v5.2.0

What's Changed

🚀 Features

• Add nginx content cache as cache policy by @vepatel in #8005
• StatefulSet support by @haywoodsh in #8159
• Add support for automatic adjustment of buffer related directives by @javorszky in #8133
• Allow StartupProbe to be configured via helm by @vepatel in #8011
• Add SNI to NIC JWT Policy by @javorszky in #7993
• Add support for VIOL_BOT_CLIENT and VIOL_GEOLOCATION violations by @mikegoltsman in #8093
• Add globalConfigurationCustomName parameter by @frantsao and @mohamadaldawamnah in #8142
• Add support for FIPS 140-3 compliance by @AlexFenlon in #8195
• Add support for N+ license expiry in prometheus metrics by @vepatel in #8229

🧪 Tests

• Update tests README by @vepatel in #7951
• Update snaps by @vepatel in #8032
• Ensure packages are installed on images by @pdabelf5 in #7991
• Add service insight pytest for cross namespace VSR by @pdabelf5 in #8055
• Add integration test for agent by @mohamadaldawamnah in #8094
• Add integration test to App Protect agent file by @mohamadaldawamnah in #8116
• Fix Helm tests failing with latest version by @AlexFenlon in #8179

🔨 Maintenance

• add helm gh action by @vepatel in #8175
• Add namespaced secret to example by @vepatel in #7941
• Refine label additions that drive release categories by @pdabelf5 in #7957
• Clean up docker scout scan job names by @pdabelf5 in #7965
• Update release notes scripts by @pdabelf5 in #7962
• Version Bump for 5.2.0 by @github-actions[bot] in #7939
• Pin OSS version in Dockerfile by @pdabelf5 in #7989
• Always build the binary when we force a rebuild by @pdabelf5 in #7981
• Update community call dates by @AlexFenlon in #8034
• add crd docs in dev docs by @vepatel in #7992
• Collapse package report comment by @pdabelf5 in #8045
• Add GOPROXY to binary builds by @pdabelf5 in #8053
• Add control labels to Agent for N1C by @AlexFenlon in #8068
• Remove extra double quote in variable assignment by @pdabelf5 in #8067
• update crd descriptions by @mohamadaldawamnah in #8038
• Remove aws marketplace images from patching workflow by @pdabelf5 in #8050
• Update to ubuntu 24.04 runners by @pdabelf5 in #8081
• Remove unnecessary crd files by @pdabelf5 in #8117
• Setup netrc when forcing build by @pdabelf5 in #8151
• CRD changes trigger pytests by @pdabelf5 in #8165
• Always run tests when inputs.run_tests is true by @pdabelf5 in #8166
• Bring Release 5.1.1 to main by @AlexFenlon in #8163
• Remove existence check from templates before range by @javorszky in #8181
• Update CI workflow_call boolean inputs by @pdabelf5 in #8197
• remove http cache for jwks by @vepatel in #8198
• Update proxy endpoint for published builds by @pdabelf5 in #8194
• Adds sha256 hash to quay.io/skopeo import by @javorszky in #8196
• remove shared cache config from helm by @vepatel in #8211
• Fix gofumpt empty string errors by @AlexFenlon in #8221
• update golang to 1.25 by @vepatel in #8220
• Correct yaml indentation for daemon-set readiness probe by @pdabelf5 in #8233
• Fix Proxy Buffer Config Adjustments by @AlexFenlon in #8226
• update dependencies by @vepatel in #8251

📝 Documentation

• update main version by @vepatel in #8087
• Fix hyperlink to image build procedure in README.md by @ogipierogi in #8157
• Fix broken hyperlink to F5 Container Registry Download doc in README.md by @ogipierogi in #8158
• Ensure all links resolve correctly in README.md by @pdabelf5 in #8171
• Release 5.2.0 by @github-actions[bot] in #8258

⬆️ Dependencies

• Update NGINX Agent to 3.3 by @AlexFenlon in #8208
• Docker image update 1e04714a by @github-actions[bot] in #7946
• Docker image update e4f97356 by @github-actions[bot] in #7961
• chore(deps): bump the go group with 2 updates by @dependabot[bot] in #7959
• Docker image update 203eea12 by @github-actions[bot] in #7977
• Docker image update 230ecec3 by @github-actions[bot] in #7979
• chore(deps): bump the docker-images group in /build with 3 updates by @dependabot[bot] in #7978
• chore(deps): bump github.com/cert-manager/cert-manager from 1.18.1 to 1.18.2 in the go group by @dependabot[bot] in #7983
• Docker image update 7a5ba83b by @github-actions[bot] in #7984
• Docker image update 6a8781f0 by @github-actions[bot] in #7996
• Docker image update 5f914290 by @github-actions[bot] in #8012
• chore(deps): bump the go group across 1 directory with 6 updates by @dependabot[bot] in #8037
• Docker image update 8f0038c0 by @github-actions[bot] in #8036
• Docker image update 39f71fa3 by @github-actions[bot] in #8044
• chore(deps): bump the go group with 2 updates by @dependabot[bot] in #8057
• Docker image update b2e33b58 by @github-actions[bot] in #8063
• chore(deps): bump the go group across 1 directory with 4 updates by @dependabot[bot] in #8083
• Docker image update 92ebb2db by @github-actions[bot] in #8085
• Docker image update f1ecbe96 by @github-actions[bot] in #8107
• chore(deps): bump the go group across 1 directory with 3 updates by @dependabot[bot] in #8096
• Docker image update 68bc681d by @github-actions[bot] in #8114
• chore(deps): bump the go group with 2 updates by @dependabot[bot] in #8126
• Docker image update 15b09e30 by @github-actions[bot] in #8128
• Docker image update 8f6021bc by @github-actions[bot] in #8134
• Docker image update 883e338e by @github-actions[bot] in #8147
• chore(deps): bump the go group with 5 updates by @dependabot[bot] in #8143
• Docker image update 3952b73e by @github-actions[bot] in #8154
• chore(deps): bump the go group with 3 updates by @dependabot[bot] in #8183
• Docker image update 24ce9eb1 by @github-actions[bot] in #8173
• chore(deps): bump the go group with 3 updates by @dependabot[bot] in #8186
• Docker image update 5784bad7 by @github-actions[bot] in #818...

v5.1.1

What's Changed

🐛 Bug Fixes

• Update interval checks for mgmt directive by @vepatel in #8043
• Status updates for VS endpoints by @vepatel in #8074
• Don't send request headers & body to jwks uri by @pdabelf5 in #8119

📦 Helm Chart

• Update agent endpoint by @pdabelf5 in #8028

🧪 Tests

• update test dockerfile by @vepatel in #8136

🔨 Maintenance

• Update release upload to azure workflow by @pdabelf5 in #8017

📝 Documentation

• Add production documentation link for OpenTelemetry by @ADubhlaoich in #8041

⬆️ Dependencies

• Docker image update dbfdbafc (#8024) by @pdabelf5 in #8030
• Docker image update b2e33b58 by @github-actions[bot] in #8080
• Docker image update 783e8763 by @github-actions[bot] in #8112
• chore(deps): bump the go group across 1 directory with 3 updates (#8096) by @pdabelf5 in #8115
• Update Go Group on release-5.1 by @AlexFenlon in #8131
• Update to NGINX OSS 1.29.1, PLUS R35, Agent v3.2, App Protect and Alpine 3.22 by @AlexFenlon in #8139
• Dependancies update for 5.1.1 by @AlexFenlon in #8148
• Docker image update 8f6021bc by @github-actions[bot] in #8140

Full Changelog: v5.1.0...v5.1.1

Upgrade

• For NGINX, use the v5.1.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v5.1.1 images from the F5 Container registry or build your own image using the v5.1.1 source code.
• For Helm, use version 2.2.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginx/kubernetes-ingress/tree/v5.1.1/examples
• Helm Chart -- https://github.com/nginx/kubernetes-ingress/tree/v5.1.1/deployments/helm-chart
• Operator -- https://github.com/nginx/nginx-ingress-helm-operator

v5.1.0

What's Changed

🚀 Features

• Add ConfigMapKeys & MGMTConfigMapKeys to Telemetry by @AlexFenlon in #7695
• Add Context to logging for JSON and TEXT formats by @AlexFenlon in #7705
• Add request_method to rate-limit Policy by @vepatel in #7832
• Add OpenTelemetry support by @haywoodsh in #7642
• Add OIDC PKCE configuration through Policy by @javorszky in #7765
• Add support for Agent V3 and Connecting to NGINX One Console by @AlexFenlon in #7916
• Tiered rate limits with variables by @pdabelf5 in #7884

🐛 Bug Fixes

• Use pod labels as headless selector labels by @pdabelf5 in #7651
• Avoid applying updates on Ingress Controller shutdown by @vepatel in #7691
• Add ; in oidc files by @vepatel in #7748
• Correct namespace for mgmt secrets by @pdabelf5 in #7786
• Update template for custom redirect URI by @vepatel in #7853
• Maintain HeadlessService on upgrade by @vepatel in #7865

📦 Helm Chart

• Release 5.1.0 by @github-actions in #7940

🧪 Tests

• Add retries to test logic by @vepatel in #7643
• Docker image update a48c8357 by @github-actions in #7980

🔨 Maintenance

• Remove community slack notification by @pdabelf5 in #7663
• Add separator to the end of the new release notes by @pdabelf5 in #7676
• Update OIDC files with reference implementation by @vepatel in #7722
• Update ci files to build on oidc conf changes by @vepatel in #7753
• Add oidc refactor commit from ref impl by @vepatel in #7762
• Remove s390x, arm/7 and ppc64le by @AlexFenlon in #7784
• Clean up Agent values file and tests by @AlexFenlon in #7758
• Add pull policy to Minikube local tests by @AlexFenlon in #7759
• Replace archive.builds with .ids in goreleaser by @javorszky in #7801
• Fix markdown linter issues by @jjngx in #7822
• Trigger an image rebuild if the js or conf files change by @pdabelf5 in #7843
• Reference main mend job by @jjngx in #7834
• Run codeql from referenced workflow by @jjngx in #7837
• Update mend and codeql versions to commit at v0.2 by @javorszky in #7851
• Pin NGINX App Protect images to use NGINX Agent V2 by @AlexFenlon in #7858
• Update agent test marker in regression matrix by @vepatel in #7863
• Tidy NGINX PAT usage by @pdabelf5 in #7886
• Add BUILD OS & Arch to rhel system registration host name by @pdabelf5 in #7895
• Move internal docs folder outside of website docs folder by @ADubhlaoich in #7892
• Add dev docs exception by @vepatel in #7908
• Run mend workflow on main and release branches by @jjngx in #7881
• Disable release note generation by @pdabelf5 in #7921
• Pin mvdan/gofumpt in github workflow ci and fix bash variable quoting by @javorszky in #7923
• Remove arm, s390x & ppc64le references by @pdabelf5 in #7924
• Use GITHUB_TOKEN for auto merge by @pdabelf5 in #7928
• Update release process by @pdabelf5 in #7922
• Update Dockerfile syntax version to 1.16 by @pdabelf5 in #7898
• Update references to migrated nginxinc projects by @pdabelf5 in #7936
• Pin OSS version in Dockerfile by @github-actions in #7990

📝 Documentation

• Update the zone-sync ConfigMap key note by @AlexFenlon in #7641
• Update OpenTracing ConfigMap docs by @vepatel in #7652
• Remove extra characters in zone-sync note by @AlexFenlon in #7658
• Update tech spec with supported versions by @vepatel in #7674
• Update the ConfigMap Zone Sync documentation by @ADubhlaoich in #7681
• Adds installation guide for NIC and NGINX App Protect WAF by @javorszky in #7688
• Update all self-referential Release links from production URLs by @ADubhlaoich in #7708
• Removed unused configurations parameters for helm installation by @cdxker in #7729
• Formatted example clone repo command as codeblock by @travisamartin in #7728
• Update docs for watch-secret-namespace by @vepatel in #7744
• Update NIC about page by @vepatel in #7755
• NIC+NAP wafv5 install guide perm fix by @javorszky in #7760
• Add note to the Tech Specs about removal of archs by @AlexFenlon in #7782
• Update AWS LB doc by @vepatel in #7818
• Remove release page links to marketplaces by @ADubhlaoich in #7871
• Remove 3.1.1 from tech specs by @vepatel in #7894
• Remove documentation website files by @ADubhlaoich in #7915

⬆️ Dependencies

• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.28.2 to 1.29.0 in the go group by @dependabot in #7647
• chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in the go_modules group by @dependabot in #7666
• Docker image update c1e42434 by @nginx-bot in #7714
• chore(deps): bump the go group across 1 directory with 8 updates by @dependabot in #7711
• chore(deps): bump the go group with 2 updates by @dependabot in #7767
• Docker image update 78a6243e by @nginx-bot in #7788
• chore(deps): bump the go group with 4 updates by @dependabot in #7798
• Update kubernetes version to v1.33.1 in helm schema by @nginx-bot in #7808
• chore(deps): bump the go group with 2 updates by @dependabot in #7824
• Docker image update 5b83e3f7 by @nginx-bot in #7825
• Docker image update 1de54b35 by @nginx-bot in #7855
• chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.11 to 0.5.12 in the go group by @dependabot in #7854
• Update NGINX OSS to 1.27.5 by @pdabelf5 in #7890
• Update go version to 1.24.4 by @pdabelf5 in #7896
• Docker image update 61b675bc by @github-actions in #7888
• Update UBI9 version to 9.6 as 9.5 is no longer updated by @pdabelf5 in #7893
• chore(deps): bump the go group across 1 directory with 5 updates by @dependabot in #7900
• Docker image update 6913142a by @github-actions in #7903
• chore(deps): bump the go group with 3 updates by @dependabot in #7918
• chore(deps): bump the go group with 4 updates by @dependabot in #7926
• Docker image update 1e04714a by @github-actions in #7948
• Docker image update 79d70b3a by @github-actions in #7963
  *...

v5.0.0

What's Changed

💣 Breaking Changes

• Remove support for Open Tracing for NGINX Plus by @jjngx in #7567
• Remove OpenTracing Support from NIC by @pdabelf5 in #7633

🚀 Features

• Increase port number range by @saedx1 in #7054
• Ratelimit based on JWT claim by @pdabelf5 in #7175
• add auth_jwt_claim_set in nginx plus virtualserver template by @haywoodsh in #7205
• Add initial zone_sync values to the ConfigMap by @AlexFenlon in #7239
• Update to NGINX OSS 1.27.4 by @pdabelf5 in #7299
• generate auth_jwt_claim_set directive by @haywoodsh in #7238
• Tiered Rate limit group maps by @pdabelf5 in #7390
• Rate limit group example by @pdabelf5 in #7393
• Add zone-sync with no TLS to ConfigMap by @AlexFenlon in #7347
• Update zone-sync headless service selector label by @pdabelf5 in #7445
• Rate limit zone sync by @pdabelf5 in #7468
• Rate limit with zone sync and scale by @pdabelf5 in #7521
• Update NGINX Plus to R34 and App Protect to 4.14 & 5.6 by @pdabelf5 in #7597
• Add forward proxy support to Plus mgmt config by @AlexFenlon in #7560
• Use pod labels as headless selector labels by @nginx-bot in #7654

🐛 Bug Fixes

• Clean up and fix for NIC Pod failing to bind when NGINX exits unexpectedly by @AlexFenlon in #7121
• Correct typo in helm lease annotations template by @pdabelf5 in #7185
• Add tracking.info and copy into plus images by @javorszky in #7400
• Add NGINX state directory for ReadOnlyRootFilesystem by @haywoodsh in #7519

📦 Helm Chart

• Allow customization of service http and https port names through helm by @arussellf5 in #7318
• Release 5.0.0 by @nginx-bot in #7617

🧪 Tests

• Add mgmt configmap tests by @j1m-ryan in #6957
• Expand mgmt configmap tests by @pdabelf5 in #6987
• Add minikube as option for running tests by @pdabelf5 in #7018
• Add plus jwt to local tests by @pdabelf5 in #7032
• Add OIDC test using keycloak as idp by @vepatel in #7242
• Enable jwksuri tests with keycloak by @vepatel in #7396
• Add delay & retry to flakey weight splits test by @pdabelf5 in #7324
• Update split tests to use delete and create lib function by @vepatel in #7418
• tiered rate limit jwt e2e tests by @pdabelf5 in #7412
• Add zone-sync support to OIDC tests by @vepatel in #7440
• replace patch with delete and create by @vepatel in #7638

🔨 Maintenance

72 changes

• ensure tag exists before scanning by @pdabelf5 in #6958
• allow scan uploads to fail by @pdabelf5 in #6961
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #6944, #7044, #7072, #7124, #7168, #7261, #7373, #7402, #7487, #7548, #7587
• Re-add FIPs images to tests, image patching & release by @haywoodsh in #6948
• chore(deps): bump the actions group across 1 directory with 2 updates by @dependabot in #6960
• update regression matrix to include old k8s by @vepatel in #6974
• Remove unused packages from UBI images by @pdabelf5 in #6989
• chore(deps): bump the actions group with 2 updates by @dependabot in #6991
• Certify UBI images for Redhat catalog by @pdabelf5 in #7011
• chore(deps): bump the actions group with 2 updates by @dependabot in #7005
• chore(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 in the actions group by @dependabot in #7019
• Symlink to central secret by @pdabelf5 in #6714
• remove all attestation layers from AWS marketplace images by @pdabelf5 in #7033
• chore(deps): bump codecov/codecov-action from 5.1.1 to 5.1.2 in the actions group by @dependabot in #7030
• Add tests for kubernetes versions by @pdabelf5 in #7035
• chore(deps): bump the actions group across 1 directory with 5 updates by @dependabot in #7055
• remove index annotations from AWS marketplace images by @pdabelf5 in #7058
• Add unprivileged port validation by @pdabelf5 in #7034
• pre-commit: silence markdownlint by @javorszky in #7067
• chore(deps): bump reviewdog/action-actionlint from 1.61.0 to 1.62.0 in the actions group by @dependabot in #7070
• remove ubi images from CI by @pdabelf5 in #7093
• remove additional ubi config by @pdabelf5 in #7104
• chore(deps): bump the actions group across 1 directory with 4 updates by @dependabot in #7107
• Update from nginxinc to nginx by @lucacome in #7103
• chore(deps): bump the actions group with 3 updates by @dependabot in #7123
• chore(deps): bump docker/build-push-action from 6.11.0 to 6.12.0 in the actions group by @dependabot in #7139
• Avoid floating semi-colon on rate-limiting newline by @pdabelf5 in #7156
• chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.1 in the actions group by @dependabot in #7159, #7344, #7503
• chore(deps): bump the actions group with 2 updates by @dependabot in #7172
• chore(deps): bump the actions group with 3 updates by @dependabot in #7180
• Docker image update 00f989f4 by @nginx-bot in #7199
• Remove kind 1.32.1 from available kind versions by @pdabelf5 in #7208
• chore(deps): bump the actions group across 1 directory with 5 updates by @dependabot in #7209
• VS template test tidy up by @pdabelf5 in #7211
• Add central event reasons to the log package by @pdabelf5 in #7215
• chore(deps): bump the actions group across 1 directory with 3 updates by @dependabot in #7224
• Refactor policy config structs by @pdabelf5 in #7232
• chore(deps): bump the actions group across 1 directory with 2 updates by @dependabot in #7241
• re-enable ubi image build & publish by @pdabelf5 in #7246
• chore(deps): bump the actions group across 1 directory with 3 updates by @dependabot in #7270
• chore(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.0 in the actions group by @dependabot in #7291
• Pin app protect version by @pdabelf5 in #7298
• update helm snaps versions when creating release PR...

v4.0.1

What's Changed

🐛 Bug Fixes

• Clean up and fix for NIC Pod failing to bind when NGINX exits unexpectedly by @AlexFenlon in #7295

📦 Helm Chart

• Correct typo in helm lease annotations template by @nginx-bot in #7188

🧪 Tests

• Symlink to central secret by @nginx-bot in #7038

🔨 Maintenance

• Certify UBI images for Redhat catalog workflow by @pdabelf5 in #7013
• Remove all attestation layers from AWS marketplace images by @nginx-bot in #7039
• Remove index annotations from AWS marketplace images by @nginx-bot in #7060
• Remove kind 1.32.1 from available kind versions by @nginx-bot in #7210
• Pin app protect v5 version by @pdabelf5 in #7297

📝 Documentation

• Fix link in security.md by @AlexFenlon in #7008
• Fixed documentation for specifying NAP enforcer and configManager images in Helm values by @pdabelf5 in #7026
• Update upgrade docs by @nginx-bot in #7037
• Update policy waf docs by @nginx-bot in #7077
• Update APIKey suppliedIn docs by @nginx-bot in #7085
• Fix broken link to NIM Security Monitoring by @pdabelf5 in #7095
• Fix broken url in compile-waf-policies.md by @nginx-bot in #7112
• Fix broken link in example for nginx plus license by @nginx-bot in #7117
• Fix links to NIM App-protect docs by @nginx-bot in #7130
• Update build instruction link, remove EoS versions from specifications by @nginx-bot in #7146
• Update master/minion allowed ingress annotations by @nginx-bot in #7153
• Fix mountPath directory for NAP5 policy documentation by @nginx-bot in #7201
• Remove email support by @nginx-bot in #7249
• Release 4.0.1 by @nginx-bot in #7279

⬆️ Dependencies

• Docker image update e784ea43 by @nginx-bot in #7012
• Bump redhat/ubi9-minimal from dee813b to daa61d6 in /build by @nginx-bot in #7022
• Bump github.com/gruntwork-io/terratest from 0.48.0 to 0.48.1 in the go group by @nginx-bot in #7024
• Docker image update edf8f98b by @nginx-bot in #7028
• Bump the go group across 1 directory with 4 updates by @nginx-bot in #7061
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #7113
• Bump the go group with 2 updates by @nginx-bot in #7145
• Docker image update 43d85eaa by @nginx-bot in #7144
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #7148
• Docker image update cc87db80 by @nginx-bot in #7152
• Bump the docker-images group across 1 directory with 2 updates by @nginx-bot in #7155
• Bump the go group with 7 updates by @nginx-bot in #7154
• Bump Go version to 1.23.5 by @nginx-bot in #7163
• Docker image update 849e80b1 by @nginx-bot in #7181
• Bump the go group across 1 directory with 4 updates by @nginx-bot in #7164
• Bump the go group with 2 updates by @nginx-bot in #7229
• Bump the go group across 1 directory with 5 updates by @nginx-bot in #7265
• Docker image update d723130c by @nginx-bot in #7267
• Bump the go group with 2 updates by @nginx-bot in #7250
• Update to nginx 1.27.4 by @nginx-bot in #7301
• Bump redhat/ubi9-minimal from b870979 to 3902bab in /build by @nginx-bot in #7302
• Bump the go group with 2 updates by @nginx-bot in #7296
• Docker image update 44932776 by @nginx-bot in #7304
• Update opentracing module by @nginx-bot in #7307
• Ubi dependecy update for NGINX 1.27.4 by @pdabelf5 in #7310
• Bump the go group with 2 updates by @nginx-bot in #7321
• Docker image update e0520048 by @nginx-bot in #7320

Full Changelog: v4.0.0...v4.0.1

Upgrade

• For NGINX, use the v4.0.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v4.0.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v4.0.1 source code.
• For Helm, use version 2.0.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginx/kubernetes-ingress/tree/v4.0.1/examples
• Helm Chart -- https://github.com/nginx/kubernetes-ingress/tree/v4.0.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v4.0.0

What's Changed

💣 Breaking Changes

• Add LogLevel & LogFormat flags by @AlexFenlon in #6520
• Deprecate v1alpha1 CRDs for GlobalConfiguration, Policy & TransportServer by @pdabelf5 in #6800
• Add license secret and mgmt config map for r33 by @AlexFenlon in #6903

🚀 Features

• Add glog slog handler by @pdabelf5 in #6474
• TransportServer SNI by @j1m-ryan in #6605
• Add events to configmap by @j1m-ryan in #6819
• Add events when special secrets update by @AlexFenlon in #6878
• Add additional mgmt config parameters by @pdabelf5 in #6921

🐛 Bug Fixes

• Generate valid yaml for readOnly fs by @jjngx in #6583
• UpstreamServer Fields Logs Displayed as Memory Addresses by @AlexFenlon in #6635
• Revert to original main-template without pod downtime by @jjngx in #6661
• Add nil check to apikey suppliedIn by @j1m-ryan in #6733
• Use default VS and TS templates when CfgMap obj is deleted by @jjngx in #6780

📦 Helm Chart

• Helm schema examples by @pdabelf5 in #6667
• Update kubernetes version to v1.32.0 in helm schema by @nginx-bot in #6998
• Release 4.0.0 by @nginx-bot in #6986

🧪 Tests

• Remove unnecessary type assertion by @j1m-ryan in #6479
• Add marker to conftest by @vepatel in #6491
• Add separate config to skip v5 tests by @vepatel in #6493
• Add support for readonlyrootfilesystem test for wafv5 by @vepatel in #6708
• Helm unit tests by @pdabelf5 in #6895
• Add wait in scaled rate-limit test by @vepatel in #6940
• Add mgmt configmap tests by @nginx-bot in #6965

🔨 Maintenance

• Add wafv5 tests to regression matrix by @vepatel in #6478
• Refactor to prepare for structured logs by @AlexFenlon in #6501
• Prevent final result from succeeding if any image builds fail by @pdabelf5 in #6509
• Grafana template update that works with grafana v11.2.0 by @sdutta9 in #6511
• Simplify bug report form by @shaun-nx in #6550
• Add ubi8 images patching workflow by @pdabelf5 in #6555
• Remove deprecated log level parameters by @AlexFenlon in #6620
• Replace glog in healthcheck.go & remove glog dependency by @AlexFenlon in #6628
• Fix make staticcheck, (use NewInformerWithOptions and TypedRateLimitingInterface) by @j1m-ryan in #6647
• Add static check action to CI by @j1m-ryan in #6649
• Update python to 3.13 and disable pytest-profiling by @AlexFenlon in #6651
• Update helm schema examples by @pdabelf5 in #6665
• Renew expired certificate used in tests by @pdabelf5 in #6736
• Add plus mgmt deployment context process by @j1m-ryan in #6309
• Remove unused functions by @pdabelf5 in #6806
• Refactor special secret input and validation by @pdabelf5 in #6808
• Allow k8s events in initial validation by @pdabelf5 in #6814
• Refactor resolver in template by @j1m-ryan in #6832
• Build UBI s390x nginx package for OSS images by @pdabelf5 in #6846
• Rename TLSSecretFileMode to ReadWriteOnlyFileMode by @pdabelf5 in #6854
• Add ubi-9 container image tag by @pdabelf5 in #6874
• Refactor namespace/name logic by @pdabelf5 in #6871
• Refactor, set staticSSLPath to a variable for reuse by @AlexFenlon in #6872
• Refactor configmap.go for extensability by @j1m-ryan in #6873
• Add secret type for getAndValidateSecret() by @pdabelf5 in #6877
• Refactor handleSpecialSecretUpdate by @j1m-ryan in #6875
• Refactor lbc to add metadata struct by @j1m-ryan in #6885
• Add license expiry checks by @pdabelf5 in #6917
• Prevent auto publishing docs on push to release branch by @pdabelf5 in #6926
• Update secrets when mgmt configmap changes by @pdabelf5 in #6947
• Fix Makefile Bug by @saedx1 in #6809
• Re-add FIPs images to tests, image patching & release by @nginx-bot in #6972
• Update regression matrix to include old k8s by @nginx-bot in #6977
• Trim UBI python packages by @pdabelf5 in #6993

📝 Documentation

• Update community call dates by @AlexFenlon in #6506
• Added Support page by @mrajagopal in #6467
• Fix external url links by @nginx-aoife in #6519
• Add hugo version check and theme update to Makefile by @nginx-jack in #6518
• Update documentation folder, dependencies and deployment action by @ADubhlaoich in #6554
• Migrate access control example to documentation website by @ADubhlaoich in #6572
• Update community call information by @danielnginx in #6766
• Updates to WAF v5 docs by @jjngx in #6694
• Update NMS references by @Jcahilltorre in #6802
• Add endpoint to product telemetry doc by @j1m-ryan in #6855
• Update README.md by @danielnginx in #6870
• Updates to usage-reporting page by @vepatel in #6899
• Remove marketplace plus images from docs for 4.0.0 by @pdabelf5 in #6928
• Add upgrading to 4.x docs by @nginx-bot in #6985

⬆️ Dependencies

65 changes

• Docker image update c30328bf by @nginx-bot in #6485
• Bump the go group with 2 updates by @dependabot in #6483
• Bump the go group with 2 updates by @dependabot in #6496
• Docker image update e58c873f by @nginx-bot in #6497
• Docker image update e000531c by @nginx-bot in #6512
• Bump the go group with 2 updates by @dependabot in #6522
• Docker image update 46d483c1 by @nginx-bot in #6533
• Docker image update 31e5a443 by @nginx-bot in #6543
• Bump the go group with 2 updates by @dependabot in #6540
• Docker image update 40274c4b by @nginx-bot in #6557
• Bump Go version by @jjngx in #6559
• Docker image update b31cdb28 by @nginx-bot in #6580
• Bump the go group with 2 updates by @dependabot in #6589
• Bump the go group across 1 directory with 3 updates by @dependabot in #6614
• Bump the docker-images group ...

v3.7.2

What's Changed

🐛 Bug Fixes

• Update oidc_template and conf to fix #6812 by @vepatel in #6838

🔨 Maintenance

• Upgrade Go to 1.23.3 by @nginx-bot in #6781
• Build UBI s390x nginx package for OSS images by @pdabelf5 in #6847
• Update kubernetes version to v1.31.2 in helm schema by @nginx-bot in #6818
• Update go toolchain and NIC version by @vepatel in #6859

📝 Documentation

• Fix docs 404s by @pdabelf5 in #6768
• Remove fips images from documentation until OpenSSL fix is available by @pdabelf5 in #6799
• Update NMS references by @Jcahilltorre in #6820
• Add endpoint to product telemetry doc by @j1m-ryan in #6856

⬆️ Dependencies

• Docker image updates by @nginx-bot in #6779
• Bump the go dependencies by @nginx-bot in #6791
• Docker image updates by @nginx-bot in #6790
• Bump the go dependencies by @nginx-bot in #6849
• Docker image update 9ca30b62 by @nginx-bot in #6851
• Bump github.com/cert-manager/cert-manager from 1.16.1 to 1.16.2 by @nginx-bot in #6839

Full Changelog: v3.7.1...v3.7.2

Upgrade

• For NGINX, use the v3.7.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.7.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.7.2 source code.
• For Helm, use version 1.4.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.2/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.7.1

What's Changed

🐛 Bug Fixes

• Add nil check to apikey suppliedIn by @j1m-ryan in #6735
• Add OIDC fix for ID token nonce claim validation by @jjngx in #6761

🔨 Maintenance

• Update kubernetes version to v1.31.1 in helm schema by @nginx-bot in #6646
• Update helm schema examples by @pdabelf5 in #6666

📝 Documentation

• Fix typo and add missing version by @vepatel in #6537
• Update NGINX Plus Version for v3.6.2 and v3.7.0 by @shaun-nx in #6569
• Update documentation folder by @nginx-jack in #6602

⬆️ Dependencies

• Docker image update 31e5a443 by @nginx-bot in #6545
• Fix go toolchain by @nginx-bot in #6549
• Bump the go group with 2 updates by @nginx-bot in #6553
• Docker image update 40274c4b by @nginx-bot in #6560
• Bump Go version by @nginx-bot in #6570
• Bump the go group with 2 updates by @nginx-bot in #6591
• Bump the docker-images group across 1 directory with 3 updates by @nginx-bot in #6619
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6618
• Docker image update 556fd680 by @nginx-bot in #6640
• Bump the go group across 1 directory with 6 updates by @nginx-bot in #6648
• Bump nginxinc/dependencies/nginx-ot from 0f5479b to 8604f87 in /build by @nginx-bot in #6664
• Docker image update 0772406c by @nginx-bot in #6686
• Bump github.com/aws/aws-sdk-go-v2/config from 1.27.43 to 1.28.0 by @nginx-bot in #6688
• Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @nginx-bot in #6674
• Docker image update 3c3e619d by @nginx-bot in #6703
• Bump the go group with 4 updates by @nginx-bot in #6707
• Docker image update e6c0a4ef by @nginx-bot in #6720
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6730
• Docker image update 52a62c5c by @nginx-bot in #6755
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @nginx-bot in #6751
• Update ubi-ppc64le to nginx 1.27.2 by @nginx-bot in #6759

Full Changelog: v3.7.0...v3.7.1

Upgrade

• For NGINX, use the v3.7.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.7.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.7.1 source code.
• For Helm, use version 1.4.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.7.0

Important

FIPS compliant images are currently impacted by compatibility issues with a dependent library.
We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🚀 Features

• Add BUILD_OS to Telemetry by @AlexFenlon in #5968
• Sync oidc repo by @haywoodsh in #6014
• Support End Session Endpoint for OIDC and allow customizable Post-logout Redirect URI by @haywoodsh and @llomgui in #6092
• Make access_log in http context configurable by @hafe in #5648
• Add ip as an option to listeners for VirtualServer by @AlexFenlon in #6180
• Add ip as an option to listeners for TransportServer by @j1m-ryan in #6367

🐛 Bug Fixes

• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• Fix api key policy undefined routes by @j1m-ryan in #5838
• Add default telemetry endpoint by @shaun-nx in #5885
• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5899
• Don't log errors for not implemented grpc metrics by @jjngx in #6125
• Fix panic when creating VirtualServer by @hafe in #6232
• Create unique lease obj for each NIC installed via Helm by @jjngx in #6372
• Fix udp/http listener validation logic by @j1m-ryan in #6406
• Disable batch reload when batch finishes by @dareste in #6446
• grafana template update that works with grafana v11.2.0 (#6511) by @jjngx in #6526

📦 Helm Chart

• Remove include-year and includeYear flag by @harsha-mangena in #5817
• Choose NodePort values for controller.service.type = LoadBalancer by @Falltrades in #5335
• Update helm docs by @vepatel in #6235
• [cherry-pick] WAFv5 update to 5.3/alpine update by @nginx-bot in #6510
• Release 3.7.0 by @nginx-bot in #6480

🧪 Tests

• Check for non 50x 404 response by @vepatel in #5851
• Chore/python clean up, and unused variable check to pre commit by @j1m-ryan in #5866
• Split VSR matrix in 3 by @j1m-ryan in #5883
• Move some python tests from vs1 to vs2 by @j1m-ryan in #5888
• Pod logs in tests when startup fails by @oseoin in #5901
• Make markers strict, and add project.toml to local python tests, by @j1m-ryan in #5911
• Add flaky label to some flaky tests by @j1m-ryan in #5955
• Dos - Allow list by @pasmant in #5824
• Reduce NAP CI time by @j1m-ryan in #5999
• Add test to check for agent by @vepatel in #6111
• Move test to correct directory by @vepatel in #6114
• Assert version from log and chart by @vepatel in #6307
• Add NIC+WAFv5 tests by @vepatel in #6456
• Add retry to version check in logs by @nginx-bot in #6504

🔨 Maintenance

129 changes

• Add name to image promotion and always run promotion by @oseoin in #5793
• Add 'needs cherry pick' label to auto-create cherrypick PRs by @oseoin in #5796
• Bump the actions group across 1 directory with 12 updates by @dependabot in #5798
• add addiitional pr tag to images by @pdabelf5 in #5799
• Enable auto-merge for dependabot by @oseoin in #5801
• Bump docker/build-push-action from 6.0.1 to 6.0.2 in the actions group by @dependabot in #5805
• add regression workflow by @pdabelf5 in #5809
• Test splitting smoke tests by dependency by @oseoin in #5803
• Re-order docker builds by @oseoin in #5812
• consolidate image generation matrices by @pdabelf5 in #5815
• Run Trivy & DockerScout on main & release branches by @pdabelf5 in #5818
• Skip upload test results on skipped tests by @oseoin in #5827
• Change test upload logic to match test run logic by @oseoin in #5829
• Fix branch prefix for docker sha updates by @oseoin in #5830
• add permissions to update released images by @pdabelf5 in #5831
• Forked workflow build by @oseoin in #5835
• Bump the actions group across 1 directory with 5 updates by @dependabot in #5825
• Add actionlint pre commit plugin by @pdabelf5 in #5839
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5841
• remove sarif artifact upload for images in feature branches by @pdabelf5 in #5850
• ensure example versions are updated by @pdabelf5 in #5853
• add permissions for gcr login to base image build by @pdabelf5 in #5860
• Bump docker/build-push-action from 6.1.0 to 6.2.0 in the actions group by @dependabot in #5871
• Exclude files from stable tag which don't impact build or test by @oseoin in #5875
• add run-name to ci & update docker sha workflows by @pdabelf5 in #5876
• add nap-v5 images to image patch workflow by @pdabelf5 in #5894
• Change always references to not cancelled by @oseoin in #5898
• ensure release draft occurs by @pdabelf5 in #5900
• remove fips from tests, image patching & release by @pdabelf5 in #5912
• Delete netlify.toml by @j1m-ryan in #5915
• Bump the actions group across 1 directory with 2 updates by @dependabot in #5904
• Mount pyproject.toml in smoke tests by @oseoin in #5932
• Add missing write permission for release draft by @oseoin in #5945
• Bump the actions group with 2 updates by @dependabot in #5948
• OT dependency build by @oseoin in #5919
• test single image workflow by @pdabelf5 in #5969
• pull test image by @pdabelf5 in #5971
• Add missing opentracing build action SHAs by @oseoin in #5970
• Shortcode for NIC version in docs by @oseoin in #5953
• Update description for k8s version in single image regression by @oseoin in #5986
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5984
• Workflow to build ppc64le binary for ubi by @oseoin in #6005
• Bump the actions group across 1 directory with 11 updates by @dependabot in #6024
• Bump docker/build-push-action from 6.4.0 to 6.4.1 in the actions group by @dependabot in #6035
• Bump the actions group across 1 directory with 5 updates by @dependabot in #6045
• ensure s...

v3.6.2

Important

FIPS compliant images are currently impacted by compatibility issues with a dependent library.
We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🐛 Bug Fixes

• Don't log errors for not implemented grpc metrics (#6125) by @jjngx in #6150
• re-order mounting debian apt source file by @nginx-bot in #6225

📦 Helm Chart

• Update helm docs by @nginx-bot in #6236
• Release 3.6.2 by @nginx-bot in #6220

🧪 Tests

• add agent test by @vepatel in #6115

🔨 Maintenance

• Shortcode for NIC version in docs by @nginx-bot in #5975
• replace promlog with go-kit by @nginx-bot in #6053
• pin wafv5 module by @vepatel in #6170
• update example for WAF v5 by @nginx-bot in #6189
• Bump kindest/node from v1.30.2 to v1.31.0 in /tests in the docker-tests group by @nginx-bot in #6206
• update kubernetes version to v1.31.0 in helm schema by @nginx-bot in #6219

📝 Documentation

• fips compatibility issue by @oseoin in #5973
• update k8s compatibility order in tech specs by @j1m-ryan in #5991
• update WAF v5 documentation by @nginx-bot in #6019
• remove link to ingress example by @nginx-bot in #6102
• App Protect WAFv5 compatibility matrix by @nginx-bot in #6178
• update README.md by @vepatel in #6190
• Fix manifest CRD documentation by @ADubhlaoich in #6208

⬆️ Dependencies

• Bump the go group with 1 update by @nginx-bot in #5967
• Docker image update d41d8cd9 by @nginx-bot in #5974
• Docker image update d41d8cd9 by @nginx-bot in #6013
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6021
• Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in the go_modules group by @nginx-bot in #5998
• Docker image update d41d8cd9 by @nginx-bot in #6070
• Bump the go group across 1 directory with 6 updates by @nginx-bot in #6081
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6120
• Docker image update d41d8cd9 by @nginx-bot in #6098
• Docker image update d41d8cd9 by @nginx-bot in #6126
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6141
• Docker image update d41d8cd9 by @nginx-bot in #6158
• Docker image update d41d8cd9 by @nginx-bot in #6179
• Docker image update d41d8cd9 by @nginx-bot in #6191
• Bump the go group across 1 directory with 11 updates by @nginx-bot in #6196
• update telemetry exporter to v0.1.1 by @nginx-bot in #6204
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6211
• Bump github.com/nginxinc/nginx-plus-go-client from 1.2.2 to 1.3.0 in the go group by @nginx-bot in #6222
• nginx 1.27.1 dependencies by @pdabelf5 in #6226
• Docker image update d41d8cd9 by @nginx-bot in #6233
• Bump the go group with 3 updates by @nginx-bot in #6234

Full Changelog: v3.6.1...v3.6.2

Upgrade

• For NGINX, use the v3.6.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.6.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.6.2 source code.
• For Helm, use version 1.3.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.2/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator