Connectivity
Changed
- Align labels, use
app.kubernetes.io/name instead of k8s-app where possible.
k8s-app remains to be used for compatibility reasons, as selectors are not modifiable without recreating the Deployment.
- Sync with upstream - v1.5.0
- Bump Kong version - v2.0.4
- Bump Kong Ingress Controller version - v0.8.1
Changed
- Make forward options optional.
Changed
- Make NGINX IC Service
externalTrafficPolicy configurable and default to Local.
Changed
- Restrict PodSecurityPolicy volumes to only those required (removes wildcard).
- Tune
net.ipv4.ip_local_port_range to 1024 65535 as a safe sysctl. - Tune
net.core.somaxconn to 32768 via an initContainer with privilege escalation. - Use
4 worker processes by default. - Use upstream default of max-worker-connections of
16384. - Ignore NGINX IC Deployment replica count configuration when HorizontalPodAutoscaler is enabled.
- Drop unnecessary Helm release revision annotation from NGINX IC Deployment.
- Adjust README for display in the web interface context.
Changed
- Default
max-worker-connections to 0, making it same as max-worker-open-files i.e. max open files (system's limit) / worker-processes - 1024.
This optimizes for high load conditions where it improves performance at the cost of increasing RAM utilization (even on idle). - HorizontalPodAutoscaler was tuned to use
targetMemoryUtilizationPercentage of 80 due to increased RAM utilization with new default for max-worker-connections of 0. - Removed use of
enable-dynamic-certificates CLI flag, it has been deprecated since ingress-nginx 0.26.0 via ingress-nginx PR #4356 - Changed default
error-log-level from error to notice. - Added a link to the README in the sources of Chart.yaml
Changed
- Align graceful termination configuration with changes made in upstream ingress-nginx 0.26.0 (see related PR #4487 and important section in 0.26.0 release notes).
- Make NGINX IC Deployment’s
terminationGracePeriodSeconds configurable and align its default with configmap.worker-shutdown-timeout - Make NGINX IC controller container lifecycle hooks configurable, and change from
sleep 60 to using /wait-shutdown as preStop hook.
- Make
controller.minReadySeconds configurable.
Changed
- Change deployment to use release revision not time for Helm 3 support.
Updated
- Enable Giant Swarm monitoring
- Set default
ingressClass to kong-app. See #48
Changed
- Fix small cluster profile resource requests. (#42)