nginxinc/kubernetes-ingress v3.2.0

on GitHub

What's Changed

🚀 Features

• Gunzip for VS by @jjngx in #3790
• Inherit NET_BIND_SERVICE from IC to Nginx by @sigv in #3722
• Fix/OIDC - relaxed OIDC scope validation by @jjngx in #3863
• Specify runAsNonRoot in daemon-set manifests by @sigv in #3925
• Add support for the SameSite sticky cookie attribute by @jjngx in #4001
• Add Alpine image with FIPS inside by @lucacome in #4031

🐛 Bug Fixes

• Update VirtualServer to ignore CRL for EgressMTLS by @shaun-nx in #3737
• Update VirtualServer template to generate an internal jwt auth location per policy applied by @shaun-nx in #3798
• indent to annotations key in leader-elec cm by @vepatel in #3840
• Fix gunzip support for VS and add python tests by @jjngx in #3844
• Add Funcs() method to UpdateVirtualServerTemplate method by @coolbry95 in #3870
• fix --enternal-service flag when using serviceNameOverride by @timnee in #3933

📦 Helm Chart

• Update Helm docs by @lucacome in #3698
• Updated NGINX Service Mesh references in Helm templates by @jbyers19 in #3602
• Egress via Ingress VirtualServer Resource by @chase-kiefer in #3491
• Swap cpu and memory in HPA template by @coolbry95 in #3773
• added serviceNameOverride by @timnee in #3802
• Fix GlobalConfiguration name in Helm Chart by @lucacome in #3815
• Remove semverCompare for allocateLoadBalancerNodePorts by @centromere in #3814
• Reverse order of NAPDOS maxDaemons and maxWorkers in Helm chart by @ciarams87 in #3905
• Release 3.2.0 by @lucacome in #4055

🧪 Tests

• Update NAP DoS test container by @lucacome in #3663
• Update ca and client certificates for CRL python tests by @shaun-nx in #3764
• update gitlab dockerfile by @vepatel in #3789
• increase counter and add retries to jwks and mtls ingress tests by @vepatel in #3861
• Update expired CRL and Certificates for IngressMTLS python tests by @shaun-nx in #3906
• Skip JWKS tests by @shaun-nx in #3922
• Bail fast if function returns error by @jjngx in #4016

🔨 Maintenance

• Switch to draft-release action by @lucacome in #3675
• Only get the subject of the commit message for notifications by @lucacome in #3689
• Move build docker steps after tests by @lucacome in #3690
• Use OIDC to login to AWS by @lucacome in #3740
• Add k8s 1.26 to nightly run as k8s_latest is 1.27 by @vepatel in #3788
• Add AWS startup log by @lucacome in #3797
• Use appropriate context in metadata-action by @lucacome in #3796
• Use OIDC to login to GCR by @lucacome in #3838
• Simplify validators by @jjngx in #3818
• Simplify validation code for listener protocol by @jjngx in #3885
• Make TransportServer tests run in parallel by @jjngx in #3892
• Update CI by @lucacome in #3836
• Run tests in parallel by @jjngx in #3910
• Simplify validators by @jjngx in #3909
• Update error handling by @jjngx in #3936
• Remove explicit fsGroup definition by @sigv in #3926
• Fix release notes condition by @lucacome in #3950
• Update openid-connect.js by @vepatel in #3995
• Add dependency review workflow and config by @lucacome in #4000
• Update GoReleaser config by @lucacome in #3974
• Update packages for CVEs by @lucacome in #4033
• Cleanup Makefile by @lucacome in #4020
• Update notification and build workflows by @lucacome in #3973
• Update labeler to official action by @lucacome in #4004
• Create tags for OSS images on release branch by @lucacome in #4041
• Make NAP independent from Plus by @lucacome in #4054
• Add step to publish to AWS Marketplace by @lucacome in #4045

📝 Documentation

• Update Service Insight docs by @jjngx in #3684
• Release 3.1.0 by @shaun-nx in #3700
• Example for the service insight feature (VS and TS) by @jjngx in #3691
• Update release file with additional information by @jasonwilliams14 in #3704
• Update correct path for default-server-secret by @jasonwilliams14 in #3713
• Docs theme updates by @jputrino in #3751
• Update docs for operator 1.4.0 by @vepatel in #3762
• Initial install guide for GCP Marketplace Package (#3561) by @lucacome in #3800
• docs: Address two minor issues and update product nouns by @ADubhlaoich in #3736
• Add NGINX Ingress controller with OSM tutorial by @jasonwilliams14 in #3592
• Release 3.1.1 (#3860) by @lucacome in #3869
• Update official Ingress resource link by @ADubhlaoich in #3864
• Update operator docs by @lucacome in #3921
• Add AWS Marketplace images for NAP by @lucacome in #3935
• Add GCP Marketplace to technical-specifications and release by @lucacome in #3951
• update numbering in manifest installation by @vepatel in #4015
• Update theme version, adjust weight of top level pages & sections by @ADubhlaoich in #3979
• Add document to tutorial section for configuring the default oidc implementation by @shaun-nx in #4022
• fix links and product name usage in NAP WAF config guide by @jputrino in #3972
• Custom listen ports document by @jasonwilliams14 in #3715
• Add FIPS to the list of images by @lucacome in #4048
• Update README by @lucacome in #4044
• Tutorial for FCP by @haywoodsh in #3954
• fix: bump hugo theme to 0.33 by @Jcahilltorre in #4060
• NGINX Ingress with Linkerd guide by @jasonwilliams14 in #3993

⬆️ Dependencies

New Contributors

• @jbyers19 made their first contribution in #3602
• @timnee made their first contribution in #3802

Full Changelog: v3.1.1...v3.2.0

Upgrade

• For NGINX, use the v3.2.0 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.2.0 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.2.0 source code.
• For Helm, use version 0.18.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.2.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.2.0/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-operator/