nginxinc/kubernetes-ingress v3.6.0

on GitHub

What's Changed

🚀 Features

• Preserve valid listeners when invalid listeners are present in GlobalConfiguration by @haywoodsh in #5205
• Add proxy-set-headers annotation for ingress by @AlexFenlon in #5366
• Add telemetry data - ingresses by @jjngx in #5406
• add service count metric to telemetry by @j1m-ryan in #5408
• Add Ingress Classes to Telemetry data by @jjngx in #5418
• Add policies count to telemetry by @AlexFenlon in #5457
• Add support for headers in action return by @andrew-s in #5204
• Add Granular Policy count for telemetry by @AlexFenlon in #5489
• Add Ingress Annotation List to Telemetry by @AlexFenlon in #5516
• Add AppProtectVersion to Telemetry by @AlexFenlon in #5554
• Add IsPlus to Telemetry by @AlexFenlon in #5571
• Add Installation Flags to Telemetry by @AlexFenlon in #5586
• Scale ratelimit with ingress pods by @dbaumgarten in #5113
• Add Granular Ingress Counts to Telemetry by @AlexFenlon in #5608
• Add Granular Services Counts to Telemetry by @AlexFenlon in #5627
• enable external service args by @vepatel in #5736
• Integrate NAP WAF v5 by @shaun-nx in #5698
• Support APIKey authentication by @haywoodsh in #5580

🐛 Bug Fixes

• fix ap-waf flag in error message by @vepatel in #5350
• Don't reload when use-cluster-ip endpoints update, and change the ingress use-cluster-ip implementation to use the cluster ip instead of the fqdn by @j1m-ryan in #5318
• fix status for invalid vs and vsr, for weight changes dynamic reload by @j1m-ryan in #5375
• pin ap compiler by @vepatel in #5433
• Add support for named ports in ingresses which use-cluster-ip by @j1m-ryan in #5456
• Fix nginx breaking & remove unused code for ProxySetHeaders annotation by @AlexFenlon in #5426
• Fix error messages by @jjngx in #5542
• Fix incorrect errors showing in Telemetry by @AlexFenlon in #5561
• Don't count Custom Resources if not enabled at NIC startup by @jjngx in #5749
• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• fix api key policy undefined routes by @j1m-ryan in #5838

📦 Helm Chart

• Remove the before NGINX Ingress Controller in some cases by @j1m-ryan in #5274
• Version Bump for 3.6.0 by @nginx-bot in #5285
• correct helm version in docs by @pdabelf5 in #5287
• update helm flag in docs for enableWeightChangesDynamicReload by @j1m-ryan in #5313
• docs version update to 3.5.0 by @pdabelf5 in #5327
• Collect count of secrets by @shaun-nx in #5404
• add local helm schema validation by @pdabelf5 in #5493
• 3.5.1 docs update by @pdabelf5 in #5520
• Revert "add local helm schema validation" by @oseoin in #5528
• Release 3.5.2 by @pdabelf5 in #5678
• helm: add knob to control cluster level rbac rendering by @hafe in #5229
• update values schema from 1.29 to 1.30 by @j1m-ryan in #5772
• Version Bump for 3.7.0 by @nginx-bot in #5828

🧪 Tests

• Wait before assertion in weight changes dynamic reload test by @j1m-ryan in #5302
• simplify smoke-test action by @pdabelf5 in #5311
• enable logging in tests by @vepatel in #5499
• Revert "enable logging in tests" by @oseoin in #5543
• Bump kindest/node from v1.29.2 to v1.30.0 in /tests in the docker-tests group across 1 directory by @dependabot in #5549
• add files for upgrade tests by @vepatel in #5553
• Docker image update d41d8cd9 by @nginx-bot in #5570
• exclude upgrade files from nightly regression tests by @vepatel in #5581
• add wait to dos test by @vepatel in #5656
• skip dos log test by @vepatel in #5658
• Fix test_dos_sec_logs_on by @pasmant in #5725
• Mount config and deployments dirs to smoke containers by @oseoin in #5740
• Docker image update d41d8cd9 by @nginx-bot in #5743
• replace skopeo action with skopeo image by @pdabelf5 in #5760
• add functional tests for rate-limit scaling by @vepatel in #5758
• check pod readiness in ingress scale test by @vepatel in #5774
• Workflow refactor by @pdabelf5 in #5766
• add docker scout scan to pipelines by @pdabelf5 in #5759
• Docker image update d41d8cd9 by @nginx-bot in #5822
• check for non 50x 404 response by @vepatel in #5851

🔨 Maintenance

📝 Documentation

• Fix incorrect example versions by @oseoin in #5300
• Security monitoring docs by @oseoin in #5301
• Documentation maintenance: tooling update and metadata fixes. by @ADubhlaoich in #5328
• Fix heading in agent config doc by @oseoin in #5356
• update doc for waf-dos image by @vepatel in #5360
• Update community call dates by @danielnginx in #5367
• use inclusive language by @vepatel in #5396
• fix link to rbac template by @vepatel in #5410
• fix example path by @vepatel in #5414
• Add docs for proxy-set-header annotation in Ingress by @AlexFenlon in #5413
• Collect usage of GlobalConfiguration resources by @shaun-nx in #5415
• Remove community call time column by @j1m-ryan in #5424
• Add examples for ProxySetHeaders Annotation by @AlexFenlon in #5431
• Remove bank holiday from community call dates by @j1m-ryan in #5477
• Added replaceAll support for go templates by @fabriziofiorucci in #5468
• Rewrite "Security recommendations" page. by @ADubhlaoich in #5342
• update operator version by @vepatel in #5564
• Fix codeblock languages, prefix instances by @ADubhlaoich in #5604
• NAP link fixes & improvements to troubleshooting documentation by @ADubhlaoich in #5605
• update google marketplace links by @vepatel in #5615
• Added missing "cd" command by @fabriziofiorucci in #5614
• add azure marketplace link by @vepatel in #5619
• Update Community Call Dates by @AlexFenlon in #5639
• update release 3.5.2 docs by @vepatel in #5684
• Add grpc example by @vepatel in #5699
• Add F5 prefix to configuration opening paragraphs, style consistency by @ADubhlaoich in #5737
• Update top level documentation pages for style consistency by @ADubhlaoich in #5754
• API Key Auth Policy Docs by @j1m-ryan in #5752
• Add examples for app protect waf v5 by @shaun-nx in #5784
• WAF v5 docs update by @jjngx in #5719
• fix path by @vepatel in #5847
• change telemetry to telemetryReporting in docs by @j1m-ryan in #5855

⬆️ Dependencies

Other Changes

• allow to choose previous nic/chart version by @pdabelf5 in #5276
• correct docs PR workflow variable by @pdabelf5 in #5279
• add merge queue support to workflows by @pdabelf5 in #5278
• remove gcr marketplace publish step by @pdabelf5 in #5309
• add build_tag variables by @pdabelf5 in #5316
• disable telemetry in helm tests by @pdabelf5 in #5336
• codecov v4 needs a token to upload results by @pdabelf5 in #5338
• remove unused variable from Dockerfile target by @pdabelf5 in #5341
• add script/config for tagging & pushing images by @pdabelf5 in #5343
• add image release workflows by @pdabelf5 in #5348
• recalculate forked_workflow variable by @pdabelf5 in #5352
• add release workflows by @pdabelf5 in #5346
• remove labeler config workaround by @pdabelf5 in #5382
• only apply test label to test file changes by @pdabelf5 in #5386
• Remove redundant import in telemetry package by @jjngx in #5423
• update nap logconf CRD by @galitskiy in #5273
• Add unit tests for replaceAll by @vepatel in #5481
• Remove unused var by @jjngx in #5541
• Remove deprecated Go code by @jjngx in #5559
• Fix error msg to comply with a Go linter by @jjngx in #5582
• Docker image update d41d8cd9 by @nginx-bot in #5637
• NGINX Plus R32 by @oseoin in #5649
• Update debian build stages to use gpg over sq by @shaun-nx in #5664
• update opentracing images to 1.27.0 by @pdabelf5 in #5674
• Test reducing size of UBI NAP images by @oseoin in #5613
• Fix ratelimit-scaling for mergable ingresses #5727 by @dbaumgarten in #5728
• update debian nap waf/dos image to debian:12 by @pdabelf5 in #5780
• Re-add docs string to telemetry schema file by @shaun-nx in #5775
• Docker image update d41d8cd9 by @nginx-bot in #5808
• Fix build arg for templates by @oseoin in #5844

New Contributors

• @andrew-s made their first contribution in #5204

Full Changelog: v3.5.2...v3.6.0

Upgrade

• For NGINX, use the 3.6.0 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the 3.6.0 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.6.0 source code.
• For Helm, use version 1.3.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/3.6.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/3.6.0/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator