Connectivity
Changed
- Make forward options optional.
Changed
- Make NGINX IC Service
externalTrafficPolicy
configurable and default toLocal
.
- Make NGINX IC Service
Changed
- Restrict PodSecurityPolicy volumes to only those required (removes wildcard).
- Tune
net.ipv4.ip_local_port_range
to1024 65535
as a safe sysctl. - Tune
net.core.somaxconn
to32768
via an initContainer with privilege escalation. - Use
4
worker processes by default. - Use upstream default of max-worker-connections of
16384
. - Ignore NGINX IC Deployment replica count configuration when HorizontalPodAutoscaler is enabled.
- Drop unnecessary Helm release revision annotation from NGINX IC Deployment.
- Adjust README for display in the web interface context.
Changed
- Default
max-worker-connections
to0
, making it same asmax-worker-open-files
i.e.max open files (system's limit) / worker-processes - 1024
. This optimizes for high load conditions where it improves performance at the cost of increasing RAM utilization (even on idle). - HorizontalPodAutoscaler was tuned to use
targetMemoryUtilizationPercentage
of80
due to increased RAM utilization with new default formax-worker-connections
of0
. - Removed use of
enable-dynamic-certificates
CLI flag, it has been deprecated since ingress-nginx 0.26.0 via ingress-nginx PR #4356 - Changed default
error-log-level
fromerror
tonotice
. - Added a link to the README in the sources of Chart.yaml
- Default
Changed
- Align graceful termination configuration with changes made in upstream ingress-nginx 0.26.0 (see related PR #4487 and important section in 0.26.0 release notes).
- Make NGINX IC Deployment’s
terminationGracePeriodSeconds
configurable and align its default withconfigmap.worker-shutdown-timeout
- Make NGINX IC controller container lifecycle hooks configurable, and change from
sleep 60
to using/wait-shutdown
as preStop hook.
- Make NGINX IC Deployment’s
- Make
controller.minReadySeconds
configurable.
- Align graceful termination configuration with changes made in upstream ingress-nginx 0.26.0 (see related PR #4487 and important section in 0.26.0 release notes).
Changed
- Change deployment to use release revision not time for Helm 3 support.
Updated
- Enable Giant Swarm monitoring
- Set default
ingressClass
tokong-app
. See #48
Changed
- Fix small cluster profile resource requests. (#42)
Changed
- Use cluster.kubernetes.clusterDomain instead of cluster.kubernetes.domain for custom DNS suffix.