From f40f60b83c90eb4bccff06307365cad4d1d20992 Mon Sep 17 00:00:00 2001 From: Dalton Hubble Date: Mon, 2 Jul 2018 22:06:22 -0700 Subject: [PATCH] Update Nginx Ingress controller from 0.15.0 to 0.16.2 * https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.16.2 * https://github.com/kubernetes/ingress-nginx/blob/master/Changelog.md --- CHANGES.md | 1 + addons/nginx-ingress/aws/deployment.yaml | 9 +++++++-- addons/nginx-ingress/digital-ocean/daemonset.yaml | 9 +++++++-- addons/nginx-ingress/google-cloud/deployment.yaml | 9 +++++++-- 4 files changed, 22 insertions(+), 6 deletions(-) diff --git a/CHANGES.md b/CHANGES.md index 57d7a934..7461eead 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -22,6 +22,7 @@ Notable changes between versions. #### Addons +* Update nginx-ingress from 0.15.0 to 0.16.2 * Update Grafana from 5.1.4 to [5.2.1](http://docs.grafana.org/guides/whats-new-in-v5-2/) * Update heapster from v1.5.2 to v1.5.3 diff --git a/addons/nginx-ingress/aws/deployment.yaml b/addons/nginx-ingress/aws/deployment.yaml index ce091d2d..18559057 100644 --- a/addons/nginx-ingress/aws/deployment.yaml +++ b/addons/nginx-ingress/aws/deployment.yaml @@ -22,7 +22,7 @@ spec: node-role.kubernetes.io/node: "" containers: - name: nginx-ingress-controller - image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.15.0 + image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.16.2 args: - /nginx-ingress-controller - --default-backend-service=$(POD_NAMESPACE)/default-backend @@ -67,6 +67,11 @@ spec: successThreshold: 1 timeoutSeconds: 1 securityContext: - runAsNonRoot: false + capabilities: + add: + - NET_BIND_SERVICE + drop: + - ALL + runAsUser: 33 # www-data restartPolicy: Always terminationGracePeriodSeconds: 60 diff --git a/addons/nginx-ingress/digital-ocean/daemonset.yaml b/addons/nginx-ingress/digital-ocean/daemonset.yaml index 4ebc0688..ee8970b3 100644 --- a/addons/nginx-ingress/digital-ocean/daemonset.yaml +++ b/addons/nginx-ingress/digital-ocean/daemonset.yaml @@ -22,7 +22,7 @@ spec: node-role.kubernetes.io/node: "" containers: - name: nginx-ingress-controller - image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.15.0 + image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.16.2 args: - /nginx-ingress-controller - --default-backend-service=$(POD_NAMESPACE)/default-backend @@ -67,6 +67,11 @@ spec: successThreshold: 1 timeoutSeconds: 1 securityContext: - runAsNonRoot: false + capabilities: + add: + - NET_BIND_SERVICE + drop: + - ALL + runAsUser: 33 # www-data restartPolicy: Always terminationGracePeriodSeconds: 60 diff --git a/addons/nginx-ingress/google-cloud/deployment.yaml b/addons/nginx-ingress/google-cloud/deployment.yaml index ce091d2d..18559057 100644 --- a/addons/nginx-ingress/google-cloud/deployment.yaml +++ b/addons/nginx-ingress/google-cloud/deployment.yaml @@ -22,7 +22,7 @@ spec: node-role.kubernetes.io/node: "" containers: - name: nginx-ingress-controller - image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.15.0 + image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.16.2 args: - /nginx-ingress-controller - --default-backend-service=$(POD_NAMESPACE)/default-backend @@ -67,6 +67,11 @@ spec: successThreshold: 1 timeoutSeconds: 1 securityContext: - runAsNonRoot: false + capabilities: + add: + - NET_BIND_SERVICE + drop: + - ALL + runAsUser: 33 # www-data restartPolicy: Always terminationGracePeriodSeconds: 60