helm-chart-4.10.0

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.10.0 - NGINX v1.25 is finally here

Hi all,

We are happy to announce Ingress NGINX v1.10.0, with the very much expected update of NGINX to v1.25.

Here is some changelog, please make sure you read it all, including the breaking changes :)

Breaking changes

• This version does not support chroot image, this will be fixed on a future minor patch release
• This version dropped Opentracing and zipkin modules, just Opentelemetry is supported as of this release
• This version dropped support for PodSecurityPolicy
• This version dropped support for GeoIP (legacy). Only GeoIP2 is supported

controller-v1.10.0

Images:

• registry.k8s.io/ingress-nginx/controller:v1.10.0@sha256:42b3f0e5d0846876b1791cd3afeb5f1cbbe4259d6f35651dcc1b5c980925379c

All changes:

• bump nginx to v1.25 and Go to v1.22, remove tag file and old CI jobs (#11037)
• Fix kubewebhook image tag (#11033)
• add missing backend-protocol annotation option (#9545)
• Update controller-prometheusrules.yaml (#8902)
• Stop reporting interrupted tests (#11027)
• test(gzip): reach ingress (#9541)
• fix datasource, $exported_namespace variable in grafana nginx dashboard (#9092)
• Properly support a TLS-wrapped OCSP responder (#10164)
• Fix print-e2e-suite (#9536)
• chore(deps): upgrade headers-more module to 0.37 (#10991)
• Update ingress-path-matching.md (#11008)
• Update ingress-path-matching.md (#11007)
• E2E Tests: Explicitly enable metrics. (#10962)
• Chart: Set --enable-metrics depending on controller.metrics.enabled. (#10959)
• Chart: Remove useless default from _params.tpl. (#10957)
• Fix golang makefile var name (#10932)
• Fixing image push (#10931)
• fix: live-docs script (#10928)
• docs: Add vouch-proxy OAuth example (#10929)
• Add OTEL build test and for NGINX v1.25 (#10889)
• docs: update annotations docs with missing session-cookie section (#10917)
• Release controller 1.9.6 and helm 4.9.1 (#10919)

Dependency updates:

• Bump kubewebhook certgen (#11034)
• Bump go libraries (#11023)
• Bump modsecurity on nginx 1.25 (#11024)
• Bump grpc and reintroduce OTEL compilation (#11021)
• Bump github/codeql-action from 3.24.0 to 3.24.5 (#11017)
• Bump actions/dependency-review-action from 4.0.0 to 4.1.3 (#11016)
• Bump dorny/paths-filter from 3.0.0 to 3.0.1 (#10994)
• Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 (#10998)
• Bump actions/upload-artifact from 4.3.0 to 4.3.1 (#10978)
• Bump actions/download-artifact from 4.1.1 to 4.1.2 (#10981)
• Bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 (#10979)
• Bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 (#10980)
• Bump golang.org/x/crypto from 0.18.0 to 0.19.0 (#10976)
• Bump github/codeql-action from 3.23.2 to 3.24.0 (#10971)
• Bump github.com/opencontainers/runc from 1.1.11 to 1.1.12 (#10951)
• Bump google.golang.org/grpc from 1.60.1 to 1.61.0 (#10938)
• Bump actions/upload-artifact from 4.2.0 to 4.3.0 (#10937)
• Bump dorny/test-reporter from 1.7.0 to 1.8.0 (#10936)
• Bump github/codeql-action from 3.23.1 to 3.23.2 (#10935)
• Bump dorny/paths-filter from 2.11.1 to 3.0.0 (#10934)
• Bump alpine to 3.19.1 (#10930)
• Bump go to v1.21.6 and set a single source of truth (#10926)

Full Changelog: controller-v1.9.6...controller-v1.10.0

helm-chart-4.7.5

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.8.5

Changelog

1.8.5

Images:

• registry.k8s.io/ingress-nginx/controller:v1.8.5@sha256:5831fa630e691c0c8c93ead1b57b37a6a8e5416d3d2364afeb8fe36fe0fef680
• registry.k8s.io/ingress-nginx/controller-chroot:v1.8.5@sha256:ee2b5fa0f223285d8d1f8159ebbcb668ed4b0a766409add990de144480cfb300

All Changes

• Upgrade Alpine to 3.19.0 (#10903)
• Release helm chart on the correct version (#10521)

Dependencies updates:

Full Changelog: controller-v1.8.4...controller-v1.8.5

helm-chart-4.9.1

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.9.6

Changelog

controller-v1.9.6

Images:

• registry.k8s.io/ingress-nginx/controller:v1.9.6@sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c
• registry.k8s.io/ingress-nginx/controller-chroot:v1.9.6@sha256:7eb46ff733429e0e46892903c7394aff149ac6d284d92b3946f3baf7ff26a096

All changes:

• update web hook cert gen to latest release v20231226-1a7112e06
• annotation validation: validate regex in common name annotation (#10880)
• change MODSECURITY_VERSION_LIB to 3.0.11 (#10879)
• Include SECLEVEL and STRENGTH as part of ssl-cipher list validation (#10871)

Dependency updates:

• Bump github.com/opencontainers/runc from 1.1.10 to 1.1.11 (#10878)

Full Changelog: controller-v1.9.5...controller-v1.9.6

helm-chart-4.9.0

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.9.5

controller-v1.9.5

Images:

• registry.k8s.io/ingress-nginx/controller:v1.9.5@sha256:b3aba22b1da80e7acfc52b115cae1d4c687172cbf2b742d5b502419c25ff340e
• registry.k8s.io/ingress-nginx/controller-chroot:v1.9.5@sha256:9a8d7b25a846a6461cd044b9aea9cf6cad972bcf2e64d9fd246c0279979aad2d

All changes:

• update nginx build (#10781)
• update images from golang upgrade (#10762)
• fix: remove tcpproxy copy error handling (#10715)
• Ignore fake certificate for NGINXCertificateExpiry (#10694)
• Comment NGINXCertificateExpiry alert label matcher (#10692)
• chart: allow setting allocateLoadBalancerNodePorts (#10693)
• [release-1.9] feat(helm): add documentation about metric args (#10695)
• chore(dep): change lua-resty-cookie's repo (#10691)
• annotation validation - extended URLWithNginxVariableRegex from alphaNumericChars to extendedAlphaNumeric (#10656)
• fix: adjust unfulfillable validation check for session-cookie-samesite annotation (#10604)
• fix: Validate x-forwarded-prefix annotation with RegexPathWithCapture (#10603)
• Increase HSTS max-age to default to one year (#10580)
• [release-1.9] update nginx base, httpbun, e2e, helm webhook cert gen (#10507)
• [release-1.9] add upstream patch for CVE-2023-44487 (#10499)
• fix brotli build issues (#10468)
• upgrade owasp modsecurity core rule set to v3.3.5 (#10437)
• Accept backend protocol on any case (#10461)
• Chart: Rework network policies. (#10438)
• Rework mage (#10418)

Dependency updates:

• Bump x/net (#10517)
• Bump google.golang.org/grpc from 1.58.0 to 1.58.1 (#10436)

Full Changelog: controller-v1.9.4...controller-v1.9.5

helm-chart-4.8.3

Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer

controller-v1.9.4

Changelog

1.9.4

Images:

• registry.k8s.io/ingress-nginx/controller:v1.9.4@sha256:5b161f051d017e55d358435f295f5e9a297e66158f136321d9b04520ec6c48a3
• registry.k8s.io/ingress-nginx/controller-chroot:v1.9.4@sha256:5976b1067cfbca8a21d0ba53d71f83543a73316a61ea7f7e436d6cf84ddf9b26

All Changes:

• Cherry pick fcgi fix and release v1.9.4 (#10544)

Full Changelog: controller-controller-v1.9.3...controller-controller-v1.9.4