chore(deps): update registry.k8s.io/ingress-nginx/kube-webhook-certgen docker tag to v1.5.4 (#751)

* chore(deps): update registry.k8s.io/ingress-nginx/kube-webhook-certgen docker tag to v1.5.1

* chore(deps): update registry.k8s.io/ingress-nginx/kube-webhook-certgen docker tag to v1.5.4

* chore: update helm-schema version

Signed-off-by: Oliver Bähler <[email protected]>

* chore: update helm-schema version

Signed-off-by: Oliver Bähler <[email protected]>

* chore: update helm-schema version

Signed-off-by: Oliver Bähler <[email protected]>

* chore: update helm-schema version

Signed-off-by: Oliver Bähler <[email protected]>

* chore: update helm-schema version

Signed-off-by: Oliver Bähler <[email protected]>

---------

Signed-off-by: Oliver Bähler <[email protected]>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Oliver Bähler <[email protected]>

Author: renovate[bot]

Makefile

@@ -111,7 +111,7 @@ helm-lint: ct
 	@$(CT) lint --config .github/configs/ct.yaml --validate-yaml=false --all --debug
 
 helm-schema: helm-plugin-schema
-	cd charts/capsule-proxy && $(HELM) schema
+	cd charts/capsule-proxy && $(HELM) schema --use-helm-docs
 
 helm-test: helm-create helm-install helm-destroy
 
@@ -181,7 +181,6 @@ ifeq ($(CAPSULE_PROXY_MODE),http)
 		--set "options.logLevel=10" \
 		--set "options.pprof=true" \
 		--set "service.type=NodePort" \
-		--set "service.nodePort=" \
 		--set "kind=DaemonSet" \
 		--set "daemonset.hostNetwork=true" \
 		--set "serviceMonitor.enabled=false" \
@@ -219,7 +218,6 @@ else
 		--set "options.logLevel=10" \
 		--set "options.pprof=true" \
 		--set "service.type=NodePort" \
-		--set "service.nodePort=" \
 		--set "kind=DaemonSet" \
 		--set "daemonset.hostNetwork=true" \
 		--set "serviceMonitor.enabled=false" \

charts/capsule-proxy/README.md

@@ -95,7 +95,7 @@ If you only need to make minor customizations, you can specify them on the comma
 | global.jobs.certs.image.pullPolicy | string | `"IfNotPresent"` | Set the image pull policy of the post install certgen job |
 | global.jobs.certs.image.registry | string | `"registry.k8s.io"` | Set the image repository of the post install certgen job |
 | global.jobs.certs.image.repository | string | `"ingress-nginx/kube-webhook-certgen"` | Set the image repository of the post install certgen job |
-| global.jobs.certs.image.tag | string | `"v1.5.3"` | Set the image tag of the post install certgen job |
+| global.jobs.certs.image.tag | string | `"v1.5.4"` | Set the image tag of the post install certgen job |
 | global.jobs.certs.nodeSelector | object | `{}` | Set the node selector |
 | global.jobs.certs.podSecurityContext | object | `{"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the job pods. |
 | global.jobs.certs.priorityClassName | string | `""` | Set a pod priorityClassName |
@@ -185,7 +185,7 @@ If you only need to make minor customizations, you can specify them on the comma
 | options.ignoredUserGroups | list | `[]` | Define which groups must be ignored while proxying requests |
 | options.leaderElection | bool | `false` | Set leader election to true if you are running n-replicas |
 | options.listeningPort | int | `9001` | Set the listening port of the capsule-proxy |
-| options.logLevel | string | `"4"` | Set the log verbosity of the capsule-proxy with a value from 1 to 10 |
+| options.logLevel | int | `4` | Set the log verbosity of the capsule-proxy with a value from 1 to 10 |
 | options.oidcUsernameClaim | string | `"preferred_username"` | Specify if capsule-proxy will use SSL |
 | options.pprof | bool | `false` | Enable Pprof for profiling |
 | options.rolebindingsResyncPeriod | string | `"10h"` | Set the role bindings reflector resync period, a local cache to store mappings between users and their namespaces. [Use a lower value in case of flaky etcd server connections.](https://github.com/projectcapsule/capsule-proxy/issues/174) |
@@ -234,7 +234,7 @@ You can manage the certificate with the help of [cert-manager](https://cert-mana
 |-----|------|---------|-------------|
 | service.annotations | object | `{}` | Annotations to add to the service. |
 | service.labels | object | `{}` | Labels to add to the service. |
-| service.nodePort | string | `nil` | Specifies the node port number (only for `NodePort` service type). |
+| service.nodePort | int | `0` | Specifies the node port number (only for `NodePort` service type). |
 | service.port | int | `9001` | Specifies the service port number. |
 | service.portName | string | `"proxy"` | Specifies the service port name. |
 | service.type | string | `"ClusterIP"` | Specifies the service type should be created (`ClusterIP`, `NodePort`or `LoadBalancer`) |

charts/capsule-proxy/ci/ds-values.yaml

@@ -5,6 +5,8 @@ kind: DaemonSet
 daemonset:
   hostNetwork: true
   hostPort: true
+service:
+  nodePort: 30901
 imagePullSecrets: []
 certManager:
   generateCertificates: true

charts/capsule-proxy/templates/service.yaml

@@ -35,7 +35,9 @@ spec:
     protocol: TCP
     targetPort: {{ .Values.options.listeningPort }}
     {{ if (and (eq .Values.service.type "NodePort") (not (empty .Values.service.nodePort))) }}
+      {{- if .Values.service.nodePort }}
     nodePort: {{.Values.service.nodePort}}
+      {{- end }}
     {{ end }}
   selector:
     {{- include "capsule-proxy.selectorLabels" . | nindent 4 }}