Merge branch 'chore/np-136-replace-hardcoded-keys' of github.com:nginx/kubernetes-ingress into chore/np-136-replace-hardcoded-keys

Author: pdabelf5

.gitignore

@@ -66,6 +66,164 @@ kube-local
 venv/
 
 # generated tls certificates
-common-secrets/*
-!common-secrets/.gitkeep
-hack/cert-links
+# that gitignore file is at hack/.gitignore
+
+# AUTO GENERATED SECTION BY CERTGEN (hack/tls-cert-gen/gitignore-gen.go), DO NOT EDIT BELOW
+
+
+
+#TLS Certificate secrets
+common-secrets/tls-secret.yaml
+examples/custom-resources/api-key/cafe-secret.yaml
+examples/custom-resources/backup-directive/transport-server/app-tls-secret.yaml
+examples/custom-resources/backup-directive/virtual-server/cafe-secret.yaml
+examples/custom-resources/basic-auth/cafe-secret.yaml
+examples/custom-resources/basic-configuration/cafe-secret.yaml
+examples/custom-resources/cache-policy/cafe-secret.yaml
+examples/custom-resources/cross-namespace-configuration/cafe-secret.yaml
+examples/custom-resources/custom-ip-listeners/virtualserver/cafe-secret.yaml
+examples/custom-resources/custom-listeners/cafe-secret.yaml
+examples/custom-resources/external-dns/cafe-secret.yaml
+examples/custom-resources/externalname-services/transport-server/app-tls-secret.yaml
+examples/custom-resources/foreign-namespace-upstreams/cafe-secret.yaml
+examples/custom-resources/grpc-upstreams/greeter-secret.yaml
+examples/custom-resources/ingress-mtls/tls-secret.yaml
+examples/custom-resources/jwks/tls-secret.yaml
+examples/custom-resources/oidc-fclo/tls-secret.yaml
+examples/custom-resources/oidc/tls-secret.yaml
+examples/custom-resources/rate-limit-tiered-jwt-claim/cafe-secret.yaml
+examples/custom-resources/service-insight/service-insight-secret.yaml
+examples/custom-resources/tls-passthrough/app-tls-secret.yaml
+examples/custom-resources/transport-server-sni/cafe-secret.yaml
+examples/custom-resources/transport-server-sni/mongo-secret.yaml
+examples/ingress-resources/app-protect-dos/webapp-secret.yaml
+examples/ingress-resources/app-protect-waf/cafe-secret.yaml
+examples/ingress-resources/basic-auth/cafe-secret.yaml
+examples/ingress-resources/complete-example/cafe-secret.yaml
+examples/ingress-resources/mergeable-ingress-types/cafe-secret.yaml
+examples/ingress-resources/proxy-set-headers/mergeable-ingress/cafe-secret.yaml
+examples/ingress-resources/proxy-set-headers/standard-ingress/cafe-secret.yaml
+examples/ingress-resources/rate-limit/cafe-secret.yaml
+examples/ingress-resources/security-monitoring/cafe-secret.yaml
+tests/data/appprotect/appprotect-secret.yaml
+tests/data/dos/tls-secret.yaml
+tests/data/hsts/standard-tls/tls-secret.yaml
+tests/data/hsts/mergeable-tls/tls-secret.yaml
+tests/data/ingress-mtls/secret/tls-secret.yaml
+tests/data/mgmt-configmap-keys/ssl-cert.yaml
+tests/data/smoke/smoke-secret.yaml
+tests/data/upgrade-test-resources/secret.yaml
+tests/data/virtual-server-certmanager/tls-secret.yaml
+tests/data/virtual-server-grpc/tls-secret.yaml
+tests/data/virtual-server-route-grpc/tls-secret.yaml
+tests/data/watch-secret-namespace/tls-secret.yaml
+common-secrets/tls-secret-gb.yaml
+tests/data/tls/new-tls-secret.yaml
+tests/data/virtual-server-tls/new-tls-secret.yaml
+common-secrets/tls-secret-default.yaml
+examples/shared-examples/default-server-secret/default-server-secret.yaml
+tests/data/common/default-server-secret.yaml
+common-secrets/tls-secret-grpc.yaml
+tests/data/common/app/secure/secret/grpc-secret.yaml
+common-secrets/tls-secret-default-gb.yaml
+tests/data/default-server/new-tls-secret.yaml
+common-secrets/tls-secret-invalid.yaml
+tests/data/default-server/invalid-tls-secret.yaml
+common-secrets/tls-secret-us.yaml
+tests/data/tls/tls-secret.yaml
+tests/data/virtual-server-tls/tls-secret.yaml
+tests/data/prometheus/secret.yaml
+common-secrets/tls-secret-invalid-type-some.yaml
+tests/data/tls/invalid-tls-secret.yaml
+common-secrets/tls-secret-invalid-type-broken.yaml
+tests/data/wildcard-tls-secret/invalid-wildcard-tls-secret.yaml
+common-secrets/wildcard-tls-secret.yaml
+tests/data/wildcard-tls-secret/wildcard-tls-secret.yaml
+common-secrets/wildcard-tls-secret-gb.yaml
+tests/data/wildcard-tls-secret/gb-wildcard-tls-secret.yaml
+common-secrets/vs-tls-secret.yaml
+tests/data/ap-waf-grpc/tls-secret.yaml
+common-secrets/app-tls-secret.yaml
+tests/data/common/app/secure/secret/app-tls-secret.yaml
+tests/data/transport-server-tls-passthrough/standard/secure-app-secret.yaml
+tests/data/transport-server-backup-service/standard/secure-app-secret.yaml
+common-secrets/tls-secret-tcp-lb-cafe.yaml
+tests/data/transport-server-tcp-load-balance/new-tls-secret.yaml
+common-secrets/kic-tls-secret.yaml
+tests/data/transport-server-tcp-load-balance/tcp-tls-secret.yaml
+common-secrets/tls-secret-test.yaml
+tests/data/service-insight/secret.yaml
+common-secrets/invalid-tls-secret-sometype.yaml
+tests/data/virtual-server-tls/invalid-tls-secret.yaml
+common-secrets/cafe-secret.yaml
+tests/data/transport-server-with-host/cafe-secret.yaml
+common-secrets/ca-key-pair.yaml
+tests/data/virtual-server-certmanager/issuer-secret.yaml
+
+#mTLS Bundle Certificate secrets
+common-secrets/test-egress-mtls-secret.yaml
+common-secrets/test-egress-tls-client-secret.yaml
+common-secrets/test-secure-app-tls-secret.yaml
+common-secrets/test-egress-mtls-secret-crl.yaml
+tests/data/egress-mtls/secret/egress-mtls-secret.yaml
+tests/data/egress-mtls/secret/egress-mtls-secret-crl.yaml
+tests/data/egress-mtls/secret/tls-secret.yaml
+tests/data/common/app/secure-ca/app-tls-secret.yaml
+common-secrets/example-egress-trusted-ca-secret.yaml
+common-secrets/example-egress-mtls-client-secret.yaml
+common-secrets/example-secure-app-tls-secret.yaml
+common-secrets/example-egress-trusted-ca-secret-crl.yaml
+examples/custom-resources/egress-mtls/egress-trusted-ca-secret.yaml
+examples/custom-resources/egress-mtls/egress-trusted-ca-secret-crl.yaml
+examples/custom-resources/egress-mtls/egress-mtls-secret.yaml
+examples/custom-resources/egress-mtls/secure-app-tls-secret.yaml
+
+#TLS Certificate secrets
+common-secrets/cafe-passwd-basic-auth-secret.yaml
+examples/ingress-resources/basic-auth/cafe-passwd.yaml
+examples/custom-resources/basic-auth/cafe-passwd.yaml
+common-secrets/auth-basic-master-htpasswd-basic-auth-secret.yaml
+tests/data/auth-basic-auth-mergeable/auth-basic-master-secret.yaml
+common-secrets/auth-basic-master-htpasswd-basic-auth-secret-updated.yaml
+tests/data/auth-basic-auth-mergeable/auth-basic-master-secret-updated.yaml
+common-secrets/auth-basic-minion-htpasswd-basic-auth-secret.yaml
+tests/data/auth-basic-auth-mergeable/auth-basic-minion-secret.yaml
+common-secrets/auth-basic-minion-htpasswd-basic-auth-secret-updated.yaml
+tests/data/auth-basic-auth-mergeable/auth-basic-minion-secret-updated.yaml
+common-secrets/auth-basic-policy-htpasswd-secret-invalid.yaml
+tests/data/auth-basic-policy/secret/htpasswd-secret-invalid.yaml
+common-secrets/auth-basic-policy-htpasswd-secret-empty.yaml
+tests/data/auth-basic-policy/secret/htpasswd-secret-valid-empty.yaml
+common-secrets/auth-basic-policy-htpasswd-secret-valid.yaml
+tests/data/auth-basic-policy/secret/htpasswd-secret-valid.yaml
+common-secrets/auth-basic-secrets-htpasswd-secret.yaml
+tests/data/auth-basic-secrets/auth-basic-secret.yaml
+common-secrets/auth-basic-secrets-htpasswd-secret-updated.yaml
+tests/data/auth-basic-secrets/auth-basic-secret-updated.yaml
+common-secrets/auth-basic-secrets-htpasswd-secret-invalid.yaml
+tests/data/auth-basic-secrets/auth-basic-secret-invalid.yaml
+
+#Jwks secrets
+common-secrets/example-jwt-jwks-secret.yaml
+examples/custom-resources/jwt/jwk-secret.yaml
+common-secrets/tests-jwt-master-jwk.yaml
+tests/data/jwt-auth-mergeable/jwt-master-secret.yaml
+common-secrets/tests-jwt-master-jwk-updated.yaml
+tests/data/jwt-auth-mergeable/jwt-master-secret-updated.yaml
+common-secrets/tests-jwt-minion-jwk.yaml
+tests/data/jwt-auth-mergeable/jwt-minion-secret.yaml
+common-secrets/tests-jwt-minion-jwk-updated.yaml
+tests/data/jwt-auth-mergeable/jwt-minion-secret-updated.yaml
+common-secrets/tests-jwt-policy-invalid-jwk.yaml
+tests/data/jwt-policy/secret/jwk-secret-invalid.yaml
+common-secrets/tests-jwt-policy-valid-jwk.yaml
+tests/data/jwt-policy/secret/jwk-secret-valid.yaml
+common-secrets/tests-jwt-secret-invalid-jwk.yaml
+tests/data/jwt-secrets/jwt-secret-invalid.yaml
+common-secrets/tests-jwt-secret-valid-jwk.yaml
+tests/data/jwt-secrets/jwt-secret.yaml
+common-secrets/tests-jwt-secret-updated-jwk.yaml
+tests/data/jwt-secrets/jwt-secret-updated.yaml
+
+
+# END CERTGEN SECTION. YOU MAY EDIT BELOW

go.mod

@@ -21,6 +21,7 @@ require (
 	github.com/stretchr/testify v1.11.1
 	go.opentelemetry.io/otel v1.38.0
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0
+	golang.org/x/crypto v0.45.0
 	k8s.io/api v0.34.2
 	k8s.io/apiextensions-apiserver v0.34.2
 	k8s.io/apimachinery v0.34.2
@@ -177,7 +178,6 @@ require (
 	go.uber.org/zap v1.27.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
 	golang.org/x/mod v0.29.0 // indirect
 	golang.org/x/net v0.47.0 // indirect
 	golang.org/x/oauth2 v0.31.0 // indirect