From 61d7e0f7ebc02076dda8dba2ee6836a736ad38fc Mon Sep 17 00:00:00 2001
From: "bot-blake[bot]" <129223303+bot-blake[bot]@users.noreply.github.com>
Date: Mon, 30 Dec 2024 12:13:36 -0600
Subject: [PATCH] =?UTF-8?q?feat(helm):=20update=20ingress-nginx=20(4.11.3?=
 =?UTF-8?q?=20=E2=86=92=204.12.0)=20(#3231)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: bot-blake[bot] <129223303+bot-blake[bot]@users.noreply.github.com>
---
 kubernetes/apps/networking/nginx/external/helmrelease.yaml | 5 +++--
 kubernetes/apps/networking/nginx/internal/helmrelease.yaml | 5 +++--
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/kubernetes/apps/networking/nginx/external/helmrelease.yaml b/kubernetes/apps/networking/nginx/external/helmrelease.yaml
index f7b3e6336..90191659a 100644
--- a/kubernetes/apps/networking/nginx/external/helmrelease.yaml
+++ b/kubernetes/apps/networking/nginx/external/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: ingress-nginx
-      version: 4.11.3
+      version: 4.12.0
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
@@ -26,7 +26,6 @@ spec:
     fullnameOverride: *app
     controller:
       replicaCount: 2
-      allowSnippetAnnotations: true
       admissionWebhooks:
         objectSelector:
           matchExpressions:
@@ -35,6 +34,8 @@ spec:
               values:
                 - external
       config:
+        allow-snippet-annotations: true
+        annotations-risk-level: Critical
         client-body-buffer-size: 100M
         client-body-timeout: 120
         client-header-timeout: 120
diff --git a/kubernetes/apps/networking/nginx/internal/helmrelease.yaml b/kubernetes/apps/networking/nginx/internal/helmrelease.yaml
index 8ce083dbf..3aec84024 100644
--- a/kubernetes/apps/networking/nginx/internal/helmrelease.yaml
+++ b/kubernetes/apps/networking/nginx/internal/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: ingress-nginx
-      version: 4.11.3
+      version: 4.12.0
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
@@ -26,7 +26,6 @@ spec:
     fullnameOverride: *app
     controller:
       replicaCount: 2
-      allowSnippetAnnotations: true
       admissionWebhooks:
         objectSelector:
           matchExpressions:
@@ -35,6 +34,8 @@ spec:
               values:
                 - internal
       config:
+        allow-snippet-annotations: true
+        annotations-risk-level: Critical
         client-body-buffer-size: 100M
         client-body-timeout: 120
         client-header-timeout: 120