v4.0.0

What's Changed

💣 Breaking Changes

• Add LogLevel & LogFormat flags by @AlexFenlon in #6520
• Deprecate v1alpha1 CRDs for GlobalConfiguration, Policy & TransportServer by @pdabelf5 in #6800
• Add license secret and mgmt config map for r33 by @AlexFenlon in #6903

🚀 Features

• Add glog slog handler by @pdabelf5 in #6474
• TransportServer SNI by @j1m-ryan in #6605
• Add events to configmap by @j1m-ryan in #6819
• Add events when special secrets update by @AlexFenlon in #6878
• Add additional mgmt config parameters by @pdabelf5 in #6921

🐛 Bug Fixes

• Generate valid yaml for readOnly fs by @jjngx in #6583
• UpstreamServer Fields Logs Displayed as Memory Addresses by @AlexFenlon in #6635
• Revert to original main-template without pod downtime by @jjngx in #6661
• Add nil check to apikey suppliedIn by @j1m-ryan in #6733
• Use default VS and TS templates when CfgMap obj is deleted by @jjngx in #6780

📦 Helm Chart

• Helm schema examples by @pdabelf5 in #6667
• Update kubernetes version to v1.32.0 in helm schema by @nginx-bot in #6998
• Release 4.0.0 by @nginx-bot in #6986

🧪 Tests

• Remove unnecessary type assertion by @j1m-ryan in #6479
• Add marker to conftest by @vepatel in #6491
• Add separate config to skip v5 tests by @vepatel in #6493
• Add support for readonlyrootfilesystem test for wafv5 by @vepatel in #6708
• Helm unit tests by @pdabelf5 in #6895
• Add wait in scaled rate-limit test by @vepatel in #6940
• Add mgmt configmap tests by @nginx-bot in #6965

🔨 Maintenance

• Add wafv5 tests to regression matrix by @vepatel in #6478
• Refactor to prepare for structured logs by @AlexFenlon in #6501
• Prevent final result from succeeding if any image builds fail by @pdabelf5 in #6509
• Grafana template update that works with grafana v11.2.0 by @sdutta9 in #6511
• Simplify bug report form by @shaun-nx in #6550
• Add ubi8 images patching workflow by @pdabelf5 in #6555
• Remove deprecated log level parameters by @AlexFenlon in #6620
• Replace glog in healthcheck.go & remove glog dependency by @AlexFenlon in #6628
• Fix make staticcheck, (use NewInformerWithOptions and TypedRateLimitingInterface) by @j1m-ryan in #6647
• Add static check action to CI by @j1m-ryan in #6649
• Update python to 3.13 and disable pytest-profiling by @AlexFenlon in #6651
• Update helm schema examples by @pdabelf5 in #6665
• Renew expired certificate used in tests by @pdabelf5 in #6736
• Add plus mgmt deployment context process by @j1m-ryan in #6309
• Remove unused functions by @pdabelf5 in #6806
• Refactor special secret input and validation by @pdabelf5 in #6808
• Allow k8s events in initial validation by @pdabelf5 in #6814
• Refactor resolver in template by @j1m-ryan in #6832
• Build UBI s390x nginx package for OSS images by @pdabelf5 in #6846
• Rename TLSSecretFileMode to ReadWriteOnlyFileMode by @pdabelf5 in #6854
• Add ubi-9 container image tag by @pdabelf5 in #6874
• Refactor namespace/name logic by @pdabelf5 in #6871
• Refactor, set staticSSLPath to a variable for reuse by @AlexFenlon in #6872
• Refactor configmap.go for extensability by @j1m-ryan in #6873
• Add secret type for getAndValidateSecret() by @pdabelf5 in #6877
• Refactor handleSpecialSecretUpdate by @j1m-ryan in #6875
• Refactor lbc to add metadata struct by @j1m-ryan in #6885
• Add license expiry checks by @pdabelf5 in #6917
• Prevent auto publishing docs on push to release branch by @pdabelf5 in #6926
• Update secrets when mgmt configmap changes by @pdabelf5 in #6947
• Fix Makefile Bug by @saedx1 in #6809
• Re-add FIPs images to tests, image patching & release by @nginx-bot in #6972
• Update regression matrix to include old k8s by @nginx-bot in #6977
• Trim UBI python packages by @pdabelf5 in #6993

📝 Documentation

• Update community call dates by @AlexFenlon in #6506
• Added Support page by @mrajagopal in #6467
• Fix external url links by @nginx-aoife in #6519
• Add hugo version check and theme update to Makefile by @nginx-jack in #6518
• Update documentation folder, dependencies and deployment action by @ADubhlaoich in #6554
• Migrate access control example to documentation website by @ADubhlaoich in #6572
• Update community call information by @danielnginx in #6766
• Updates to WAF v5 docs by @jjngx in #6694
• Update NMS references by @Jcahilltorre in #6802
• Add endpoint to product telemetry doc by @j1m-ryan in #6855
• Update README.md by @danielnginx in #6870
• Updates to usage-reporting page by @vepatel in #6899
• Remove marketplace plus images from docs for 4.0.0 by @pdabelf5 in #6928
• Add upgrading to 4.x docs by @nginx-bot in #6985

⬆️ Dependencies

65 changes

• Docker image update c30328bf by @nginx-bot in #6485
• Bump the go group with 2 updates by @dependabot in #6483
• Bump the go group with 2 updates by @dependabot in #6496
• Docker image update e58c873f by @nginx-bot in #6497
• Docker image update e000531c by @nginx-bot in #6512
• Bump the go group with 2 updates by @dependabot in #6522
• Docker image update 46d483c1 by @nginx-bot in #6533
• Docker image update 31e5a443 by @nginx-bot in #6543
• Bump the go group with 2 updates by @dependabot in #6540
• Docker image update 40274c4b by @nginx-bot in #6557
• Bump Go version by @jjngx in #6559
• Docker image update b31cdb28 by @nginx-bot in #6580
• Bump the go group with 2 updates by @dependabot in #6589
• Bump the go group across 1 directory with 3 updates by @dependabot in #6614
• Bump the docker-images group ...

v3.7.2

What's Changed

🐛 Bug Fixes

• Update oidc_template and conf to fix #6812 by @vepatel in #6838

🔨 Maintenance

• Upgrade Go to 1.23.3 by @nginx-bot in #6781
• Build UBI s390x nginx package for OSS images by @pdabelf5 in #6847
• Update kubernetes version to v1.31.2 in helm schema by @nginx-bot in #6818
• Update go toolchain and NIC version by @vepatel in #6859

📝 Documentation

• Fix docs 404s by @pdabelf5 in #6768
• Remove fips images from documentation until OpenSSL fix is available by @pdabelf5 in #6799
• Update NMS references by @Jcahilltorre in #6820
• Add endpoint to product telemetry doc by @j1m-ryan in #6856

⬆️ Dependencies

• Docker image updates by @nginx-bot in #6779
• Bump the go dependencies by @nginx-bot in #6791
• Docker image updates by @nginx-bot in #6790
• Bump the go dependencies by @nginx-bot in #6849
• Docker image update 9ca30b62 by @nginx-bot in #6851
• Bump github.com/cert-manager/cert-manager from 1.16.1 to 1.16.2 by @nginx-bot in #6839

Full Changelog: v3.7.1...v3.7.2

Upgrade

• For NGINX, use the v3.7.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.7.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.7.2 source code.
• For Helm, use version 1.4.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.2/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.7.1

What's Changed

🐛 Bug Fixes

• Add nil check to apikey suppliedIn by @j1m-ryan in #6735
• Add OIDC fix for ID token nonce claim validation by @jjngx in #6761

🔨 Maintenance

• Update kubernetes version to v1.31.1 in helm schema by @nginx-bot in #6646
• Update helm schema examples by @pdabelf5 in #6666

📝 Documentation

• Fix typo and add missing version by @vepatel in #6537
• Update NGINX Plus Version for v3.6.2 and v3.7.0 by @shaun-nx in #6569
• Update documentation folder by @nginx-jack in #6602

⬆️ Dependencies

• Docker image update 31e5a443 by @nginx-bot in #6545
• Fix go toolchain by @nginx-bot in #6549
• Bump the go group with 2 updates by @nginx-bot in #6553
• Docker image update 40274c4b by @nginx-bot in #6560
• Bump Go version by @nginx-bot in #6570
• Bump the go group with 2 updates by @nginx-bot in #6591
• Bump the docker-images group across 1 directory with 3 updates by @nginx-bot in #6619
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6618
• Docker image update 556fd680 by @nginx-bot in #6640
• Bump the go group across 1 directory with 6 updates by @nginx-bot in #6648
• Bump nginxinc/dependencies/nginx-ot from 0f5479b to 8604f87 in /build by @nginx-bot in #6664
• Docker image update 0772406c by @nginx-bot in #6686
• Bump github.com/aws/aws-sdk-go-v2/config from 1.27.43 to 1.28.0 by @nginx-bot in #6688
• Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @nginx-bot in #6674
• Docker image update 3c3e619d by @nginx-bot in #6703
• Bump the go group with 4 updates by @nginx-bot in #6707
• Docker image update e6c0a4ef by @nginx-bot in #6720
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6730
• Docker image update 52a62c5c by @nginx-bot in #6755
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @nginx-bot in #6751
• Update ubi-ppc64le to nginx 1.27.2 by @nginx-bot in #6759

Full Changelog: v3.7.0...v3.7.1

Upgrade

• For NGINX, use the v3.7.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.7.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.7.1 source code.
• For Helm, use version 1.4.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.7.0

Important

FIPS compliant images are currently impacted by compatibility issues with a dependent library.
We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🚀 Features

• Add BUILD_OS to Telemetry by @AlexFenlon in #5968
• Sync oidc repo by @haywoodsh in #6014
• Support End Session Endpoint for OIDC and allow customizable Post-logout Redirect URI by @haywoodsh and @llomgui in #6092
• Make access_log in http context configurable by @hafe in #5648
• Add ip as an option to listeners for VirtualServer by @AlexFenlon in #6180
• Add ip as an option to listeners for TransportServer by @j1m-ryan in #6367

🐛 Bug Fixes

• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• Fix api key policy undefined routes by @j1m-ryan in #5838
• Add default telemetry endpoint by @shaun-nx in #5885
• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5899
• Don't log errors for not implemented grpc metrics by @jjngx in #6125
• Fix panic when creating VirtualServer by @hafe in #6232
• Create unique lease obj for each NIC installed via Helm by @jjngx in #6372
• Fix udp/http listener validation logic by @j1m-ryan in #6406
• Disable batch reload when batch finishes by @dareste in #6446
• grafana template update that works with grafana v11.2.0 (#6511) by @jjngx in #6526

📦 Helm Chart

• Remove include-year and includeYear flag by @harsha-mangena in #5817
• Choose NodePort values for controller.service.type = LoadBalancer by @Falltrades in #5335
• Update helm docs by @vepatel in #6235
• [cherry-pick] WAFv5 update to 5.3/alpine update by @nginx-bot in #6510
• Release 3.7.0 by @nginx-bot in #6480

🧪 Tests

• Check for non 50x 404 response by @vepatel in #5851
• Chore/python clean up, and unused variable check to pre commit by @j1m-ryan in #5866
• Split VSR matrix in 3 by @j1m-ryan in #5883
• Move some python tests from vs1 to vs2 by @j1m-ryan in #5888
• Pod logs in tests when startup fails by @oseoin in #5901
• Make markers strict, and add project.toml to local python tests, by @j1m-ryan in #5911
• Add flaky label to some flaky tests by @j1m-ryan in #5955
• Dos - Allow list by @pasmant in #5824
• Reduce NAP CI time by @j1m-ryan in #5999
• Add test to check for agent by @vepatel in #6111
• Move test to correct directory by @vepatel in #6114
• Assert version from log and chart by @vepatel in #6307
• Add NIC+WAFv5 tests by @vepatel in #6456
• Add retry to version check in logs by @nginx-bot in #6504

🔨 Maintenance

129 changes

• Add name to image promotion and always run promotion by @oseoin in #5793
• Add 'needs cherry pick' label to auto-create cherrypick PRs by @oseoin in #5796
• Bump the actions group across 1 directory with 12 updates by @dependabot in #5798
• add addiitional pr tag to images by @pdabelf5 in #5799
• Enable auto-merge for dependabot by @oseoin in #5801
• Bump docker/build-push-action from 6.0.1 to 6.0.2 in the actions group by @dependabot in #5805
• add regression workflow by @pdabelf5 in #5809
• Test splitting smoke tests by dependency by @oseoin in #5803
• Re-order docker builds by @oseoin in #5812
• consolidate image generation matrices by @pdabelf5 in #5815
• Run Trivy & DockerScout on main & release branches by @pdabelf5 in #5818
• Skip upload test results on skipped tests by @oseoin in #5827
• Change test upload logic to match test run logic by @oseoin in #5829
• Fix branch prefix for docker sha updates by @oseoin in #5830
• add permissions to update released images by @pdabelf5 in #5831
• Forked workflow build by @oseoin in #5835
• Bump the actions group across 1 directory with 5 updates by @dependabot in #5825
• Add actionlint pre commit plugin by @pdabelf5 in #5839
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5841
• remove sarif artifact upload for images in feature branches by @pdabelf5 in #5850
• ensure example versions are updated by @pdabelf5 in #5853
• add permissions for gcr login to base image build by @pdabelf5 in #5860
• Bump docker/build-push-action from 6.1.0 to 6.2.0 in the actions group by @dependabot in #5871
• Exclude files from stable tag which don't impact build or test by @oseoin in #5875
• add run-name to ci & update docker sha workflows by @pdabelf5 in #5876
• add nap-v5 images to image patch workflow by @pdabelf5 in #5894
• Change always references to not cancelled by @oseoin in #5898
• ensure release draft occurs by @pdabelf5 in #5900
• remove fips from tests, image patching & release by @pdabelf5 in #5912
• Delete netlify.toml by @j1m-ryan in #5915
• Bump the actions group across 1 directory with 2 updates by @dependabot in #5904
• Mount pyproject.toml in smoke tests by @oseoin in #5932
• Add missing write permission for release draft by @oseoin in #5945
• Bump the actions group with 2 updates by @dependabot in #5948
• OT dependency build by @oseoin in #5919
• test single image workflow by @pdabelf5 in #5969
• pull test image by @pdabelf5 in #5971
• Add missing opentracing build action SHAs by @oseoin in #5970
• Shortcode for NIC version in docs by @oseoin in #5953
• Update description for k8s version in single image regression by @oseoin in #5986
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5984
• Workflow to build ppc64le binary for ubi by @oseoin in #6005
• Bump the actions group across 1 directory with 11 updates by @dependabot in #6024
• Bump docker/build-push-action from 6.4.0 to 6.4.1 in the actions group by @dependabot in #6035
• Bump the actions group across 1 directory with 5 updates by @dependabot in #6045
• ensure s...

v3.6.2

Important

FIPS compliant images are currently impacted by compatibility issues with a dependent library.
We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🐛 Bug Fixes

• Don't log errors for not implemented grpc metrics (#6125) by @jjngx in #6150
• re-order mounting debian apt source file by @nginx-bot in #6225

📦 Helm Chart

• Update helm docs by @nginx-bot in #6236
• Release 3.6.2 by @nginx-bot in #6220

🧪 Tests

• add agent test by @vepatel in #6115

🔨 Maintenance

• Shortcode for NIC version in docs by @nginx-bot in #5975
• replace promlog with go-kit by @nginx-bot in #6053
• pin wafv5 module by @vepatel in #6170
• update example for WAF v5 by @nginx-bot in #6189
• Bump kindest/node from v1.30.2 to v1.31.0 in /tests in the docker-tests group by @nginx-bot in #6206
• update kubernetes version to v1.31.0 in helm schema by @nginx-bot in #6219

📝 Documentation

• fips compatibility issue by @oseoin in #5973
• update k8s compatibility order in tech specs by @j1m-ryan in #5991
• update WAF v5 documentation by @nginx-bot in #6019
• remove link to ingress example by @nginx-bot in #6102
• App Protect WAFv5 compatibility matrix by @nginx-bot in #6178
• update README.md by @vepatel in #6190
• Fix manifest CRD documentation by @ADubhlaoich in #6208

⬆️ Dependencies

• Bump the go group with 1 update by @nginx-bot in #5967
• Docker image update d41d8cd9 by @nginx-bot in #5974
• Docker image update d41d8cd9 by @nginx-bot in #6013
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6021
• Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in the go_modules group by @nginx-bot in #5998
• Docker image update d41d8cd9 by @nginx-bot in #6070
• Bump the go group across 1 directory with 6 updates by @nginx-bot in #6081
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6120
• Docker image update d41d8cd9 by @nginx-bot in #6098
• Docker image update d41d8cd9 by @nginx-bot in #6126
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6141
• Docker image update d41d8cd9 by @nginx-bot in #6158
• Docker image update d41d8cd9 by @nginx-bot in #6179
• Docker image update d41d8cd9 by @nginx-bot in #6191
• Bump the go group across 1 directory with 11 updates by @nginx-bot in #6196
• update telemetry exporter to v0.1.1 by @nginx-bot in #6204
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6211
• Bump github.com/nginxinc/nginx-plus-go-client from 1.2.2 to 1.3.0 in the go group by @nginx-bot in #6222
• nginx 1.27.1 dependencies by @pdabelf5 in #6226
• Docker image update d41d8cd9 by @nginx-bot in #6233
• Bump the go group with 3 updates by @nginx-bot in #6234

Full Changelog: v3.6.1...v3.6.2

Upgrade

• For NGINX, use the v3.6.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.6.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.6.2 source code.
• For Helm, use version 1.3.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.2/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.6.1

Important

FIPS compliant images are currently impacted by compatibility issues with a dependent library.
We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🐛 Bug Fixes

• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5921
• Add default telemetry endpoint by @shaun-nx in #5889

🔨 Maintenance

• Add permissions for gcr login to base image build (#5860) by @oseoin in #5862
• release pipeline fixes by @pdabelf5 in #5863
• terminate milestone api call by @pdabelf5 in #5864
• Update release skip job logic by @pdabelf5 in #5865
• aws marketplace id token by @pdabelf5 in #5867
• add v prefix to github version by @pdabelf5 in #5868
• skip closing already closed milestone by @pdabelf5 in #5869
• remove fips from tests & image publishing by @pdabelf5 in #5918
• ensure example versions are updated by @pdabelf5 in #5897
• Mount pyproject.toml in smoke tests by @nginx-bot in #5935
• Add missing write permission for release draft by @nginx-bot in #5946
• Image matrix by @oseoin in #5950
• Version Bump for 3.6.1 by @nginx-bot in #5895

📝 Documentation

• remove reference to auth_request off by @j1m-ryan in #5937
• add scc and update deployment by @vepatel in #5940

⬆️ Dependencies

• Bump the go group with 1 update by @nginx-bot in #5877
• Bump the go group with 2 updates by @nginx-bot in #5884
• Bump Go version - fix vulnerability in the std lib by @nginx-bot in #5930
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #5933
• Bump the go group with 2 updates by @nginx-bot in #5951
• Bump kindest/node from v1.30.0 to v1.30.2 in /tests in the docker-tests group by @nginx-bot in #5941
• Docker image update d41d8cd9 by @nginx-bot in #5923
• Bump the python group in /tests with 2 updates by @nginx-bot in #5926
• Docker image update d41d8cd9 by @nginx-bot in #5882
• Docker image update d41d8cd9 by @nginx-bot in #5939
• Docker image update d41d8cd9 by @nginx-bot in #5943
• Docker image update d41d8cd9 by @nginx-bot in #5947
• Bump the actions group across 1 directory with 2 updates by @nginx-bot in #5931

Full Changelog: v3.6.0...v3.6.1

Upgrade

• For NGINX, use the v3.6.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.6.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, the Azure Marketplace or build your own image using the v3.6.1 source code.
• For Helm, use version 1.3.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.6.0

What's Changed

🚀 Features

• Preserve valid listeners when invalid listeners are present in GlobalConfiguration by @haywoodsh in #5205
• Add proxy-set-headers annotation for ingress by @AlexFenlon in #5366
• Add telemetry data - ingresses by @jjngx in #5406
• add service count metric to telemetry by @j1m-ryan in #5408
• Add Ingress Classes to Telemetry data by @jjngx in #5418
• Add policies count to telemetry by @AlexFenlon in #5457
• Add support for headers in action return by @andrew-s in #5204
• Add Granular Policy count for telemetry by @AlexFenlon in #5489
• Add Ingress Annotation List to Telemetry by @AlexFenlon in #5516
• Add AppProtectVersion to Telemetry by @AlexFenlon in #5554
• Add IsPlus to Telemetry by @AlexFenlon in #5571
• Add Installation Flags to Telemetry by @AlexFenlon in #5586
• Scale ratelimit with ingress pods by @dbaumgarten in #5113
• Add Granular Ingress Counts to Telemetry by @AlexFenlon in #5608
• Add Granular Services Counts to Telemetry by @AlexFenlon in #5627
• enable external service args by @vepatel in #5736
• Integrate NAP WAF v5 by @shaun-nx in #5698
• Support APIKey authentication by @haywoodsh in #5580

🐛 Bug Fixes

• fix ap-waf flag in error message by @vepatel in #5350
• Don't reload when use-cluster-ip endpoints update, and change the ingress use-cluster-ip implementation to use the cluster ip instead of the fqdn by @j1m-ryan in #5318
• fix status for invalid vs and vsr, for weight changes dynamic reload by @j1m-ryan in #5375
• pin ap compiler by @vepatel in #5433
• Add support for named ports in ingresses which use-cluster-ip by @j1m-ryan in #5456
• Fix nginx breaking & remove unused code for ProxySetHeaders annotation by @AlexFenlon in #5426
• Fix error messages by @jjngx in #5542
• Fix incorrect errors showing in Telemetry by @AlexFenlon in #5561
• Don't count Custom Resources if not enabled at NIC startup by @jjngx in #5749
• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• fix api key policy undefined routes by @j1m-ryan in #5838

📦 Helm Chart

• Remove the before NGINX Ingress Controller in some cases by @j1m-ryan in #5274
• Version Bump for 3.6.0 by @nginx-bot in #5285
• correct helm version in docs by @pdabelf5 in #5287
• update helm flag in docs for enableWeightChangesDynamicReload by @j1m-ryan in #5313
• docs version update to 3.5.0 by @pdabelf5 in #5327
• Collect count of secrets by @shaun-nx in #5404
• add local helm schema validation by @pdabelf5 in #5493
• 3.5.1 docs update by @pdabelf5 in #5520
• Revert "add local helm schema validation" by @oseoin in #5528
• Release 3.5.2 by @pdabelf5 in #5678
• helm: add knob to control cluster level rbac rendering by @hafe in #5229
• update values schema from 1.29 to 1.30 by @j1m-ryan in #5772
• Version Bump for 3.7.0 by @nginx-bot in #5828

🧪 Tests

• Wait before assertion in weight changes dynamic reload test by @j1m-ryan in #5302
• simplify smoke-test action by @pdabelf5 in #5311
• enable logging in tests by @vepatel in #5499
• Revert "enable logging in tests" by @oseoin in #5543
• Bump kindest/node from v1.29.2 to v1.30.0 in /tests in the docker-tests group across 1 directory by @dependabot in #5549
• add files for upgrade tests by @vepatel in #5553
• Docker image update d41d8cd9 by @nginx-bot in #5570
• exclude upgrade files from nightly regression tests by @vepatel in #5581
• add wait to dos test by @vepatel in #5656
• skip dos log test by @vepatel in #5658
• Fix test_dos_sec_logs_on by @pasmant in #5725
• Mount config and deployments dirs to smoke containers by @oseoin in #5740
• Docker image update d41d8cd9 by @nginx-bot in #5743
• replace skopeo action with skopeo image by @pdabelf5 in #5760
• add functional tests for rate-limit scaling by @vepatel in #5758
• check pod readiness in ingress scale test by @vepatel in #5774
• Workflow refactor by @pdabelf5 in #5766
• add docker scout scan to pipelines by @pdabelf5 in #5759
• Docker image update d41d8cd9 by @nginx-bot in #5822
• check for non 50x 404 response by @vepatel in #5851

🔨 Maintenance

79 changes

• Bump Go version to v1.22.2 by @jjngx in #5354
• Fix false-positive code scanning issue by @jjngx in #5365
• update labeller config by @pdabelf5 in #5381
• Bump the go group with 3 updates by @dependabot in #5368
• Republish helm chart workflow by @pdabelf5 in #5370
• update github labels by @pdabelf5 in #5392
• docs only workflow by @pdabelf5 in #5405
• Set reporting endpoint in makefile by @shaun-nx in #5411
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5403
• filter README changes in examples by @pdabelf5 in #5437
• Bump the actions group across 1 directory with 5 updates by @dependabot in #5438
• fix broken image cache update workflow by @pdabelf5 in #5439
• Bump the actions group across 1 directory with 5 updates by @dependabot in #5458
• update codegen by @haywoodsh in #5462
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5475
• Bump the actions group across 1 directory with 4 updates by @dependabot in #5485
• Bump the actions group with 2 updates by @dependabot in #5494
• update image patching to use new workflows by @pdabelf5 in #5497
• improve forked workflow detection by @pdabelf5 in #5501
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5507
• rebuild python test image daily by @pdabelf5 in #5508
• Bump the actions group across 1 directory with 3 updates by @dependabot in #5510
• fix syntax error in helm release workfl...

v3.5.2

What's Changed

⚠️ NGINX App Protect

• Bundles compiled on NAP WAF versions <= v4.8.x are not compatible with NAP WAF versions >= 4.9.x, this release of NIC includes NAP WAF v4.10 so recompilation of policy bundles is required. JSON based WAF Policies aren’t affected with this change.

📦 Helm Chart

• Version Bump for 3.5.2 by @nginx-bot in #5641

🧪 Tests

• skip dos log test (#5658) by @oseoin in #5660

🔨 Maintenance

• [cherry-pick] remove cert-gen script by @vepatel in #5632

📝 Documentation

• update operator version by @vepatel in #5566
• Docs/update mktplc refs by @vepatel in #5616
• add azure marketplace link by @vepatel in #5621
• cherry-pick NAP link fixes & troubleshooting documentation improvements from main by @ADubhlaoich in #5645

⬆️ Dependencies

• Bump the go group with 2 updates by @github-actions in #5590
• [cherry-pick] Manually apply main go patches by @oseoin in #5631
• [cherry-pick] Bump the go group across 1 directory with 4 updates by @nginx-bot in #5638
• [cherry-pick] Upgrade prometheus exporter to 1.1.2 by @pdabelf5 in #5662
• Docker image update d41d8cd9 by @nginx-bot in #5579
• Cherry pick kind 1.30 by @oseoin in #5642
• Container SHA cherry pick by @oseoin in #5573
• Bump the python group across 1 directory with 4 updates by @github-actions in #5598
• [pre-commit.ci] pre-commit autoupdate by @github-actions in #5600
• Bump golang from f1fe698 to b8ded51 in /build by @nginx-bot in #5623
• [cherry-pick] Bump redhat/ubi8 from 83068ea to a424544 in /build by @nginx-bot in #5630
• Bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 in the actions group by @nginx-bot in #5618
• [cherry-pick] [pre-commit.ci] pre-commit autoupdate by @nginx-bot in #5636
• [cherry-pick] Update debian build stages to use gpg over sq by @pdabelf5 in #5665
• [cherry-pick]NGINX Plus R32 by @vepatel in #5654
• [cherry-pick] Docker image update d41d8cd9 by @nginx-bot in #5673
• [cherry-pick] Bump the python group in /tests with 2 updates by @nginx-bot in #5669

New Contributors

• @github-actions made their first contribution in #5590

Full Changelog: v3.5.1...v3.5.2

Upgrade

• For NGINX, use the v3.5.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.5.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, the Azure Marketplace, or build your own image using the v3.5.2 source code.
• For Helm, use version 1.2.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.2/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.5.1

What's Changed

📦 Helm Chart

• Update helm flag in docs for enableWeightChangesDynamicReload (#5313) by @j1m-ryan in #5315

🐛 Bug Fixes

• Don't reload when use-cluster-ip endpoints update by @j1m-ryan in #5463
• Fix status for invalid vs and vsr, for weight changes dynamic reload … by @j1m-ryan in #5464
• Add support for named ports in ingresses which use-cluster-ip (#5456) by @j1m-ryan in #5470

📝 Documentation

• Update docs by @vepatel in #5312
• Remove operator note by @vepatel in #5329
• Fix heading in agent config doc by @vepatel in #5359
• Update doc for waf-dos image by @vepatel in #5369
• Fix link to rbac template by @vepatel in #5412
• Security monitoring docs by @vepatel in #5355

⬆️ Dependencies

• Go updates by @pdabelf5 in #5391
• Bump the go group across 1 directory with 7 updates (#5495) by @pdabelf5 in #5511

Other Changes

• Pin app-protect module version to 4.8.1 by @pdabelf5 in #5490

Full Changelog: v3.5.0...v3.5.1

Upgrade

• For NGINX, use the v3.5.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.5.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.5.1 source code.
• For Helm, use version 1.2.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.1/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.5.0

What's Changed

🚀 Features

• Export Telemetry data to XCDF by @shaun-nx & @jjngx in #4896, #5095, #5147, #5155, #5170, #5176, #5217, #5245, #5237, #5256, #5167 & #5261
• Add NIM Security Dashboard integration for App Protect WAF security violations by @oseoin in #5179 & #5051
• Weight changes Dynamic Reload by @j1m-ryan in #5212
• Add use-cluster-ip annotation for ingress resources by @j1m-ryan in #4862
• Add annotations for controlling request rate limiting by @dbaumgarten in #4660
• Allow securityContext and podSecurityContext to be configurable via helm parameters by @vepatel in #5084
• Update default values for keepalive-requests and keepalive-timeout by @AlexFenlon in #5083
• Update zone size for transportserver resource by @AlexFenlon in #5199

🐛 Bug Fixes

• Move set above rewrite to fix uninitialized variable by @AlexFenlon in #5211
• Initialize stopCh channel for ExternalDNS by @shaun-nx in #5175
• Ensure backup server is removed from upstreams when the Backup Service is deleted by @shaun-nx in #5053

📦 Helm Chart

• Refactor volumes and volumeMounts to common helpers by @oseoin in #5159
• Move common pod label definitions to helpers by @oseoin in #5179
• Agent management and helm configuration by @oseoin in #5188

🧪 Tests

• Update vs backup service tests with retries by @shaun-nx in #4797
• Add ingress rate-limit automation tests by @vepatel in #4919
• Add reload and req./resp. perf tests for ing and vs by @vepatel in #5048
• check pod status before getting logs by @vepatel in #5165
• update external-dns version by @vepatel in #5166
• add metrics logic to perf tests by @vepatel in #5224

🔨 Maintenance

• Fix AWS registry by @lucacome in #4825
• Add trigger for GCP Marketplace repo by @lucacome in #4829
• Report User Agent for Alpine and UBI by @lucacome in #4845
• Update UBI string for new images by @lucacome in #4893
• Update search for base image by @lucacome in #4912
• Add annotations to index and manifest by @lucacome in #5014
• Bump Go version to 1.22.1 by @jjngx in #5208

📝 Documentation

• Rewrite NGINX App Protect WAF Integration Section by @ADubhlaoich in #4726
• Fix and update links in VirtualServer port tutorial by @ADubhlaoich in #4792
• Update docs to include CRD upgrade by @vepatel in #4851
• Update to UBI9 by @oseoin in #4854
• Add rate-limit example by @vepatel in #4907
• Add alpine fips image options to installation docs by @pdabelf5 in #4962
• Fix minor documentation issues based on drift and feedback by @ADubhlaoich in #5011
• Add community page for NIC by @oseoin in #5038
• Fixed validation for VSR exact & regex subroutes by @jo-carter in #4744
• Add missing entries to the documentation catalog. by @Jcahilltorre in #5146
• Added few tips for TCP/UDP Load Balancing by @ssrahul96 in #5117
• Update docs for aplogconf by @vepatel in #5251
• Add support for apLogBundle in WAF policy by @oseoin in #5259
• Documentation on what Telemetry Data is collected + how to opt-in/opt-out by @shaun-nx in #5253

⬆️ Dependencies

97 changes

• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4779
• Bump the go group with 3 updates by @dependabot in #4803
• Bump golang.org/x/crypto from 0.15.0 to 0.17.0 by @dependabot in #4817
• Bump the actions group with 5 updates by @dependabot in #4815
• Bump the python group in /tests with 4 updates by @dependabot in #4777
• Bump the go group with 3 updates by @dependabot in #4846
• Bump the actions group with 6 updates by @dependabot in #4861
• Bump the docker-images group in /build with 1 update by @dependabot in #4780
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4840
• Bump the python group in /tests with 2 updates by @dependabot in #4848
• Bump the actions group with 1 update by @dependabot in #4868
• Bump the go group with 2 updates by @dependabot in #4873
• Bump the actions group with 4 updates by @dependabot in #4881
• Bump the go group with 1 update by @dependabot in #4905
• Bump the python group in /tests with 2 updates by @dependabot in #4875
• Bump the actions group with 1 update by @dependabot in #4910
• Bump the go group with 1 update by @dependabot in #4909
• Bump opentracing/nginx-opentracing from 426c2ff to 2e0268d in /build by @dependabot in #4927
• Bump nginx from a59278f to a59278f in /build by @dependabot in #4926
• Bump golang from 4db4aac to fd78f2f in /build by @dependabot in #4928
• Bump the go group with 1 update by @dependabot in #4924
• Bump the python group in /tests with 3 updates by @dependabot in #4923
• Bump the docker-images group in /build with 1 update by @dependabot in #4925
• Bump the actions group with 1 update by @dependabot in #4929
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4930
• Bump the go group with 5 updates by @dependabot in #4939
• Bump redhat/ubi8 from 1fdb97f to fc88b13 in /build by @dependabot in #4943
• Bump the actions group with 1 update by @dependabot in #4950
• Bump the go group with 1 update by @dependabot in #4949
• Bump the actions group with 2 updates by @dependabot in #4956
• update pytest-html to 4.1.1 by @pdabelf5 in #4959
• Bump the python group in /tests with 2 updates by @dependabot in #4960
• Bump the go group with 1 update by @dependabot in #4971
• Bump the actions group with 2 updates by @dependabot in #4972
• Bump golang from fd78f2f to 51a7800 i...