy": {},
               "terminationGracePeriodSeconds": 30,
               "tlsPassthroughPort": 443,
@@ -208,8 +220,8 @@ metadata:
     capabilities: Basic Install
     categories: Monitoring, Networking
     certified: "true"
-    containerImage: quay.io/nginx/nginx-ingress-operator:2.0.2
-    createdAt: "2023-12-20T03:21:37Z"
+    containerImage: quay.io/nginx/nginx-ingress-operator:2.1.0
+    createdAt: "2023-12-20T11:49:38Z"
     description: The NGINX Ingress Operator is a Kubernetes/OpenShift component which
       deploys and manages one or more NGINX/NGINX Plus Ingress Controllers
     operatorframework.io/suggested-namespace: nginx-ingress
@@ -222,7 +234,7 @@ metadata:
     operatorframework.io/arch.arm64: supported
     operatorframework.io/arch.ppc64le: supported
     operatorframework.io/arch.s390x: supported
-  name: nginx-ingress-operator.v2.0.2
+  name: nginx-ingress-operator.v2.1.0
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -426,7 +438,7 @@ spec:
                 - --metrics-bind-address=127.0.0.1:8080
                 - --leader-elect
                 - --leader-election-id=nginx-ingress-operator
-                image: quay.io/nginx/nginx-ingress-operator:2.0.2
+                image: quay.io/nginx/nginx-ingress-operator:2.1.0
                 livenessProbe:
                   httpGet:
                     path: /healthz
@@ -517,4 +529,4 @@ spec:
   minKubeVersion: 1.22.0
   provider:
     name: NGINX Inc
-  version: 2.0.2
+  version: 2.1.0
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
@@ -5,4 +5,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: quay.io/nginx/nginx-ingress-operator
-  newTag: 2.0.2
+  newTag: 2.1.0
diff --git a/config/manifests/bases/nginx-ingress-operator.clusterserviceversion.yaml b/config/manifests/bases/nginx-ingress-operator.clusterserviceversion.yaml
@@ -6,7 +6,7 @@ metadata:
     capabilities: Basic Install
     categories: Monitoring, Networking
     certified: "true"
-    containerImage: quay.io/nginx/nginx-ingress-operator:2.0.2
+    containerImage: quay.io/nginx/nginx-ingress-operator:2.1.0
     createdAt: placeholder
     description: The NGINX Ingress Operator is a Kubernetes/OpenShift component which
       deploys and manages one or more NGINX/NGINX Plus Ingress Controllers
@@ -175,7 +175,7 @@ spec:
                 - --metrics-bind-address=127.0.0.1:8080
                 - --leader-elect
                 - --leader-election-id=nginx-ingress-operator
-                image: quay.io/nginx/nginx-ingress-operator:2.0.2
+                image: quay.io/nginx/nginx-ingress-operator:2.1.0
                 livenessProbe:
                   httpGet:
                     path: /healthz
@@ -281,4 +281,4 @@ spec:
   minKubeVersion: 1.22.0
   provider:
     name: NGINX Inc
-  version: 2.0.2
+  version: 2.1.0
diff --git a/config/samples/charts_v1alpha1_nginxingress.yaml b/config/samples/charts_v1alpha1_nginxingress.yaml
@@ -30,6 +30,7 @@ spec:
       https: 443
     dnsPolicy: ClusterFirst
     nginxDebug: false
+    shareProcessNamespace: false
     logLevel: 1
     customPorts: []
     image:
@@ -60,13 +61,21 @@ spec:
       maxReplicas: 3
       targetCPUUtilizationPercentage: 50
       targetMemoryUtilizationPercentage: 50
+      behavior: {}
     resources:
       requests:
         cpu: 100m
         memory: 128Mi
-    # limits:
-    #   cpu: 1
-    #   memory: 1Gi
+      # limits:
+      #   cpu: 1
+      #   memory: 1Gi
+    initContainerResources:
+      requests:
+        cpu: 100m
+        memory: 128Mi
+      # limits:
+      #   cpu: 1
+      #   memory: 1Gi
     tolerations: []
     affinity: {}
     # topologySpreadConstraints: {}
@@ -105,7 +114,6 @@ spec:
     watchNamespaceLabel: ""
     watchSecretNamespace: ""
     enableCustomResources: true
-    enablePreviewPolicies: false
     enableOIDC: false
     includeYear: false
     enableTLSPassthrough: false
@@ -158,12 +166,13 @@ spec:
       annotations: {}
       # name: nginx-ingress
       imagePullSecretName: ""
+      imagePullSecretsNames: []
     reportIngressStatus:
       enable: true
       # externalService: nginx-ingress
       ingressLink: ""
       enableLeaderElection: true
-      # leaderElectionLockName: "nginx-ingress-leader-election"
+      leaderElectionLockName: "nginx-ingress-leader"
       annotations: {}
     pod:
       annotations: {}
@@ -175,7 +184,10 @@ spec:
       initialDelaySeconds: 0
     enableLatencyMetrics: false
     disableIPV6: false
+    defaultHTTPListenerPort: 80
+    defaultHTTPSListenerPort: 443
     readOnlyRootFilesystem: false
+    enableSSLDynamicReload: true
   rbac:
     create: true
   prometheus:

diff --git a/docs/manual-installation.md b/docs/manual-installation.md
@@ -7,20 +7,14 @@ This will deploy the operator in the `nginx-ingress-operator-system` namespace.
    1. Clone the `nginx-ingress-operator` repo:
 
    ```shell
-   git clone https://github.com/nginxinc/nginx-ingress-helm-operator/ --branch v2.0.2
+   git clone https://github.com/nginxinc/nginx-ingress-helm-operator/ --branch v2.1.0
    cd nginx-ingress-helm-operator/
    ```
 
-   2. `OpenShift` To deploy the Operator and associated resources to an OpenShift environment, run:
+   2. To deploy the Operator and associated resources to all environments, run:
 
    ```shell
-   make deploy IMG=nginx/nginx-ingress-operator:2.0.2
-   ```
-
-   3. Alternatively, to deploy the Operator and associated resources to all other environments:
-
-   ```shell
-   make deploy IMG=nginx/nginx-ingress-operator:2.0.2
+   make deploy IMG=nginx/nginx-ingress-operator:2.1.0
    ```
 
 2. Check that the Operator is running:
@@ -36,10 +30,10 @@ This will deploy the operator in the `nginx-ingress-operator-system` namespace.
 
 In order to deploy NGINX Ingress Controller instances into OpenShift environments, a new SCC is required to be created on the cluster which will be used to bind the specific required capabilities to the NGINX Ingress service account(s). To do so for NIC deployments, please run the following command (assuming you are logged in with administrator access to the cluster):
 
-`kubectl apply -f https://raw.githubusercontent.com/nginxinc/nginx-ingress-helm-operator/v2.0.2/resources/scc.yaml`
+`kubectl apply -f https://raw.githubusercontent.com/nginxinc/nginx-ingress-helm-operator/v2.1.0/resources/scc.yaml`
 
 Alternatively, to create an SCC for NIC daemonsets, please run this command:
 
-`kubectl apply -f https://raw.githubusercontent.com/nginxinc/nginx-ingress-helm-operator/v2.0.2/resources/scc-daemonset.yaml`
+`kubectl apply -f https://raw.githubusercontent.com/nginxinc/nginx-ingress-helm-operator/v2.1.0/resources/scc-daemonset.yaml`
 
 You can now deploy the NGINX Ingress Controller instances.
diff --git a/docs/nginx-ingress-controller.md b/docs/nginx-ingress-controller.md
@@ -42,6 +42,7 @@ spec:
       https: 443
     dnsPolicy: ClusterFirst
     nginxDebug: false
+    shareProcessNamespace: false
     logLevel: 1
     customPorts: []
     image:
@@ -72,13 +73,21 @@ spec:
       maxReplicas: 3
       targetCPUUtilizationPercentage: 50
       targetMemoryUtilizationPercentage: 50
+      behavior: {}
     resources:
       requests:
         cpu: 100m
         memory: 128Mi
-    # limits:
-    #   cpu: 1
-    #   memory: 1Gi
+      # limits:
+      #   cpu: 1
+      #   memory: 1Gi
+    initContainerResources:
+      requests:
+        cpu: 100m
+        memory: 128Mi
+      # limits:
+      #   cpu: 1
+      #   memory: 1Gi
     tolerations: []
     affinity: {}
     # topologySpreadConstraints: {}
@@ -117,7 +126,6 @@ spec:
     watchNamespaceLabel: ""
     watchSecretNamespace: ""
     enableCustomResources: true
-    enablePreviewPolicies: false
     enableOIDC: false
     includeYear: false
     enableTLSPassthrough: false
@@ -170,12 +178,13 @@ spec:
       annotations: {}
       # name: nginx-ingress
       imagePullSecretName: ""
+      imagePullSecretsNames: []
     reportIngressStatus:
       enable: true
       # externalService: nginx-ingress
       ingressLink: ""
       enableLeaderElection: true
-      # leaderElectionLockName: "nginx-ingress-leader-election"
+      leaderElectionLockName: "nginx-ingress-leader"
       annotations: {}
     pod:
       annotations: {}
@@ -187,7 +196,10 @@ spec:
       initialDelaySeconds: 0
     enableLatencyMetrics: false
     disableIPV6: false
+    defaultHTTPListenerPort: 80
+    defaultHTTPSListenerPort: 443
     readOnlyRootFilesystem: false
+    enableSSLDynamicReload: true
   rbac:
     create: true
   prometheus:

diff --git a/docs/openshift-installation.md b/docs/openshift-installation.md
@@ -21,10 +21,10 @@ Additional steps:
 
 In order to deploy NGINX Ingress Controller instances into OpenShift environments, a new SCC is required to be created on the cluster which will be used to bind the specific required capabilities to the NGINX Ingress service account(s). To do so for NIC deployments, please run the following command (assuming you are logged in with administrator access to the cluster):
 
-`kubectl apply -f https://raw.githubusercontent.com/nginxinc/nginx-ingress-helm-operator/v2.0.2/resources/scc.yaml`
+`kubectl apply -f https://raw.githubusercontent.com/nginxinc/nginx-ingress-helm-operator/v2.1.0/resources/scc.yaml`
 
 Alternatively, to create an SCC for NIC daemonsets, please run this command:
 
-`kubectl apply -f https://raw.githubusercontent.com/nginxinc/nginx-ingress-helm-operator/v2.0.2/resources/scc-daemonset.yaml`
+`kubectl apply -f https://raw.githubusercontent.com/nginxinc/nginx-ingress-helm-operator/v2.1.0/resources/scc-daemonset.yaml`
 
 You can now deploy the NGINX Ingress Controller instances.