nginx/kubernetes-ingress v3.0.0

on GitHub

What's Changed

🚀 Features

• Add JSON Schema for Helm Chart by @lucacome in #3113
• add caseSensitiveHttpHeaders to appolicy crd by @galitskiy in #3133
• Add annotations for deployment and daemonset by @jasonwilliams14 in #3143
• Support default client proxy headers to be overwritten in VirtualServer by @centromere in #2735
• feature: Support Dynamic namespaces using Labels by @ciarams87 in #3299
• Deep service insight endpoint by @haywoodsh in #3261
• Add healthcheck for transport server by @jjngx in #3361
• Import JWKS from URL on JWT policy by @haywoodsh in #3347

💣 Breaking Changes

• Add support for EndpointSlices by @shaun-nx in #3260

🐛 Bug Fixes

• Remove all IPV6 listeners in ingress resources with -disable-ipv6 command line by @haywoodsh in #3139
• Update script logic for validating tag by @shaun-nx in #3237
• Fix git command to retrieve commit matching the tag by @lucacome in #3239

📝 Documentation

• Merge release 2.4 to main by @lucacome in #3128
• Re-order and adjust custom resource headings for installation via manifest by @ADubhlaoich in #3141
• Add OpenSSF Scorecard Github Action and Badge by @lucacome in #3132
• Add controller.dnsPolicy to the helm chart by @wd in #3136
• Fix typo in Action.Proxy.ResponseHeaders by @tomasohaodha in #3157
• feat: October/22 f5-hugo theme bump by @ADubhlaoich in #3182
• Helm Chart: Add annotations to the service account in the Helm chart by @0m1xa in #3065
• fix: fix 2 broken links by @Jcahilltorre in #3211
• Use nginxcontrib/nginx as base image for UBI by @lucacome in #2845
• Docs for 2.4.1 (#3184) by @ciarams87 in #3194
• Run pre-commit to fix whitespaces/newlines by @lucacome in #3223
• Watch subset of namespaces for secrets by @hafe in #3170
• feat: F5-hugo Theme bump - November by @ADubhlaoich in #3263
• Fix typos and links version by @lucacome in #3264
• add missing controller.config.annotation docs by @coolbry95 in #3285
• Add pytest command line option to skip resource teardown by @vepatel in #3291
• Allow configuration of map-hash-bucket-size and map-hash-max-size directives by @shaun-nx in #3274
• add horizontalpodautoscaler by @coolbry95 in #3276
• Bump NGINX Plus to R28 by @ciarams87 in #3320
• Release 2.4.2 (#3323) by @ciarams87 in #3331
• Set value of $remote_addr to client IP when TLSPassthrough and Proxy Protocol are enabled by @shaun-nx in #3341
• NSM OSS integration by @chase-kiefer in #3376
• fix: update github url for app-protect-waf by @Jcahilltorre in #3412
• feat: Fix minor issues, add docs contribution quickstart. by @ADubhlaoich in #3337
• Release 3.0.0 by @jjngx in #3429

🧪 Tests

• Update helloworld grpc generated file by @lucacome in #3220
• Run pre-commit to fix whitespaces/newlines in tests by @lucacome in #3226
• Run pre-commit hooks to fix python test imports by @lucacome in #3221
• Add automated tests for -watch-secret-namespace by @vepatel in #3245
• Move Docker build into reusable workflows, add NAP WAF by @lucacome in #3250
• Tests/flakiness tests ci kind by @vepatel in #3266
• Add more 502 checks for test backends by @vepatel in #3275
• Add retry mechanism for 502s by @vepatel in #3298
• Add hashes to python deps by @lucacome in #3305
• Add comments to requirements.txt by @lucacome in #3382

🔨 Maintenance

• [StepSecurity] ci: Harden GitHub Actions by @step-security-bot in #3134
• Add make target for running staticcheck locally by @jjngx in #3110
• Push NAP DoS image to AWS Marketplace by @lucacome in #3131
• Restore pushing edge for Plus images by @lucacome in #3162
• Add CODEOWNERS by @lucacome in #3151
• Run CI for docs changes by @lucacome in #3163
• Update test action by @lucacome in #3189
• Add pre-commit configuration by @lucacome in #2154
• Fix Makefile var overrides (#3224) by @hafe in #3225
• Unwrap error by @lucacome in #3234
• Remove unnecessary arg in generateTransportServerHealthCheckWithDefaults by @lucacome in #3236
• Always print build info, add flags used by @lucacome in #3231
• Remove ineffective break by @lucacome in #3235
• Add context to http calls by @lucacome in #3233
• Refactor watchers - Create separate type for namespaced informers by @ciarams87 in #3238
• Run golangci-lint in pre-commit only for changed files by @lucacome in #3247
• Add linter for GitHub Actions by @lucacome in #3251
• Update packages for CVEs by @lucacome in #3258
• Drop support for k8s < 1.21 by @lucacome in #3252
• Update minimum version in k8s version check by @ciarams87 in #3265
• fix: Pin ubi8 image to unblock nap ubi builds by @ciarams87 in #3267
• Bump GitHub runner to Ubuntu 22.04 by @lucacome in #3273
• Add NAP builds for UBI by @lucacome in #3272
• Remove version check in controller-service.yaml by @lucacome in #3282
• Update Helm Chart JSON Schema by @lucacome in #3283
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #3289
• Update Scorecards workflow by @lucacome in #3290
• [StepSecurity] ci: Harden GitHub Actions by @step-security-bot in #3286
• [StepSecurity] Apply security best practices by @step-security-bot in #3292
• Add notifications for Build workflows by @lucacome in #3304
• Add label for Helm Chart by @lucacome in #3284
• Fix for CVE-2022-42898 by @ciarams87 in #3322
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #3315
• Fix conditions for Docker build and cache name by @lucacome in #3340
• Restore versioned repo by @lucacome in #3348
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #3362
• Add k8s 1.25 to the nightly matrix by @lucacome in #3359
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #3378
• Update packages and dependencies for CVEs by @lucacome in #3384
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #3395
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #3417

⬆️ Dependencies

New Contributors

• @step-security-bot made their first contribution in #3134
• @0m1xa made their first contribution in #3065
• @pre-commit-ci made their first contribution in #3289
• @chase-kiefer made their first contribution in #3376

Full Changelog: v2.4.2...v3.0.0

Upgrade

• For NGINX, use the v3.0.0 image from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.0.0 image from the F5 Container registry or the AWS Marketplace or build your own image using the v3.0.0 source code.
• For Helm, use version 0.16.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.0.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.0.0/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-operator/