v1.12.0

Help make the NGINX Ingress Controller better by participating in our survey!

New in NGINX Ingress Controller v1.12.0

🚀 Features

• Add HTTPS option to prometheus endpoint (#1652) @soneillf5
• Support multiple log security configs in Ingresses (#1513) @rafwegv
• Support match in TransportServer health checks (#1633) @pleshakov
• Add AWS Marketplace Entitlement verification (#1619) @lucacome
• Add load balancing method to TransportServer (#1479) @soneillf5
• Add support for user defined browsers in APPolicy (#1481) @rafwegv
• Add support for CSRF protection in APPolicy (#1578) @rafwegv
• Feature transportserver udp tests (#1553) @soneillf5
• Add unary gRPC support in APPolicy (#1411) @rafwegv
• Support snippets in TransportServer (#1466) @soneillf5
• Feature transport server status tests (#1516) @soneillf5
• Don't require default server TLS secret (#1512) @pleshakov
• Support ssl_reject_handshake in Ingress and VS (#1500) @pleshakov
• Add logs around NGINX Plus binary/flag mismatch (#1494) @lucacome

🐛 Bug Fixes

• fix: fix for latest container scanning vulnerabilities (#1684) @ciarams87
• Update liblz4-1 to fix CVE-2021-3520 (#1676) @lucacome
• Fix ungraceful shutdown of NGINX (#1501) @pleshakov
• Fix incorrect configuration and unexpected warnings about Secrets at the IC start (#1654) @pleshakov
• Add missing njs module to the openshift-image-nap-plus image (#1658) @ciarams87
• Fix caching in Edge workflow (#1648) @lucacome
• Fix env vars in edge workflow (#1647) @lucacome
• Fix Nightly job (#1623) @lucacome
• Check helm folder for updated CRDs in workflow (#1588) @lucacome
• Fix Docker Hub link (#1586) @lucacome
• fix policy example in web docs (#1563) @vepatel
• Setup QEMU before building for multiple architectures (#1560) @lucacome
• NGINX only builds CentOS 8 packages for amd64/arm64 (#1557) @lucacome
• Red Hat UBI 8 doesn't support armv7 (#1552) @lucacome
• Fix link to ingress-nginx template (#1551) @lucacome
• fix: Update openssl libs in UBI base image & update nginx version (#1499) @ciarams87

📝 Documentation

• Release 1.12.0 (#1695) @ciarams87
• Publish IngressLink doc (#1694) @pleshakov
• Add HTTPS option to prometheus endpoint (#1652) @soneillf5
• Fix Building the Ingress Controller Image doc (#1668) @pleshakov
• Add how NGINX IC works doc (#1649) @pleshakov
• Support multiple log security configs in Ingresses (#1513) @rafwegv
• fix some App Protect logs links (#1594) @shaggy245
• Support match in TransportServer health checks (#1633) @pleshakov
• Update NGINX Plus to R24 (#1604) @lucacome
• Update repo files for release 1.11.3 (#1629) @pleshakov
• Add Docker image for Alpine with NGINX Plus (#1574) @lucacome
• Update repo files for release 1.11.2 (#1609) @ciarams87
• Add load balancing method to TransportServer (#1479) @soneillf5
• Feature transportserver udp tests (#1553) @soneillf5
• Update grpc notes (#1468) @rafwegv
• Add max connections to TransportServer (#1480) @soneillf5
• fix policy example in web docs (#1563) @vepatel
• Support snippets in TransportServer (#1466) @soneillf5
• Add test for TransportServer load balancing config (#1543) @soneillf5
• Fix link to ingress-nginx template (#1551) @lucacome
• Merge release branch to master (#1544) @lucacome
• Update badge for Fossa (#1546) @lucacome
• Support running tests in kind (#1540) @pleshakov
• Feature transport server status tests (#1516) @soneillf5
• Don't require default server TLS secret (#1512) @pleshakov
• Update repo files for release 1.11.1 (#1515) @ciarams87
• Release 1.11.1 (#1514) @ciarams87
• Support ssl_reject_handshake in Ingress and VS (#1500) @pleshakov
• Use latest tag in docs and manifests (#1495) @lucacome
• Update the IC so that GlobalConfiguration is not mandatory when configured (#1492) @soneillf5
• chore: update nginx version to 1.19.9 (#1498) @ciarams87
• Retire vendoring (#1502) @lucacome
• fix: Update openssl libs in UBI base image & update nginx version (#1499) @ciarams87
• docs: update the helm install instructions (#1497) @ciarams87
• Add golangci-lint as a dependency (#1419) @lucacome
• docs: update docs for release (#1488) @ciarams87

🔨 Maintenance

• Add gofumpt linter (#1693) @lucacome
• chore: add k8s 1.21 to the matrix and bump the patch versions (#1698) @ciarams87
• Add errorlint (#1688) @lucacome
• Enable default linters and gosec (#1687) @lucacome
• Update Release workflow (#1670) @lucacome
• Simplify Dockerfile stages for Debian (#1671) @lucacome
• Update CRDs folder after Operator upgrade (#1659) @lucacome
• Add UBI with NAP to Dockerfile (#1661) @lucacome
• Enable Docker scan result upload on PR (#1663) @lucacome
• Add jq and git to the gitlab test dockerfile (#1662) @ciarams87
• Improve Dockerfile (#1646) @lucacome
• AppProtect gRPC automation tests (#1603) @vepatel
• Add smoke test for user defined browser AP policy (#1638) @vepatel
• Chore/fix nightly image (#1636) @ciarams87
• Switch to new NGINX Plus repo for UBI (#1596) @lucacome
• Add smoke test for appprotect csrf policy (#1627) @vepatel
• Filter previous releases only on master branch (#1632) @lucacome
• Add Docker image for Alpine with NGINX Plus (#1574) @lucacome
• Add gitlab pipeline and remove plus building from github (#1601) @ciarams87
• Revert dependabot to daily checks (#1605) @lucacome
• Improve nap unit tests (#1589) @pleshakov
• Add NGINX version to ubi image building (#1592) @ciarams87
• Fix ubi image name (#1591) @ciarams87
• Update NGINX Plus builds (#1576) @lucacome
• Add container scanning for OSS images (#1580) @ciarams87
• Update formatting of AppProtect CRDs (#1587) @pleshakov
• Use UBI 8 minimal to reduce image size (#1575) @lucacome
• Add labels to Dockerfile, minor improvements (#1572) @lucacome
• Add automatic response for issues (#1577) @lucacome
• Add workflow to push README to Docker Hub (#1573) @lucacome
• add ts snippet tests (#1568) @vepatel
• Chore: Don't notify on cancelled edge pipeline (#1559) @ciarams87
• Ingress MTLS tests (#1555) @vepatel
• Updated regex for create tag release workflow (#1556) @soneillf5
• Add GoReleaser (#1549) @lucacome
• tests-ts-tls-passthrough (#1550) @vepatel
• Merge release branch to master (#1544) @lucacome
• Revert changes in nightly for now (#1547) @ciarams87
• Fix ensure connections (#1539) @pleshakov
• Update badge for Fossa (#1546) @lucacome
• Add tests for default server (#1537) @pleshakov
• Test all images (#1533) @ciarams87
• Upgrade kubernetes-python client to 12.0.1 (#1522) @soneillf5
• Improve tests Dockerfile (#1536) @pleshakov
• Add tests for Ingress TLS termination (#1525) @pleshakov
• Cancel redundant pipelines and remove redundant build jobs (#1524) @ciarams87
• Use Fossa action in the workflow (#1523) @lucacome
• Rename read_crds to read_custom_resource (#1519) @soneillf5
• Create codeql-analysis.yml (#1520) @lucacome
• Use latest tag in docs and manifests (#1495) @lucacome
• Remove NGINX_VERSION from base images (#1503) @lucacome
• Use master as target branch, move deps into separate category (#1493) @lucacome
• AP: bump AppProtect Version to 3.1 (#1496) @rafwegv
• Read Go version from go.mod in workflows (#1504) @lucacome
• chore: update nginx version to 1.19.9 (#1498) @ciarams87
• Retire vendoring (#1502) @lucacome

⬆️ Dependencies

• Bump urllib3 from 1.26.5 to 1.26.6 in /perf-tests (#1700) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.3.1 to 1.4.0 (#1704) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.3.0 to 1.4.0 (#1705) @dependabot
• Bump urllib3 from 1.26.5 to 1.26.6 in /tests (#1699) @dependabot
• Bump sigs.k8s.io/controller-tools from 0.6.0 to 0.6.1 (#1691) @dependabot
• Use latest Docker image for golangci-lint (#1686) @lucacome
• Bump grpcio-tools from 1.38.0 to 1.38.1 in /tests (#1690) @dependabot
• Bump grpcio from 1.38.0 to 1.38.1 in /tests (#1689) @dependabot
• fix: fix for latest container scanning vulnerabilities (#1684) @ciarams87
• Bump k8s.io/code-generator from 0.21.1 to 0.21.2 (#1680) @dependabot
• Bump k8s.io/client-go from 0.21.1 to 0.21.2 (#1678) @dependabot
• Update liblz4-1 to fix CVE-2021-3520 (#1676) @lucacome
• Bump sigs.k8s.io/controller-tools from 0.5.0 to 0.6.0 (#1653) @dependabot
• Bump github.com/prometheus/client_golang from 1.10.0 to 1.11.0 (#1650) @dependabot
• Bump certifi from 2020.12.5 to 2021.5.30 in /tests (#1640) @dependabot
• Bump certifi from 2020.12.5 to 2021.5.30 in /perf-tests (#1641) @dependabot
• Bump urllib3 from 1.26.4 to 1.26.5 in /perf-tests (#1634) @dependabot
• Bump urllib3 from 1.26.4 to 1.26.5 in /tests (#1635) @dependabot
• Add AWS Marketplace Entitlement verification (#1619) @lucacome
• Bump more-itertools from 8.7.0 to 8.8.0 in /tests (#1622) @dependabot
• Update NGINX Plus to R24 (#1604) @lucacome
• Bump library/nginx from 1.19.10-alpine to 1.21.0-alpine in /build (#1630) @dependabot
• Bump nginx from 1.19.10 to 1.21.0 in /build (#1631) @dependabot
• Bump github.com/google/go-cmp from 0.5.5 to 0.5.6 (#1625) @dependabot
• Bump github.com/golangci/golangci-lint from 1.39.0 to 1.40.1 (#1612) @dependabot
• Bump k8s.io/client-go from 0.21.0 to 0.21.1 (#1613) @dependabot
• Bump k8s.io/code-generator from 0.21.0 to 0.21.1 (#1615) @dependabot
• Bump nginx from 1.19.9 to 1.19.10 in /build (#1542) @dependabot
• Bump library/nginx from 1.19.9-alpine to 1.19.10-alpine in /build (#1595) @dependabot
• Workaround for bug in Dependabot for Docker (#1593) @lucacome
• Bump pytest from 6.2.3 to 6.2.4 in /tests (#1583) @dependabot
• Bump actions/cache from v2.1.4 to v2.1.5 (#1541) @dependabot
• Bump k8s.io/code-generator from 0.20.5 to 0.21.0 (#1531) @dependabot
• Bump k8s.io/client-go from 0.20.5 to 0.21.0 (#1530) @dependabot
• Remove patch version from Docker image for tests (#1534) @lucacome
• Bump styfle/cancel-workflow-action from 0.8.0 to 0.9.0 (#1527) @dependabot
• Bump urllib3 from 1.26.3 to 1.26.4 in /tests (#1470) @dependabot
• Bump urllib3 from 1.26.3 to 1.26.4 in /perf-tests (#1471) @dependabot
• Update prometheus exporter to 0.9.0 and indirect deps (#1518) @lucacome
• Bump github.com/golangci/golangci-lint from 1.38.0 to 1.39.0 (#1511) @dependabot
• Bump golangci/golangci-lint-action from v2.5.1 to v2.5.2 (#1506) @dependabot
• Update fossa to 1.1.6 (#1505) @lucacome
• Bump python from 3.9.2-slim to 3.9.3-slim in /tests/docker (#1507) @dependabot
• Bump locust from 1.4.3 to 1.4.4 in /perf-tests (#1509) @dependabot
• Bump pytest from 6.2.2 to 6.2.3 in /tests (#1510) @dependabot
• Retire vendoring (#1502) @lucacome
• Add golangci-lint as a dependency (#1419) @lucacome

Upgrade

• For NGINX, use the v1.12.0 image from our DockerHub: nginx/nginx-ingress:1.12.0, nginx/nginx-ingress:1.12.0-alpine or nginx/nginx-ingress:1.12.0-ubi
• For NGINX Plus, please build your own image using the v1.12.0 source code.
• For Helm, use version 0.10.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v1.12.0/examples and https://github.com/nginxinc/kubernetes-ingress/tree/v1.12.0/examples-of-custom-resources
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v1.12.0/deployments/helm-chart
• Operator -- https://docs.nginx.com/nginx-ingress-controller/installation/installation-with-operator/