nginxinc/kubernetes-ingress v3.7.0

on GitHub

What's Changed

🚀 Features

• Add BUILD_OS to Telemetry by @AlexFenlon in #5968
• Sync oidc repo by @haywoodsh in #6014
• Support End Session Endpoint for OIDC and allow customizable Post-logout Redirect URI by @haywoodsh in #6092
• Make access_log in http context configurable by @hafe in #5648
• Add ip as an option to listeners for VirtualServer by @AlexFenlon in #6180
• Add ip as an option to listeners for TransportServer by @j1m-ryan in #6367

🐛 Bug Fixes

• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• Fix api key policy undefined routes by @j1m-ryan in #5838
• Add default telemetry endpoint by @shaun-nx in #5885
• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5899
• Don't log errors for not implemented grpc metrics by @jjngx in #6125
• Fix panic when creating VirtualServer by @hafe in #6232
• Create unique lease obj for each NIC installed via Helm by @jjngx in #6372
• Fix udp/http listener validation logic by @j1m-ryan in #6406
• Disable batch reload when batch finishes by @dareste in #6446
• grafana template update that works with grafana v11.2.0 (#6511) by @jjngx in #6526

📦 Helm Chart

• Remove include-year and includeYear flag by @harsha-mangena in #5817
• Choose NodePort values for controller.service.type = LoadBalancer by @Falltrades in #5335
• Update helm docs by @vepatel in #6235
• [cherry-pick] WAFv5 update to 5.3/alpine update by @nginx-bot in #6510
• Release 3.7.0 by @nginx-bot in #6480

🧪 Tests

• Check for non 50x 404 response by @vepatel in #5851
• Chore/python clean up, and unused variable check to pre commit by @j1m-ryan in #5866
• Split VSR matrix in 3 by @j1m-ryan in #5883
• Move some python tests from vs1 to vs2 by @j1m-ryan in #5888
• Pod logs in tests when startup fails by @oseoin in #5901
• Make markers strict, and add project.toml to local python tests, by @j1m-ryan in #5911
• Add flaky label to some flaky tests by @j1m-ryan in #5955
• Dos - Allow list by @pasmant in #5824
• Reduce NAP CI time by @j1m-ryan in #5999
• Add test to check for agent by @vepatel in #6111
• Move test to correct directory by @vepatel in #6114
• Assert version from log and chart by @vepatel in #6307
• Add NIC+WAFv5 tests by @vepatel in #6456
• Add retry to version check in logs by @nginx-bot in #6504

🔨 Maintenance

📝 Documentation

• WAF v5 docs update by @jjngx in #5719
• fix path by @vepatel in #5847
• change telemetry to telemetryReporting in docs by @j1m-ryan in #5855
• Remove enable preview policies flag from docs by @j1m-ryan in #5891
• Add transportserver-template config by @ssrahul96 in #5194
• remove reference to auth_request off by @j1m-ryan in #5925
• add scc and update deployment by @vepatel in #5934
• Update readme to show the regression workflow results by @j1m-ryan in #5966
• change supported version order by @j1m-ryan in #5989
• update WAF v5 documentation by @vepatel in #6018
• Fix: Add security note about JWT and passwords in shell history by @mjang in #6011
• Update custom http listener example readme by @AlexFenlon in #6036
• Update plain Markdown callouts to Hugo callouts by @ADubhlaoich in #6038
• bump versions of alpine fips modules by @pdabelf5 in #5905
• update keycloak version in OIDC example by @haywoodsh in #6049
• remove link to ingress example by @vepatel in #6101
• Documentation style changes for the "Installation" section by @ADubhlaoich in #6015
• Add WAF policy compile instructions by @ADubhlaoich in #5886
• Update to v0.14.2 of externaldns in examples & docs by @pdabelf5 in #6127
• Change ExternalDNS link to be non-versioned by @ADubhlaoich in #6140
• Fixed broken link by @fabriziofiorucci in #6149
• Docs/wafv5 cfgmgr enfrcr by @vepatel in #6169
• update example for WAF v5 by @vepatel in #6188
• Fix manifest CRD documentation by @ADubhlaoich in #6197
• Fix: broken links by @mjang in #6216
• remove extended body from curl examples by @vepatel in #6238
• add ap wafv5 options in docs by @vepatel in #6241
• move fips note to top of release notes by @pdabelf5 in #6252
• Chore: Fix broken links in docs by @nginx-aoife in #6248
• fix wafv5 docs by @vepatel in #6261
• Update max_message_size to reflect nap behavior change - https://docs.nginx.com/nginx-app-protect-waf/releases/release-notes-4.7/#resolved-issues by @jnewfield in #5209
• Remove deprecated use cases from Helm installation documentation by @ADubhlaoich in #6279
• Add docs for proxy-set-header by @vepatel in #6317
• Fix NAP WAF v5 example link, minor style issues by @ADubhlaoich in #6294
• Update documentation Makefile and README by @ADubhlaoich in #6339
• remove extra endifs by @vepatel in #6352
• update waf v5 docs by @vepatel in #6407
• Fix typo, feedback by @mjang in #6419
• Change dos doc for dosAccessLogDest and dosSecurityLog.dosLogDest by @pasmant in #6429
• Aws mktpl docs updates by @pdabelf5 in #6444
• update aws deployment docs with helm instructions by @pdabelf5 in #6457
• update release description by @vepatel in #6461
• Docs: Update broken URL is docs by @nginx-aoife in #6462
• [cherry-pick] Update community call dates by @nginx-bot in #6508
• Docs: Added Support page (#6467) by @jjngx in #6515

⬆️ Dependencies

Other Changes

• Fix build arg for templates by @oseoin in #5844
• Initial test data for ingress NAP and VS DOS templates by @oseoin in #5922
• Change OpenTracing dependency to local image by @oseoin in #5956
• Move common UBI tasks to script by @oseoin in #5997
• Align OSS and Plus UBI images by @oseoin in #6008
• allow nginx ubi mainline or stable to build by @pdabelf5 in #6113
• Communicate clearly func intent by @jjngx in #6135
• Communicate clearly func intent by @jjngx in #6136
• Fix staticcheck linter complains by @jjngx in #6159
• Remove unused code by @jjngx in #6160
• Add missing tests for template executor and helpers by @jjngx in #6182
• re-order mounting debian apt source file by @pdabelf5 in #6223
• refactor App Protect DoS controller by @pdabelf5 in #6212
• refactor App Protect WAF controller by @pdabelf5 in #6263
• Chore/refactor transport server listens by @j1m-ryan in #6315
• refactor ConfigMap controller by @pdabelf5 in #6321
• refactor EndpointSlice controller by @pdabelf5 in #6323
• Bump documentation theme version by @ADubhlaoich in #6320
• refactor GlobalConfiguration controller by @pdabelf5 in #6327
• move mounted code to fix /tmp file permissions by @pdabelf5 in #6354
• refactor Leader controller by @pdabelf5 in #6349
• refactor IngressLink controller by @pdabelf5 in #6348
• Reduce cyclomatic complexity in controller.go by @j1m-ryan in #6373
• Listener directive refactor by @pdabelf5 in #6377
• refactor TransportServer controller by @pdabelf5 in #6389
• refactor Policy controller by @pdabelf5 in #6388
• Use Go v1.23 alpine as golang_builder by @jjngx in #6392
• move Namespace Controller to it's own file by @pdabelf5 in #6396
• refactor Service Controller to it's own file by @pdabelf5 in #6395
• Fix issues reported by staticcheck by @jjngx in #6415
• Remove double imports by @jjngx in #6416
• Fix error message to comply with staticcheck by @jjngx in #6421
• Remove double import by @jjngx in #6420
• Add benchmark tests for configurator by @jjngx in #6423
• Add initial benchmark tests for NIC by @jjngx in #6422
• [cherry-pick] Docker image update c30328bf by @nginx-bot in #6486
• [cherry-pick] Docker image update e58c873f by @nginx-bot in #6500

New Contributors

• @harsha-mangena made their first contribution in #5817
• @mjang made their first contribution in #6011
• @Falltrades made their first contribution in #5335
• @danielledeleo made their first contribution in #6027
• @defanator made their first contribution in #5057
• @puneetsarna made their first contribution in #6230
• @dareste made their first contribution in #6446

Full Changelog: v3.6.2...v3.7.0

Upgrade

• For NGINX, use the v3.7.0 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.7.0 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.7.0 source code.
• For Helm, use version 1.4.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.0/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator