Releases: kubernetes/ingress-nginx
Releases · kubernetes/ingress-nginx
controller-v1.5.1
1.5.1
- Upgrade NGINX to 1.21.6
- Upgrade Golang 1.19.2
- Fix Service Name length Bug 9245
- CVE fixes CVE-2022-32149, CVE-2022-27664, CVE-2022-1996
Images:
- registry.k8s.io/ingress-nginx/controller:v1.5.1@sha256:4ba73c697770664c1e00e9f968de14e08f606ff961c76e5d7033a4a9c593c629
- registry.k8s.io/ingress-nginx/controller-chroot:v1.5.1@sha256:c1c091b88a6c936a83bd7b098662760a87868d12452529bad0d178fb36147345
All Changes:
- chore Fixed to Support Versions table by @yutachaos in #9117
- Updated incorrect version number in the Installation Guide by @afro-coder in #9120
- Updated the Developer guide with New Contributor information by @afro-coder in #9114
- Remove deprecated net dependency by @rikatz in #9110
- Fixed docs helm-docs version by @yutachaos in #9121
- Fix CVE 2022 27664 by @strongjz in #9109
- upgrade to golang 1.19.2 by @strongjz in #9124
- fix e2e resource leak when ginkgo exit before clear resource by @loveRhythm1990 in #9103
- fix: handle 401 and 403 by external auth by @johanneswuerbach in #9131
- Move bowei to emeritus owner by @rikatz in #9150
- fix null ports by @tombokombo in #9149
- Documentation added for implemented redirection in the proxy to ensure image pulling by @Sanghamitra-PERSONAL in #9098
- updating runner with golang 1.19.2 by @strongjz in #9158
- Add install command for OVHcloud by @scraly in #9171
- GitHub Templates: Remove trailing whitespaces. by @Gacko in #9172
- Update helm chart changelog to show that kubernetes v1.21.x is no longer supported by @cskinfill in #9147
- Add section to troubleshooting docs for failure to listen on port by @jrhunger in #9185
- Implement parseFloat for annotations by @kirs in #9195
- fix typo in docs. by @guettli in #9167
- add:(admission-webhooks) ability to set securityContext by @ybelMekk in #9186
- Fix Markdown header level by @jaens in #9210
- chore: bump NGINX version v1.21.4 by @tao12345666333 in #8889
- chore: update NGINX to 1.21.6 by @tao12345666333 in #9231
- fix svc long name by @tombokombo in #9245
- update base image of nginx to 1.21.6 by @strongjz in #9257
- Fix CVE-2022-32149 by @esigo in #9258
- Fix CVE-2022-1996 by @esigo in #9244
- Adding support for disabling liveness and readiness probes to the Helm chart by @njegosrailic in #9238
- fix CVE-2022-27664 by @esigo in #9273
- Add CVE-2022-27664 #9273 in latest release by @strongjz in #9275
Dependencies updates:
- Bump docker/setup-buildx-action from 2.0.0 to 2.1.0 by @dependabot in #9180
- Bump dorny/paths-filter from 2.10.2 to 2.11.1 by @dependabot in #9183
- Bump helm/chart-releaser-action from 1.4.0 to 1.4.1 by @dependabot in #9136
- Bump github/codeql-action from 2.1.25 to 2.1.27 by @dependabot in #9137
- Bump ossf/scorecard-action from 2.0.3 to 2.0.4 by @dependabot in #9138
- Bump google.golang.org/grpc from 1.49.0 to 1.50.0 by @dependabot in #9134
- Bump actions/checkout from 3.0.2 to 3.1.0 by @dependabot in #9135
- Bump actions/dependency-review-action from 2.5.0 to 2.5.1 by @dependabot in #9237
- Bump github/codeql-action from 2.1.28 to 2.1.29 by @dependabot in #9236
- Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in #9233
- Bump actions/upload-artifact from 3.1.0 to 3.1.1 by @dependabot in #9234
- Bump azure/setup-helm from 3.3 to 3.4 by @dependabot in #9235
- Bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.4.0 by @dependabot in #9201
- Bump goreleaser/goreleaser-action from 3.1.0 to 3.2.0 by @dependabot in #9208
- Bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @dependabot in #9202
- Bump ossf/scorecard-action from 2.0.4 to 2.0.6 by @dependabot in #9203
- Bump docker/setup-buildx-action from 2.1.0 to 2.2.1 by @dependabot in #9204
- Bump actions/setup-go from 3.3.0 to 3.3.1 by @dependabot in #9205
- Bump github/codeql-action from 2.1.27 to 2.1.28 by @dependabot in #9206
- Bump actions/download-artifact from 3.0.0 to 3.0.1 by @dependabot in #9207
- Bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 by @dependabot in #9200
- Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @dependabot in #9173
- Bump google.golang.org/grpc from 1.50.0 to 1.50.1 by @dependabot in #9174
- Bump k8s.io/component-base from 0.25.2 to 0.25.3 by @dependabot in #9175
- Bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 by @dependabot in #9176
- Bump github.com/onsi/ginkgo/v2 from 2.2.0 to 2.3.1 by @dependabot in #9177
- Bump geekyeggo/delete-artifact from 1.0.0 to 2.0.0 by @dependabot in #9178
- Bump actions/dependency-review-action from 2.4.0 to 2.5.0 by @dependabot in #9179
- Bump docker/setup-qemu-action from 2.0.0 to 2.1.0 by @dependabot in #9181
- Bump securego/gosec from 2.13.1 to 2.14.0 by @dependabot in #9182
New Contributors
- @yutachaos made their first contribution in #9117
- @Gacko made their first contribution in #9123
- @loveRhythm1990 made their first contribution in #9103
- @johanneswuerbach made their first contribution in #9131
- @FutureMatt made their first contribution in #9133
- @Sanghamitra-PERSONAL made their first contribution in #9098
- @scraly made their first contribution in #9171
- @cskinfill made their first contribution in #9147
- @jrhunger made their first contribution in #9185
- @guettli made their first contribution in #9167
- @ybelMekk made their first contribution in #9186
- @jaens made their first contribution in #9210
Full Changelog: controller-v1.4.0...controller-v1.5.1
Contributors
cskinfill, guettli, and 19 other contributors
Assets 2
helm-chart-4.4.0
Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
helm-chart-4.3.0
Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
controller-v1.4.0
1.4.0
Community Updates
We will discuss the results of our Community Survey, progress on the stabilization project, and ideas going forward with the project at Kubecon NA 2022 in Detroit. Come join us and let us hear what you'd like to see in thefuture for ingress-nginx.
https://kccncna2022.sched.com/event/18lgl?iframe=no
Kubernetes Registry change notice The @kubernetesio container image host http://k8s.gcr.io is actually getting redirected to the community-controlled http://registry.k8s.io starting with a small portion of traffic on October 3rd.
If you notice any issues, please ping Ben Elder, @thockin, @ameukam,or report issues in slack to [sig-k8s-infra slack channel (https://kubernetes.slack.com/archives/CCK68P2Q2).
What's Changed
1.4.0 updates ingress-nginx to use Endpointslices instead of Endpoints. Thank you @tombokombo, for your work in
8890
Update to Prometheus metric names; more information available here
Deprecated Kubernetes versions 1.20-1.21, Added support for, 1.25, currently supported versions v1.23, v1.24, v1.25
ADDED
_request_duration_secondsHistogram_connect_duration_secondsHistogram_header_duration_secondsHistogram_response_duration_secondsHistogram
Updated
_response_sizeHistogram_request_sizeHistogram_requestsCounter
DEPRECATED
_bytes_sentHistogram- _ingress_upstream_latency_seconds` Summary
REMOVED
ingress_upstream_header_secondsSummary
Also upgraded to golang 1.19.1
Images:
- registry.k8s.io/ingress-nginx/controller:v1.4.0@sha256:34ee929b111ffc7aa426ffd409af44da48e5a0eea1eb2207994d9e0c0882d143
- registry.k8s.io/ingress-nginx/controller-chroot:v1.4.0@sha256:b67e889f1db8692de7e41d4d9aef8de56645bf048261f31fa7f8bfc6ea2222a0
All Changes:
- 9104 Fix yaml formatting error with multiple annotations
- 9090 fix chroot module mount path
- 9088 Add annotation for setting sticky cookie domain
- 9086 Update Version ModSecurity and Coreruleset
- 9081 plugin - endpoints to slices
- 9078 expand CI testing for all stable versions of Kubernetes
- 9074 fix: do not apply job-patch psp on Kubernetes 1.25 and newer
- 9072 Added a Link to the New Contributors Tips
- 9069 Add missing space to error message
- 9059 kubewebhookcertgen sha change after go1191
- 9058 updated testrunner image sha after bump to go1191
- 9046 Parameterize metrics port name
- 9036 update OpenTelemetry image
- 9035 Added instructions for Rancher Desktop
- 9028 fix otel init_module
- 9023 updates for fixing 1.3.1 release
- 9018 Add v1.25 test and reduce amount of e2e tests
- 9017 fix LD_LIBRARY_PATH for opentelemetry
Dependencies updates:
- 9085 Bump actions/dependency-review-action from 2.1.0 to 2.4.0
- 9084 Bump actions/checkout from 1 to 3
- 9083 Bump github/codeql-action from 2.1.24 to 2.1.25
- 9089 Bump k8s.io/component-base from 0.25.1 to 0.25.2
- 9066 Bump github/codeql-action from 2.1.23 to 2.1.24
- 9065 Bump k8s.io/component-base from 0.25.0 to 0.25.1
- 9064 Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.2.0
- 9057 bump go to v1.19.1
- 9053 Bump ossf/scorecard-action from 2.0.2 to 2.0.3
- 9052 Bump github/codeql-action from 2.1.22 to 2.1.23
- 9045 Bump actions/upload-artifact from 3.0.0 to 3.1.0
- 9044 Bump ossf/scorecard-action from 1.1.2 to 2.0.2
- 9043 Bump k8s.io/klog/v2 from 2.80.0 to 2.80.1
- 9022 Bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.1.6
- 9021 Bump k8s.io/klog/v2 from 2.70.1 to 2.80.0
New Contributors
- @gunamata made their first contribution in #9035
- @afro-coder made their first contribution in #8924
- @wilmardo made their first contribution in #9074
- @nicolasjulian made their first contribution in #9086
- @mtneug made their first contribution in #9088
- @knbnnate made their first contribution in #8692
- @mklauber made their first contribution in #9104
Full Changelog: controller-v1.3.1...controller-v1.4.0
Contributors
mklauber, mtneug, and 6 other contributors
Assets 2
helm-chart-4.2.5
Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
controller-v1.3.1
In v1.3.1 leader elections will be done entirely using the Lease API and no longer using configmaps. v1.3.0 is a safe transition version, using v1.3.0 can automatically complete the merging of election locks, and then you can safely upgrade to v1.3.1.
Also, important note, with the Release of Kubernetes v1.25 we are dropping support for the legacy branches, Also, important note, with the release of Kubernetes v1.25, we are dropping support for the legacy edition, that means all version <1.0.0 of the ingress-nginx-controller.
Important Changes
- Updated to golang 1.19
- Started migration for Data and Control Plane splits
- Upgraded to Alpine 3.16.2
- New kubectl plugin release workflow
- New CVE findings template
Image:
- registry.k8s.io/ingress-nginx/controller:v1.3.1@sha256:54f7fe2c6c5a9db9a0ebf1131797109bb7a4d91f56b9b362bde2abd237dd1974
- registry.k8s.io/ingress-nginx/controller-chroot:v1.3.1@sha256:a8466b19c621bd550b1645e27a004a5cc85009c858a9ab19490216735ac432b1
What's Changed
- bump Golang to 1.19 #8932 by @Volatus in #8970
- Migrate ginkgo to v2 in e2e-test-runner image by @lilien1010 in #8830
- migrate ginkgo to v2 by @lilien1010 in #8826
- bump alpine to v3.16.2 by @longwuyuan in #8934
- bump baseimage alpine to v3.16.2 for zlib CVE fix by @longwuyuan in #8939
- bumped kubectl in test-runner to v1.24.0 by @longwuyuan in #8807
- Move utils to better locations to help in decoupling by @rikatz in #8853
- Move APIs to be used by both controller and configurer by @rikatz in #8854
Other Changes
- Fixed typo by @mtnezm in #8817
- fix(docs): describe MetalLB configuration via CRDs rather than configMap by @tamcore in #8821
- feat: update mimalloc to 1.7.6 by @guilhem in #8827
- Bump actions/setup-go from 3.2.0 to 3.2.1 by @dependabot in #8835
- Bump actions/dependency-review-action from 2.0.2 to 2.0.4 by @dependabot in #8836
- Bump github.com/prometheus/common from 0.35.0 to 0.37.0 by @dependabot in #8832
- Bump github/codeql-action from 2.1.15 to 2.1.16 by @dependabot in #8837
- Bump google.golang.org/grpc from 1.47.0 to 1.48.0 by @dependabot in #8833
- fix: test-runner Makefile by @tao12345666333 in #8840
- FIx typo x_forwarded_for by @inosato in #8838
- Decouple shared functions between controllers by @rikatz in #8829
- added fixes for make dev-env by @longwuyuan in #8804
- Add docs on Election ID to Multiple Ingress Controller guide by @qilongqiu in #8855
- bump to alpine-3.16.1 by @longwuyuan in #8858
- update dd-opentracing-cpp version in nginx build script by @dgoffredo in #8848
- changed baseimage sha & bumped ginkgo to 2.1.4 in test by @longwuyuan in #8860
- update baseimage after bump of opentracing-cpp by @longwuyuan in #8861
- fix: test-runner prow build by @tao12345666333 in #8863
- fix: make use of sed portable for BSD and GNU by @Volatus in #8859
- fix: test-runner prow build by @tao12345666333 in #8864
- Revert "fix: test-runner prow build" by @tao12345666333 in #8865
- version (commit sha) bump for dependency github.com/moul/pb due to dependency licence by @europ in #8841
- fix: change cloudbuild configuration by @tao12345666333 in #8869
- Update gce docs by @strongjz in #8866
- fix: change all cloudbuild jobs configuration by @tao12345666333 in #8870
- Add X-Forwarded-For in custom error template by @mrksngl in #7892
- update to baseiamge built after CI changes by @longwuyuan in #8892
- Bump github/codeql-action from 2.1.16 to 2.1.17 by @dependabot in #8894
- Bump github/codeql-action from 2.1.17 to 2.1.18 by @dependabot in #8914
- Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 by @dependabot in #8913
- updated to new images built today by @longwuyuan in #8896
- Trivy Image Scanning by @strongjz in #8776
- Improve
hack/generate-deploy-scripts.shto no longer generate versioned manifests by @Volatus in #8877 - Reimplement kubectl plugin release workflow by @Volatus in #8812
- Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles by @omichels in #8895
- Clean old code and move helper functions by @rikatz in #8946
- updated testrunner and testecho images by @longwuyuan in #8948
- Bump github/codeql-action from 2.1.18 to 2.1.19 by @dependabot in #8950
- Bump geekyeggo/delete-artifact from a6ab43859c960a8b74cbc6291f362c7fb51829ba to 1 by @dependabot in #8951
- Bump securego/gosec from b99b5f7838e43a4104354ad92a6a1774302ee1f9 to 2.13.1 by @dependabot in #8952
- Bump aquasecurity/trivy-action from 0.5.1 to 0.7.1 by @dependabot in #8953
- Bump actions/dependency-review-action from 2.0.4 to 2.1.0 by @dependabot in #8954
- Bump azure/setup-helm from 2.1 to 3.3 by @dependabot in #8956
- Bump github/codeql-action from 2.1.19 to 2.1.20 by @dependabot in #8957
- Don't error log when no OCSP responder URL exists by @zeeZ in #8881
- feat: using LeaseLock for election. by @tao12345666333 in #8921
- Add NetworkPolicy support by @mjudeikis in #8928
- securityContext in admission-webhook now configurable e.g. to set seccompProfiles by @omichels in #8930
- Document internal-logger-address cli arg by @nissessenap in #8873
- Add protocol prefix to Metrics port (Helm) by @anders-swanson in #8665
- fix(controller): typo in catch-all CheckIngress error message by @aslafy-z in #8905
- Fix defaultServer backend update for Ingress with defaultBackend. by @harry1064 in #8825
- Make keep-alive documentation more explicit for clarity by @Volatus in #8944
- Determine the hpa version and select the hpa version by @qilongqiu in #8872
- revert changes to configmap resource permissions by @tao12345666333 in #8959
- upgrade yamale and yamllint version by @tao12345666333 in #8960
- updated to testrunnerimage with updated yamale yamllint by @longwuyuan in #8967
- fix: go-restful CVE #8745 by @Volatus in #8969
- added note on digitalocean annotations by @longwuyuan in #8966
- adding cve finding and adding release-notes to PR template by @strongjz in #8916
- Update apiserver to 0.25 to remove v2 go-restful by @Volatus in #8976
- fixed deprecated ginkgo flags by @longwuyuan in #8984
- Bump actions/setup-go from 3.2.1 to 3.3.0 by @dependabot in #8981
- Bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 by @dependabot in #8992
- Bump goreleaser/goreleaser-action from 3.0.0 to 3.1.0 by @dependabot in #8986
- Bump github/codeql-action from 2.1.20 to 2.1.21 by @dependabot in #8982
*...
Contributors
tamcore, guilhem, and 22 other contributors
Assets 2
helm-chart-4.2.4
Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
helm-chart-4.2.3
Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
helm-chart-4.2.2
Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
NOTICE:
Please don't use this version, It has a problem with RBAC permissions
ref: #8958
helm-chart-4.2.1
Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer