Release controller v1.13.8 & chart v4.13.8. (#14675)

Author: Gacko

README.md

@@ -49,6 +49,7 @@ the versions listed. Ingress-Nginx versions **may** work on older versions, but
 
 | Supported | Ingress-NGINX version | k8s supported version         | Alpine Version | Nginx Version | Helm Chart Version |
 | :-------: | --------------------- | ----------------------------- | -------------- | ------------- | ------------------ |
+|    🔄     | **v1.13.8**           | 1.33, 1.32, 1.31, 1.30, 1.29  | 3.23.3         | 1.27.1        | 4.13.8             |
 |    🔄     | **v1.13.7**           | 1.33, 1.32, 1.31, 1.30, 1.29  | 3.23.2         | 1.27.1        | 4.13.7             |
 |    🔄     | **v1.13.6**           | 1.33, 1.32, 1.31, 1.30, 1.29  | 3.23.2         | 1.27.1        | 4.13.6             |
 |    🔄     | **v1.13.5**           | 1.33, 1.32, 1.31, 1.30, 1.29  | 3.22.2         | 1.27.1        | 4.13.5             |

changelog/controller-1.13.8.md

@@ -0,0 +1,65 @@
+# Changelog
+
+### controller-v1.13.8
+
+Images:
+
+* registry.k8s.io/ingress-nginx/controller:v1.13.8@sha256:0e7fad5de70f55c7f5fb61858be5ba6794d61091ad0874e963a61851e43edf99
+* registry.k8s.io/ingress-nginx/controller-chroot:v1.13.8@sha256:5269537aba95892bad7849ef06f0d0d9883cc586af74a0408fa8173835bd2ea1
+
+### All changes:
+
+* Images: Trigger controller build. (#14672)
+* Template: Quote `proxy_pass`. (#14669)
+* Annotations: Consider aliases in risk evaluation. (#14666)
+* Images: Bump other images. (#14663)
+* Images: Trigger other builds (2/2). (#14660)
+* Images: Trigger other builds (1/2). (#14657)
+* Tests: Bump Test Runner to v2.2.8. (#14642)
+* Images: Trigger Test Runner build. (#14639)
+* Go: Update dependencies. (#14636)
+* Images: Bump NGINX to v2.2.8. (#14633)
+* Images: Trigger NGINX build. (#14630)
+* Go: Update dependencies. (#14627)
+* Go: Bump to v1.26.1. (#14624)
+* CI: Update Kubernetes to v1.35.2. (#14607)
+* Admission Controller: Remove obsolete error log. (#14602)
+* Mage: Rewrite `updateChartValue` to obsolete outdated libraries. (#14601)
+* Go: Update dependencies. (#14597)
+* Go: Update dependencies. (#14586)
+* CI: Update KIND to v1.35.1. (#14566)
+* CI: Update Kubernetes to v1.35.1. (#14563)
+* Docs: Clarify PROXY protocol is not supported on GKE default load balancer. (#14560)
+* Controller: Enable SSL Passthrough when requested on before HTTP-only hosts. (#14557)
+* CI: Update Helm to v4.1.1. (#14554)
+* Annotations: Use dedicated regular expression for `proxy-cookie-domain`. (#14551)
+* Docs: Add retirement notice to website. (#14542)
+* Template: Use `RawURLEncoding` instead of `URLEncoding` with padding removal. (#14538)
+* Docs: Clarify valid values for `proxy-request-buffering`. (#14533)
+* Go: Bump to v1.25.7. (#14527)
+* Go: Update dependencies. (#14524)
+* Tests: Bump Ginkgo to v2.28.1. (#14521)
+* Images: Bump Alpine to v3.23.3. (#14518)
+* Lua: Fix type mismatch. (#14515)
+
+### Dependency updates:
+
+* Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#14654)
+* Bump docker/login-action from 3.7.0 to 4.0.0 (#14651)
+* Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#14650)
+* Bump the actions group with 5 updates (#14648)
+* Bump actions/download-artifact from 7.0.0 to 8.0.0 (#14620)
+* Bump the go group across 3 directories with 9 updates (#14618)
+* Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#14616)
+* Bump actions/setup-go from 6.2.0 to 6.3.0 in the actions group (#14613)
+* Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#14594)
+* Bump the actions group with 4 updates (#14592)
+* Bump google.golang.org/grpc from 1.78.0 to 1.79.1 (#14583)
+* Bump the go group across 3 directories with 9 updates (#14581)
+* Bump the actions group with 2 updates (#14578)
+* Bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#14576)
+* Bump google.golang.org/grpc from 1.78.0 to 1.79.1 in /images/go-grpc-greeter-server/rootfs (#14574)
+* Bump github/codeql-action from 4.32.0 to 4.32.2 in the actions group (#14549)
+* Bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 (#14547)
+
+**Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/controller-v1.13.7...controller-v1.13.8

charts/ingress-nginx/Chart.yaml

@@ -1,9 +1,9 @@
 annotations:
   artifacthub.io/changes: |
-    - Update Ingress-Nginx version controller-v1.13.7
+    - Update Ingress-Nginx version controller-v1.13.8
   artifacthub.io/prerelease: "false"
 apiVersion: v2
-appVersion: 1.13.7
+appVersion: 1.13.8
 description: Ingress controller for Kubernetes using NGINX as a reverse proxy and
   load balancer
 home: https://github.com/kubernetes/ingress-nginx
@@ -20,4 +20,4 @@ maintainers:
 name: ingress-nginx
 sources:
 - https://github.com/kubernetes/ingress-nginx
-version: 4.13.7
+version: 4.13.8

charts/ingress-nginx/README.md

@@ -2,7 +2,7 @@
 
 [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
 
-![Version: 4.13.7](https://img.shields.io/badge/Version-4.13.7-informational?style=flat-square) ![AppVersion: 1.13.7](https://img.shields.io/badge/AppVersion-1.13.7-informational?style=flat-square)
+![Version: 4.13.8](https://img.shields.io/badge/Version-4.13.8-informational?style=flat-square) ![AppVersion: 1.13.8](https://img.shields.io/badge/AppVersion-1.13.8-informational?style=flat-square)
 
 To use, add `ingressClassName: nginx` spec field or the `kubernetes.io/ingress.class: nginx` annotation to your Ingress resources.
 
@@ -345,16 +345,16 @@ metadata:
 | controller.hostname | object | `{}` | Optionally customize the pod hostname. |
 | controller.image.allowPrivilegeEscalation | bool | `false` |  |
 | controller.image.chroot | bool | `false` |  |
-| controller.image.digest | string | `"sha256:13db2f8aca4bb71ae7f727288620c4569b01bab4911b01fa3917995ff7755de8"` |  |
-| controller.image.digestChroot | string | `"sha256:ecc934a4653d3b8c17100882b58cc16c59a697930c3598acda02227edfc41c34"` |  |
+| controller.image.digest | string | `"sha256:0e7fad5de70f55c7f5fb61858be5ba6794d61091ad0874e963a61851e43edf99"` |  |
+| controller.image.digestChroot | string | `"sha256:5269537aba95892bad7849ef06f0d0d9883cc586af74a0408fa8173835bd2ea1"` |  |
 | controller.image.image | string | `"ingress-nginx/controller"` |  |
 | controller.image.pullPolicy | string | `"IfNotPresent"` |  |
 | controller.image.readOnlyRootFilesystem | bool | `false` |  |
 | controller.image.runAsGroup | int | `82` | This value must not be changed using the official image. uid=101(www-data) gid=82(www-data) groups=82(www-data) |
 | controller.image.runAsNonRoot | bool | `true` |  |
 | controller.image.runAsUser | int | `101` | This value must not be changed using the official image. uid=101(www-data) gid=82(www-data) groups=82(www-data) |
 | controller.image.seccompProfile.type | string | `"RuntimeDefault"` |  |
-| controller.image.tag | string | `"v1.13.7"` |  |
+| controller.image.tag | string | `"v1.13.8"` |  |
 | controller.ingressClass | string | `"nginx"` | For backwards compatibility with ingress.class annotation, use ingressClass. Algorithm is as follows, first ingressClassName is considered, if not present, controller looks for ingress.class annotation |
 | controller.ingressClassByName | bool | `false` | Process IngressClass per name (additionally as per spec.controller). |
 | controller.ingressClassResource | object | `{"aliases":[],"annotations":{},"controllerValue":"k8s.io/ingress-nginx","default":false,"enabled":true,"name":"nginx","parameters":{}}` | This section refers to the creation of the IngressClass resource. IngressClasses are immutable and cannot be changed after creation. We do not support namespaced IngressClasses, yet, so a ClusterRole and a ClusterRoleBinding is required. |

charts/ingress-nginx/changelog/helm-chart-4.13.8.md

@@ -0,0 +1,9 @@
+# Changelog
+
+This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org).
+
+### 4.13.8
+
+* Update Ingress-Nginx version controller-v1.13.8
+
+**Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.13.7...helm-chart-4.13.8

charts/ingress-nginx/values.yaml

@@ -30,9 +30,9 @@ controller:
     ## for backwards compatibility consider setting the full image url via the repository value below
     ## use *either* current default registry/image or repository format or installing chart by providing the values.yaml will fail
     ## repository:
-    tag: "v1.13.7"
-    digest: sha256:13db2f8aca4bb71ae7f727288620c4569b01bab4911b01fa3917995ff7755de8
-    digestChroot: sha256:ecc934a4653d3b8c17100882b58cc16c59a697930c3598acda02227edfc41c34
+    tag: "v1.13.8"
+    digest: sha256:0e7fad5de70f55c7f5fb61858be5ba6794d61091ad0874e963a61851e43edf99
+    digestChroot: sha256:5269537aba95892bad7849ef06f0d0d9883cc586af74a0408fa8173835bd2ea1
     pullPolicy: IfNotPresent
     runAsNonRoot: true
     # -- This value must not be changed using the official image.

deploy/static/provider/aws/deploy.yaml

@@ -15,7 +15,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx
   namespace: ingress-nginx
 ---
@@ -28,7 +28,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-admission
   namespace: ingress-nginx
 ---
@@ -40,7 +40,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx
   namespace: ingress-nginx
 rules:
@@ -130,7 +130,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-admission
   namespace: ingress-nginx
 rules:
@@ -149,7 +149,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx
 rules:
 - apiGroups:
@@ -231,7 +231,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-admission
 rules:
 - apiGroups:
@@ -250,7 +250,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx
   namespace: ingress-nginx
 roleRef:
@@ -270,7 +270,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-admission
   namespace: ingress-nginx
 roleRef:
@@ -289,7 +289,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -308,7 +308,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-admission
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -328,7 +328,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-controller
   namespace: ingress-nginx
 ---
@@ -344,7 +344,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-controller
   namespace: ingress-nginx
 spec:
@@ -377,7 +377,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-controller-admission
   namespace: ingress-nginx
 spec:
@@ -400,7 +400,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-controller
   namespace: ingress-nginx
 spec:
@@ -422,7 +422,7 @@ spec:
         app.kubernetes.io/instance: ingress-nginx
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.13.7
+        app.kubernetes.io/version: 1.13.8
     spec:
       automountServiceAccountToken: true
       containers:
@@ -447,7 +447,7 @@ spec:
               fieldPath: metadata.namespace
         - name: LD_PRELOAD
           value: /usr/local/lib/libmimalloc.so
-        image: registry.k8s.io/ingress-nginx/controller:v1.13.7@sha256:13db2f8aca4bb71ae7f727288620c4569b01bab4911b01fa3917995ff7755de8
+        image: registry.k8s.io/ingress-nginx/controller:v1.13.8@sha256:0e7fad5de70f55c7f5fb61858be5ba6794d61091ad0874e963a61851e43edf99
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
@@ -524,7 +524,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-admission-create
   namespace: ingress-nginx
 spec:
@@ -535,7 +535,7 @@ spec:
         app.kubernetes.io/instance: ingress-nginx
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.13.7
+        app.kubernetes.io/version: 1.13.8
       name: ingress-nginx-admission-create
     spec:
       automountServiceAccountToken: true
@@ -550,7 +550,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.7@sha256:7c74a715af2c94cb734785b4d3ea1357b4f02b88e1e123c622a9cb68b62f669c
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.8@sha256:d7e8257f8d8bce64b6df55f81fba92011a6a77269b3350f8b997b152af348dba
         imagePullPolicy: IfNotPresent
         name: create
         securityContext:
@@ -578,7 +578,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-admission-patch
   namespace: ingress-nginx
 spec:
@@ -589,7 +589,7 @@ spec:
         app.kubernetes.io/instance: ingress-nginx
         app.kubernetes.io/name: ingress-nginx
         app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.13.7
+        app.kubernetes.io/version: 1.13.8
       name: ingress-nginx-admission-patch
     spec:
       automountServiceAccountToken: true
@@ -606,7 +606,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.7@sha256:7c74a715af2c94cb734785b4d3ea1357b4f02b88e1e123c622a9cb68b62f669c
+        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.8@sha256:d7e8257f8d8bce64b6df55f81fba92011a6a77269b3350f8b997b152af348dba
         imagePullPolicy: IfNotPresent
         name: patch
         securityContext:
@@ -634,7 +634,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: nginx
 spec:
   controller: k8s.io/ingress-nginx
@@ -647,7 +647,7 @@ metadata:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.13.7
+    app.kubernetes.io/version: 1.13.8
   name: ingress-nginx-admission
 webhooks:
 - admissionReviewVersions: