Skip to content

Commit 89a6bfd

Browse files
denreadenrea
authored
Merge pull request #290094 from JackStromberg/patch-992318
1.3.7
2 parents 4162e99 + cbf6d79 commit 89a6bfd

28 files changed

+1149
-53
lines changed

‎articles/application-gateway/for-containers/alb-controller-release-notes.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: application-gateway
55
author: greglin
66
ms.service: azure-appgw-for-containers
77
ms.topic: release-notes
8-
ms.date: 5/9/2024
8+
ms.date: 11/7/2024
99
ms.author: greglin
1010
---
1111

@@ -26,12 +26,13 @@ Instructions for new or existing deployments of ALB Controller are found in the
2626

2727
| ALB Controller Version | Gateway API Version | Kubernetes Version | Release Notes |
2828
| ---------------------- | ------------------- | ------------------ | ------------- |
29-
| 1.2.3| v1.1 | v1.26, v1.27, v1.28, v1.29, v1.30 | Gateway API v1.1, gRPC support, frontend mutual authentication, readiness probe fixes, custom health probe port and TLS mode |
29+
| 1.3.7| v1.1 | v1.26, v1.27, v1.28, v1.29, v1.30 | Minor fixes and improvements |
3030

3131
## Release history
3232

3333
| ALB Controller Version | Gateway API Version | Kubernetes Version | Release Notes |
3434
| ---------------------- | ------------------- | ------------------ | ------------- |
35+
| 1.2.3| v1.1 | v1.26, v1.27, v1.28, v1.29, v1.30 | Gateway API v1.1, gRPC support, frontend mutual authentication, readiness probe fixes, custom health probe port and TLS mode |
3536
| 1.0.2| v1 | v1.26, v1.27, v1.28, v1.29 | ECDSA + RSA certificate support for both Ingress and Gateway API, Ingress fixes, Server-sent events support |
3637
| 1.0.0| v1 | v1.26, v1.27, v1.28 | General Availability! URL redirect for both Gateway and Ingress API, v1beta1 -> v1 of Gateway API, quality improvements<br/>Breaking Changes: TLS Policy for Gateway API [PolicyTargetReference](https://gateway-api.sigs.k8s.io/reference/spec/#gateway.networking.k8s.io%2fv1alpha2.PolicyTargetReferenceWithSectionName)<br/>Listener is now referred to as [SectionName](https://gateway-api.sigs.k8s.io/reference/spec/#gateway.networking.k8s.io/v1.SectionName)<br/>Fixes: Request timeout of 3 seconds, [HealthCheckPolicy interval](https://github.com/Azure/AKS/issues/4086), [pod crash for missing API fields](https://github.com/Azure/AKS/issues/4087) |
3738
| 0.6.3 | v1beta1 | v1.25 | Hotfix to address handling of Application Gateway for Containers frontends during controller restart in managed scenario |

‎articles/application-gateway/for-containers/examples/http-scenario/deployment.yaml

Lines changed: 103 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,103 @@
1+
apiVersion: v1
2+
kind: Namespace
3+
metadata:
4+
name: test-infra
5+
---
6+
7+
apiVersion: v1
8+
kind: Service
9+
metadata:
10+
name: backend-v1
11+
namespace: test-infra
12+
spec:
13+
selector:
14+
app: backend-v1
15+
ports:
16+
- protocol: TCP
17+
port: 8080
18+
targetPort: 3000
19+
---
20+
21+
apiVersion: apps/v1
22+
kind: Deployment
23+
metadata:
24+
name: backend-v1
25+
namespace: test-infra
26+
labels:
27+
app: backend-v1
28+
spec:
29+
replicas: 2
30+
selector:
31+
matchLabels:
32+
app: backend-v1
33+
template:
34+
metadata:
35+
labels:
36+
app: backend-v1
37+
spec:
38+
containers:
39+
- name: backend-v1
40+
image: gcr.io/k8s-staging-ingressconformance/echoserver:v20221109-7ee2f3e
41+
lifecycle:
42+
preStop:
43+
exec:
44+
command: ["sleep", "10"]
45+
env:
46+
- name: POD_NAME
47+
valueFrom:
48+
fieldRef:
49+
fieldPath: metadata.name
50+
- name: NAMESPACE
51+
valueFrom:
52+
fieldRef:
53+
fieldPath: metadata.namespace
54+
resources:
55+
requests:
56+
cpu: 10m
57+
---
58+
59+
apiVersion: v1
60+
kind: Service
61+
metadata:
62+
name: backend-v2
63+
namespace: test-infra
64+
spec:
65+
selector:
66+
app: backend-v2
67+
ports:
68+
- protocol: TCP
69+
port: 8080
70+
targetPort: 3000
71+
---
72+
apiVersion: apps/v1
73+
kind: Deployment
74+
metadata:
75+
name: backend-v2
76+
namespace: test-infra
77+
labels:
78+
app: backend-v2
79+
spec:
80+
replicas: 2
81+
selector:
82+
matchLabels:
83+
app: backend-v2
84+
template:
85+
metadata:
86+
labels:
87+
app: backend-v2
88+
spec:
89+
containers:
90+
- name: backend-v2
91+
image: gcr.io/k8s-staging-ingressconformance/echoserver:v20221109-7ee2f3e
92+
env:
93+
- name: POD_NAME
94+
valueFrom:
95+
fieldRef:
96+
fieldPath: metadata.name
97+
- name: NAMESPACE
98+
valueFrom:
99+
fieldRef:
100+
fieldPath: metadata.namespace
101+
resources:
102+
requests:
103+
cpu: 10m

‎articles/application-gateway/for-containers/examples/https-scenario/end-to-end-ssl-with-backend-mtls/deployment.yaml

Lines changed: 131 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,131 @@
1+
apiVersion: v1
2+
kind: Namespace
3+
metadata:
4+
name: test-infra
5+
---
6+
7+
apiVersion: v1
8+
kind: Service
9+
metadata:
10+
labels:
11+
app: mtls-app
12+
name: mtls-app
13+
namespace: test-infra
14+
spec:
15+
ports:
16+
- port: 443
17+
protocol: TCP
18+
targetPort: 8443
19+
selector:
20+
app: mtls-app
21+
---
22+
23+
apiVersion: apps/v1
24+
kind: Deployment
25+
metadata:
26+
name: mtls-app
27+
namespace: test-infra
28+
spec:
29+
selector:
30+
matchLabels:
31+
app: mtls-app
32+
replicas: 2
33+
template:
34+
metadata:
35+
labels:
36+
app: mtls-app
37+
spec:
38+
containers:
39+
- name: mtls-app
40+
imagePullPolicy: Always
41+
image: nginx:1.23.2
42+
ports:
43+
- containerPort: 8443
44+
volumeMounts:
45+
- mountPath: /etc/nginx/ssl
46+
name: secret-volume
47+
- mountPath: /etc/nginx/client_certs
48+
name: ca-volume
49+
- mountPath: /etc/nginx/conf.d
50+
name: configmap-volume
51+
resources:
52+
limits:
53+
cpu: 700m
54+
memory: 300Mi
55+
requests:
56+
cpu: 100m
57+
memory: 20Mi
58+
volumes:
59+
- name: secret-volume
60+
secret:
61+
secretName: backend.com
62+
- name: ca-volume
63+
secret:
64+
secretName: ca.bundle
65+
- name: configmap-volume
66+
configMap:
67+
name: mtls-app-nginx-cm
68+
---
69+
70+
apiVersion: v1
71+
kind: ConfigMap
72+
metadata:
73+
name: mtls-app-nginx-cm
74+
namespace: test-infra
75+
data:
76+
default.conf: |-
77+
server {
78+
listen 8443 ssl;
79+
server_name backend.com;
80+
root /usr/share/nginx/html;
81+
index index.html;
82+
ssl_certificate /etc/nginx/ssl/tls.crt;
83+
ssl_certificate_key /etc/nginx/ssl/tls.key;
84+
ssl_client_certificate /etc/nginx/client_certs/ca.crt;
85+
location / {
86+
return 200 "Hello World!";
87+
}
88+
}
89+
---
90+
91+
apiVersion: v1
92+
data:
93+
tls.crt: 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
94+
tls.key: LS0tLS1CRUdJTiBFQyBQQVJBTUVURVJTLS0tLS0KQmdncWhrak9QUU1CQnc9PQotLS0tLUVORCBFQyBQQVJBTUVURVJTLS0tLS0KLS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUs3cGxVS3dJVEFuTzh3ZXFWYk9uNkhhYmpjVWltQU5CcHdPNnRUMTdzL29vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFaFlHUk9zSEVjekdjTjBIVjlidEhjd1lyNDVSQW9oenczVmZmWVJzZ2NiUkQ4eEdtcWdQcgpRYUl0UW1wSjNDa0JoNzBwV3JpTUh1Tm0wYU9YVU82OGVBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
95+
kind: Secret
96+
metadata:
97+
name: backend.com
98+
namespace: test-infra
99+
type: kubernetes.io/tls
100+
---
101+
102+
apiVersion: v1
103+
data:
104+
tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUIvVENDQWFPZ0F3SUJBZ0lVTkxLSUNDQTJBcWdRWjVNbDFLQ1kvOGVUL0Nnd0NnWUlLb1pJemowRUF3UXcKRGpFTU1Bb0dBMVVFQXd3RFptOXZNQjRYRFRJek1ERXdOREl5TVRFeE5Wb1hEVEkxTVRBeU5ESXlNVEV4TlZvdwpGekVWTUJNR0ExVUVBd3dNWm5KdmJuUmxibVF1WTI5dE1Ga3dFd1lIS29aSXpqMENBUVlJS29aSXpqMERBUWNEClFnQUUvb1NUSGVKTy92S095WXNQS3pmR09Ec1J1c3NlLzhOOWxZcVE2TmdzZUdlaXlJNzV0UHJxUWpZNzhIa2IKL3gxWTIrcXY4YnAzbzhlR1ExVXEyV2VvamFPQjFUQ0IwakFKQmdOVkhSTUVBakFBTUJFR0NXQ0dTQUdHK0VJQgpBUVFFQXdJR1FEQWpCZ2xnaGtnQmh2aENBUTBFRmhZVVRYa2dSbWx5YzNRZ1EyVnlkR2xtYVdOaGRHVXdIUVlEClZSME9CQllFRkRmWFFXQzMxbDFGbEJUMEp1QWhhU3VUa2Jic01ETUdBMVVkSXdRc01DcWhFcVFRTUE0eEREQUsKQmdOVkJBTU1BMlp2YjRJVUptVklTRkI0dXRXWVNTNXl4ZERnOEZJVWRjSXdDd1lEVlIwUEJBUURBZ1hnTUJNRwpBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUJNQmNHQTFVZEVRUVFNQTZDREdaeWIyNTBaVzVrTG1OdmJUQUtCZ2dxCmhrak9QUVFEQkFOSUFEQkZBaUVBbTYvaS9oUlQ2OEh4VTdLRmF3WElDSHhTSi9ic3gxalFUS1hEakgxbjFja0MKSUhlN3lBcm0rWFdCTFF1WEFhbzJQNmNzNHA3bW9CNXFGRGQ3M2RDZEFWSzQKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
105+
tls.key: LS0tLS1CRUdJTiBFQyBQQVJBTUVURVJTLS0tLS0KQmdncWhrak9QUU1CQnc9PQotLS0tLUVORCBFQyBQQVJBTUVURVJTLS0tLS0KLS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUhOOGl1R2hIb25ReHhJUWV1a0VVTllXYnRhWGFtSDFseTBCcmtNTXI1eVFvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFL29TVEhlSk8vdktPeVlzUEt6ZkdPRHNSdXNzZS84TjlsWXFRNk5nc2VHZWl5STc1dFBycQpRalk3OEhrYi94MVkyK3F2OGJwM284ZUdRMVVxMldlb2pRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
106+
kind: Secret
107+
metadata:
108+
name: frontend.com
109+
namespace: test-infra
110+
type: kubernetes.io/tls
111+
---
112+
113+
apiVersion: v1
114+
data:
115+
tls.crt: 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
116+
tls.key: LS0tLS1CRUdJTiBFQyBQQVJBTUVURVJTLS0tLS0KQmdncWhrak9QUU1CQnc9PQotLS0tLUVORCBFQyBQQVJBTUVURVJTLS0tLS0KLS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUUxZEF6SUJDVkhDY0p3WlBrU0ZVTWtIaXVMRENqRk1nMEwyRm5Dck9kOXhvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFdHBSdktrMFlBY3g2dnYrN3BkclJ1c1RCTW80Ym5VYk5WRTFsTCtNWE5TRFhERmo3V2htcQpDeWhoYkozWjNqVFBmbTdESHlNQ0ZBRVdDYitvakJLOTFRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
117+
kind: Secret
118+
metadata:
119+
name: gateway-client-cert
120+
namespace: test-infra
121+
type: kubernetes.io/tls
122+
---
123+
124+
apiVersion: v1
125+
data:
126+
ca.crt: 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
127+
kind: Secret
128+
metadata:
129+
name: ca.bundle
130+
namespace: test-infra
131+

0 commit comments

Comments
 (0)