nginx/kubernetes-ingress v2.2.0

on GitHub

What's Changed

🚀 Features

• Add extra containers to helm chart by @sagikazarmark in #2294
• refactor: use os.ReadDir for lightweight directory reading by @Juneezee in #2346
• Add app protect reconnect period directive by @galitskiy in #2360
• Add cli argument to configure NAP log level by @galitskiy in #2479
• Extend helm chart to include NSM fields by @kate-osborn in #2525
• Increase memory available for AP xml parser by @galitskiy in #2455
• Unbind policy from preview policies by @haywoodsh in #2566
• Add support for IPv6 by @jjngx in #2576
• Automate provisioning of Certificate resources for VirtualServer resources using cert-manager by @ciarams87 in #2572
• Create -enable-oidc command line argument for OIDC policy by @haywoodsh in #2580

🐛 Bug Fixes

• Fix goreleaser by @ciarams87 in #2333
• Revert "Upload NGINX Ingress Controller binaries to release (#2044)" by @ciarams87 in #2335
• docs: Fix typo by @ciarams87 in #2384
• Fix healthcheck ports by @ciarams87 in #2378
• Start nginx with -e stderr parameter by @lucacome in #2404
• Fix in file nginx-plus.virtualserver.tmpl ApDosMonitor->ApDosMonitorURI by @pasmant in #2414

📝 Documentation

• Release 2.1.0 to master by @ciarams87 in #2337
• fix: DOCOPS-560 add DOCS-XXX metadata to KIC docs by @Jcahilltorre in #2341
• fix: Fix broken links in KIC docs by @Jcahilltorre in #2343
• Remove UBI 7 and condense WAF/DOS builds by @lucacome in #2362
• Add support for s390x on UBI by @lucacome in #2363
• Hide tutorials section from docs by @jputrino in #2395
• chore: applied february doc theme updates by @ashutoshpradhan-f5 in #2430
• Bump NGINX Plus to R26 by @lucacome in #2434
• Bump alpine from 3.14 to 3.15 in /build by @dependabot in #2218
• fix: DOCOPS-593 fix 2 broken links by @Jcahilltorre in #2447
• Release 2.1.1 (#2436) by @ciarams87 in #2449
• Update documentation by @jjngx in #2468
• Update documentation to remove preview policy requirement from TransportServer by @haywoodsh in #2470
• Add supported versions table by @brianehlert in #2417
• AP: Deprecate external refs by @rafwegv in #2249
• Create SECURITY.md by @lucacome in #2475
• Update documentation links by @jjngx in #2497
• Remove extra checkout step by @lucacome in #2505
• Add notes about edge and stable helm charts by @lucacome in #2504
• Remove GlobalConfiguration preview policy requirement from documentation by @haywoodsh in #2492
• Updates to pull-ingress-controller-image doc by @jputrino in #2530
• Rename main branch by @lucacome in #2502
• Merge release to main by @lucacome in #2565
• Update RBAC in Helm template by @ciarams87 in #2593
• Add more badges to README by @lucacome in #2156
• Rename UBI based images by @lucacome in #2582

🧪 Tests

• adding URL print statement to flakey test by @soneillf5 in #2326
• Bump syslog server image version in tests by @ciarams87 in #2342
• Update JWT in tests and add flaky reruns to common failures by @ciarams87 in #2349
• Add retries to more tests. by @ciarams87 in #2355
• Add default options to tests by @lucacome in #2364
• Shuffle tests by @jjngx in #2450
• Show coverage report in HTML format by @jjngx in #2465
• Show available make targets by @jjngx in #2467
• Add Test to check server block inside VS yaml by @pasmant in #2415
• Run unit tests in parallel by @jjngx in #2480
• Bump pytest from 7.0.1 to 7.1.0 in /perf-tests by @dependabot in #2487
• Run tests for AWS by @lucacome in #2483
• Update automated tests to support IPv6 by @eufinco in #2577
• Add parameter for ipFamily in kind by @lucacome in #2578

🔨 Maintenance

• Remove reviewer from dependabot by @lucacome in #2338
• Update labels for UBI based images by @lucacome in #2354
• Pass patch file to golangci-lint, align with CI by @lucacome in #2365
• Push Plus images to gcr.io by @lucacome in #2312
• Remove push on PRs for Plus, add nightly by @lucacome in #2375
• Use IC_VERSION only on tags in CI by @lucacome in #2382
• Use actions/github-script to get data for notifications by @lucacome in #2385
• Remove auto rebase on PRs by @ciarams87 in #2386
• Add architecture and k8s version to logs by @lucacome in #2403
• Update syslog image tag by @pleshakov in #2413
• Fix notification and add alpine-opentracing by @lucacome in #2406
• Fix CVE-2022-24407 by @ciarams87 in #2453
• Use Docker cache only in PRs by @lucacome in #2460
• Fix for CVE-2022-24407 in Debian by @ciarams87 in #2461
• Create config.yml by @lucacome in #2474
• Update .gitignore by @lucacome in #2472
• Update parameters for Trivy by @lucacome in #2473
• Fix CVE-2022-23308 by @ciarams87 in #2485
• Fix for CVE-2022-0778 and CVE-2021-4160 by @ciarams87 in #2496
• Don't cancel other jobs if one fails by @lucacome in #2503
• Add labels for Artifact Hub by @lucacome in #2524
• Respond to issue only for non-members by @lucacome in #2515
• Restore running nightly for Plus by @lucacome in #2448
• Remove extra kind nodes, add ipv6 (dual stack) by @lucacome in #2367
• Revert change for k8s version in updater by @lucacome in #2542
• Use ipv4 in kind for k8s < 1.20 by @lucacome in #2548
• Restore binary upload by @lucacome in #2543
• Fix CVE and remove unnecessary package installs for debian by @ciarams87 in #2574
• Use Dockerfile 1.4 by @lucacome in #2567
• Add build for AWS Marketplace by @lucacome in #2556
• Replace Release Drafter with GitHub API by @lucacome in #2584
• Update release step in CI by @lucacome in #2598

⬆️ Dependencies

• Bump aquasecurity/trivy-action from 0.2.0 to 0.2.1 by @dependabot in #2330
• Bump requests from 2.26.0 to 2.27.1 in /perf-tests by @dependabot in #2332
• Bump requests from 2.26.0 to 2.27.1 in /tests by @dependabot in #2331
• Bump sigs.k8s.io/controller-tools from 0.7.0 to 0.8.0 by @dependabot in #2336
• Bump urllib3 from 1.26.7 to 1.26.8 in /tests by @dependabot in #2345
• Bump urllib3 from 1.26.7 to 1.26.8 in /perf-tests by @dependabot in #2344
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.9.0 to 1.10.0 by @dependabot in #2347
• Bump github.com/aws/aws-sdk-go-v2/config from 1.11.1 to 1.12.0 by @dependabot in #2348
• Bump kind to 1.23.1 by @lucacome in #2350
• Applies Jan doc theme update to master by @travisamartin in #2353
• Bump github.com/aws/aws-sdk-go-v2/config from 1.12.0 to 1.13.0 by @dependabot in #2358
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.10.0 to 1.11.0 by @dependabot in #2357
• Bump github.com/prometheus/client_golang from 1.11.0 to 1.12.0 by @dependabot in #2366
• Bump k8s.io/client-go from 0.23.1 to 0.23.2 by @dependabot in #2372
• Bump github.com/google/go-cmp from 0.5.6 to 0.5.7 by @dependabot in #2369
• Bump k8s.io/code-generator from 0.23.1 to 0.23.2 by @dependabot in #2371
• Update packages for CVE-2021-3995 and CVE-2021-3996 by @lucacome in #2381
• Bump k8s.io/client-go from 0.23.2 to 0.23.3 by @dependabot in #2393
• Bump k8s.io/code-generator from 0.23.2 to 0.23.3 by @dependabot in #2392
• Bump nginx from 1.21.5 to 1.21.6 in /build by @dependabot in #2388
• Bump library/nginx from 1.21.5-alpine to 1.21.6-alpine in /build by @dependabot in #2387
• Bump opentracing/nginx-opentracing from nginx-1.21.5 to nginx-1.21.6 in /build by @dependabot in #2397
• Bump locust from 2.5.1 to 2.6.1 in /perf-tests by @dependabot in #2389
• Bump github.com/prometheus/client_golang from 1.12.0 to 1.12.1 by @dependabot in #2401
• Bump locust from 2.6.1 to 2.7.0 in /perf-tests by @dependabot in #2400
• Bump github.com/aws/aws-sdk-go-v2/config from 1.13.0 to 1.13.1 by @dependabot in #2402
• Bump pyopenssl from 21.0.0 to 22.0.0 in /tests by @dependabot in #2399
• Bump locust from 2.7.0 to 2.7.1 in /perf-tests by @dependabot in #2408
• Bump aquasecurity/trivy-action from 0.2.1 to 0.2.2 by @dependabot in #2407
• Update packages for CVE-2022-22822 by @lucacome in #2433
• Bump kubernetes from 21.7.0 to 22.6.0 in /tests by @dependabot in #2426
• Bump actions/github-script from 5 to 6 by @dependabot in #2422
• Bump pytest from 6.2.5 to 7.0.1 in /tests by @dependabot in #2423
• Bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.3.0 by @dependabot in #2419
• Bump pytest from 4.4.1 to 7.0.1 in /perf-tests by @dependabot in #2425
• Bump locust from 2.7.1 to 2.8.2 in /perf-tests by @dependabot in #2424
• Bump kubernetes from 21.7.0 to 22.6.0 in /perf-tests by @dependabot in #2427
• Bump k8s.io/client-go from 0.23.3 to 0.23.4 by @dependabot in #2438
• Bump k8s.io/code-generator from 0.23.3 to 0.23.4 by @dependabot in #2440
• Bump grpcio from 1.43.0 to 1.44.0 in /tests by @dependabot in #2443
• Bump grpcio-tools from 1.43.0 to 1.44.0 in /tests by @dependabot in #2442
• Bump kind to 1.22.5 and 1.23.3 by @lucacome in #2437
• Bump github.com/aws/aws-sdk-go-v2/config from 1.13.1 to 1.14.0 by @dependabot in #2458
• Bump locust from 2.8.2 to 2.8.3 in /perf-tests by @dependabot in #2457
• Bump golangci/golangci-lint-action from 2 to 3 by @dependabot in #2456
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.11.0 to 1.12.0 by @dependabot in #2459
• Bump kubernetes from 22.6.0 to 23.3.0 in /tests by @dependabot in #2463
• Bump kubernetes from 22.6.0 to 23.3.0 in /perf-tests by @dependabot in #2464
• Bump actions/checkout from 2 to 3 by @dependabot in #2469
• Bump github.com/aws/aws-sdk-go-v2/config from 1.14.0 to 1.15.0 by @dependabot in #2476
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.12.0 to 1.13.0 by @dependabot in #2477
• Bump kind versions by @lucacome in #2478
• Bump pytest from 7.0.1 to 7.1.0 in /tests by @dependabot in #2486
• Bump locust from 2.8.3 to 2.8.4 in /perf-tests by @dependabot in #2494
• Bump urllib3 from 1.26.8 to 1.26.9 in /tests by @dependabot in #2498
• Bump urllib3 from 1.26.8 to 1.26.9 in /perf-tests by @dependabot in #2499
• Bump k8s.io/client-go from 0.23.4 to 0.23.5 by @dependabot in #2509
• Bump k8s.io/code-generator from 0.23.4 to 0.23.5 by @dependabot in #2507
• Bump pytest from 7.1.0 to 7.1.1 in /tests by @dependabot in #2512
• KIC March 2022 theme bump by @travisamartin in #2518
• Bump pytest from 7.1.0 to 7.1.1 in /perf-tests by @dependabot in #2511
• Update packages for CVE-2022-0778 by @lucacome in #2514
• Bump actions/cache from 2 to 3 by @dependabot in #2521
• Add kind in Dockerfile to extract version by @lucacome in #2523
• Bump peter-evans/dockerhub-description from 2 to 3 by @dependabot in #2526
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.0 to 1.13.1 by @dependabot in #2532
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.0 to 1.15.1 by @dependabot in #2533
• Bump grpcio from 1.44.0 to 1.45.0 in /tests by @dependabot in #2536
• Bump grpcio-tools from 1.44.0 to 1.45.0 in /tests by @dependabot in #2537
• Bump kindest/node from v1.23.4 to v1.23.5 in /tests/docker by @dependabot in #2539
• Update packages for CVE-2022-0891, CVE-2021-33574, CVE-2021-3997 and CVE-2022-23308 by @lucacome in #2547
• Bump Go to 1.18 by @lucacome in #2549
• Bump github.com/golang-jwt/jwt/v4 from 4.3.0 to 4.4.1 by @dependabot in #2551
• Bump locust from 2.8.4 to 2.8.5 in /perf-tests by @dependabot in #2550
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.1 to 1.15.2 by @dependabot in #2544
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.1 to 1.13.2 by @dependabot in #2545
• Update packages for CVE-2018-25032 and CVE-2022-0778 by @lucacome in #2559
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.2 to 1.15.3 by @dependabot in #2570
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.2 to 1.13.3 by @dependabot in #2569
• Bump codecov/codecov-action from 2 to 3 by @dependabot in #2579
• Bump actions/setup-go from 2 to 3 by @dependabot in #2588
• Bump actions/stale from 4 to 5 by @dependabot in #2587
• Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 by @dependabot in #2590
• Bump locust from 2.8.5 to 2.8.6 in /perf-tests by @dependabot in #2589
• Bump actions/upload-artifact from 2 to 3 by @dependabot in #2586
• Bump actions/download-artifact from 2 to 3 by @dependabot in #2585
• Update packages for CVE-2022-1271 by @lucacome in #2596
• Bump aquasecurity/trivy-action from 0.2.2 to 0.2.3 by @dependabot in #2594

New Contributors

• @sagikazarmark made their first contribution in #2294
• @Juneezee made their first contribution in #2346
• @jjngx made their first contribution in #2450
• @haywoodsh made their first contribution in #2470
• @eufinco made their first contribution in #2577

Full Changelog: v2.1.2...v2.2.0

Upgrade

• For NGINX, use the v2.2.0 image from our DockerHub, GitHub Container or Amazon ECR Public Gallery.
• For NGINX Plus, use the v2.2.0 image from the F5 Container registry or the AWS Marketplace or build your own image using the v2.2.0 source code.
• For Helm, use version 0.13.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v2.2.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v2.2.0/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-operator/