v2.3.0

What's Changed

🚀 Features

• Add runAsNonRoot in deployments by @lucacome in #2583
• Add container resource requests by @lucacome in #2484
• Add OpenTracing to all Debian and Alpine based images by @lucacome in #2581
• Update InternalRoute server_name by @sjberman in #2627
• Add support for allocateLoadBalancerNodePorts, ipFamilyPolicy and ipFamilies by @centromere in #2418
• Add handling of multiple log destinations by @rafwegv in #2328
• Add minReadySeconds & strategy support by @cmk-pcs in #2672
• AP: log-conf escaping chars by @rafwegv in #2691
• allow configuring topologySpreadConstraints in Helm chart by @kdomanski in #2625
• Add string sanitisation for proxy-pass-headers & proxy-hide-headers by @shaun-nx in #2730
• Add additional unit tests to confirm special characters can't be used in the lb-method annotation by @shaun-nx in #2742
• Add string validation to server-tokens annotation by @shaun-nx in #2733
• Validate rewrite annotation by @haywoodsh in #2734
• Validate JWT key, realm and login url for ingress resources annotations by @haywoodsh in #2754
• Add string validation to sticky-cookie-services annotation by @shaun-nx in #2751
• Add validation to Ingress path by @shaun-nx in #2775
• Sanitize nginx.com/jwt-token by @haywoodsh in #2774
• feat: add support for HTTP01 Challenges on VirtualServer resources by @ciarams87 in #2759
• feat: Report Hostname in ExternalEndpoint for VS and VSR resources by @ciarams87 in #2781
• Add external DNS endpoint CRD by @jjngx in #2762
• Update validation regex for path spec by @shaun-nx in #2783
• Add SBOMs to release by @lucacome in #2801
• HTTP basic auth support by @svvac in #2269
• feat: Integrate ExternalDNS with VirtualServer resources by @ciarams87 in #2800

🐛 Bug Fixes

• Fix Dockerfile for amd64 microarchitectures by @lucacome in #2617
• Fix typo in documentation by @haywoodsh in #2624
• Add terminationGracePeriodSeconds to deployment by @maksym-iv in #2637
• Update codegen and fix check by @lucacome in #2663
• Sync changes from OIDC repo, add field in policy by @lucacome in #2654
• Fix status.loadbalancer.hostname deletion on OOMKill by @hvoigt in #2673
• Fix cases where CM enabled but no TLS block specified in VS by @ciarams87 in #2718
• Fix CVE-2022-1664 by @ciarams87 in #2722
• Update openssl libraries in debian images by @ciarams87 in #2797
• Fix the latest CVES by @ciarams87 in #2834

📝 Documentation

• Add Slack to contacts and update link by @lucacome in #2613
• Report expected controller by @jsoref in #2642
• Update OIDC example note for IPv6 by @brianehlert in #2653
• Upload Docker images to Quay.io by @lucacome in #2665
• Correct spelling mistakes by @jsoref in #2645
• Fix typo in the documentation. by @thresheek in #2683
• Update docs to reflect DNS01 Issuer support by @ciarams87 in #2666
• Release 2.2.2 to main by @lucacome in #2720
• Update operator docs for latest release by @ciarams87 in #2752
• docs: Add missing doc update by @ciarams87 in #2782
• Validation for App Protect ingress annotations by @haywoodsh in #2793
• Bump NGINX Plus to R27 by @lucacome in #2799
• docs: Create real examples for basic auth by @ciarams87 in #2811
• Update readme by @shaun-nx in #2825
• Update images versions by @lucacome in #2838

🧪 Tests

• tests: Change error string check in openapi spec tests by @ciarams87 in #2794
• Record error and continue running tests by @jjngx in #2803

🔨 Maintenance

• Update updater for 2.2.0 by @lucacome in #2600
• Use new format for images metadata by @lucacome in #2657
• Warn about unhandled arguments by @jsoref in #2641
• Don't run some workflows on forks by @lucacome in #2715
• Use NGINX_PLUS_VERSION in the repo for Alpine and UBI by @lucacome in #2741
• Use Go build info from the binary by @lucacome in #2740
• Refactor main.go by @ciarams87 in #2763
• Automatically close milestone on release by @lucacome in #2810

⬆️ Dependencies

• Bump aquasecurity/trivy-action from 0.2.3 to 0.2.4 by @dependabot in #2612
• Update packages for CVE-2022-1271 by @lucacome in #2619
• Bump k8s.io/code-generator from 0.23.5 to 0.23.6 by @dependabot in #2620
• Bump aquasecurity/trivy-action from 0.2.4 to 0.2.5 by @dependabot in #2615
• Bump k8s.io/client-go from 0.23.5 to 0.23.6 by @dependabot in #2622
• Update packages for CVE-2022-22576 by @lucacome in #2644
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.3 to 1.13.4 by @dependabot in #2634
• Bump pytest from 7.1.1 to 7.1.2 in /tests by @dependabot in #2631
• Bump github/codeql-action from 1 to 2 by @dependabot in #2630
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.3 to 1.15.4 by @dependabot in #2633
• Bump pytest from 7.1.1 to 7.1.2 in /perf-tests by @dependabot in #2632
• Bump github.com/google/go-cmp from 0.5.7 to 0.5.8 by @dependabot in #2636
• Bump grpcio from 1.45.0 to 1.46.0 in /tests by @dependabot in #2646
• Bump grpcio-tools from 1.45.0 to 1.46.0 in /tests by @dependabot in #2647
• Update go-spiffe to v2 by @sjberman in #2652
• Update cert-manager by @lucacome in #2656
• Bump docker/setup-qemu-action from 1 to 2 by @dependabot in #2661
• Bump docker/login-action from 1 to 2 by @dependabot in #2660
• Bump docker/metadata-action from 3 to 4 by @dependabot in #2658
• Bump docker/setup-buildx-action from 1 to 2 by @dependabot in #2659
• Bump docker/build-push-action from 2 to 3 by @dependabot in #2662
• Bump more-itertools from 8.12.0 to 8.13.0 in /tests by @dependabot in #2667
• Update packages for CVE-2022-27404 by @lucacome in #2669
• Bump kubernetes from 23.3.0 to 23.6.0 in /tests by @dependabot in #2671
• Bump kubernetes from 23.3.0 to 23.6.0 in /perf-tests by @dependabot in #2670
• Bump aquasecurity/trivy-action from 0.2.5 to 0.3.0 by @dependabot in #2675
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.4 to 1.15.5 by @dependabot in #2676
• Update packages for CVE-2022-29824 by @lucacome in #2681
• Bump grpcio from 1.46.0 to 1.46.1 in /tests by @dependabot in #2678
• Bump grpcio-tools from 1.46.0 to 1.46.1 in /tests by @dependabot in #2679
• Bump github.com/prometheus/client_golang from 1.12.1 to 1.12.2 by @dependabot in #2685
• Bump google.golang.org/grpc from 1.46.0 to 1.46.2 by @dependabot in #2684
• Update packages for CVE-2022-1292 by @lucacome in #2697
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.4 to 1.13.5 by @dependabot in #2694
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.5 to 1.15.7 by @dependabot in #2693
• docs: Hugo theme May update - CP by @Jcahilltorre in #2699
• Bump certifi from 2021.10.8 to 2022.5.18 in /tests by @dependabot in #2701
• Bump certifi from 2021.10.8 to 2022.5.18.1 in /perf-tests by @dependabot in #2702
• Update packages for CVE-2022-29155 and CVE-2022-29824 by @lucacome in #2714
• Bump goreleaser/goreleaser-action from 2 to 3 by @dependabot in #2706
• Bump grpcio from 1.46.1 to 1.46.3 in /tests by @dependabot in #2708
• Bump grpcio-tools from 1.46.1 to 1.46.3 in /tests by @dependabot in #2707
• Bump locust from 2.8.6 to 2.9.0 in /perf-tests by @dependabot in #2703
• Bump certifi from 2022.5.18 to 2022.5.18.1 in /tests by @dependabot in #2704
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.7 to 1.15.9 by @dependabot in #2727
• Bump google.golang.org/grpc from 1.46.2 to 1.47.0 by @dependabot in #2731
• Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 by @dependabot in #2739
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.9 to 1.15.10 by @dependabot in #2744
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.5 to 1.13.6 by @dependabot in #2743
• Bump requests from 2.27.1 to 2.28.0 in /tests by @dependabot in #2746
• Bump requests from 2.27.1 to 2.28.0 in /perf-tests by @dependabot in #2747
• Update packages for CVE-2022-1271 and CVE-2022-1586 by @lucacome in #2757
• Bump aquasecurity/trivy-action from 0.3.0 to 0.4.0 by @dependabot in #2760
• Bump certifi from 2022.5.18.1 to 2022.6.15 in /tests by @dependabot in #2765
• Bump certifi from 2022.5.18.1 to 2022.6.15 in /perf-tests by @dependabot in #2764
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.10 to 1.15.11 by @dependabot in #2773
• Bump aquasecurity/trivy-action from 0.4.0 to 0.4.1 by @dependabot in #2776
• Bump kubernetes from 23.6.0 to 24.2.0 in /perf-tests by @dependabot in #2788
• Bump github.com/stretchr/testify from 1.7.2 to 1.7.4 by @dependabot in #2780
• Bump aquasecurity/trivy-action from 0.4.1 to 0.5.0 by @dependabot in #2786
• Bump grpcio from 1.46.3 to 1.47.0 in /tests by @dependabot in #2785
• Bump grpcio-tools from 1.46.3 to 1.47.0 in /tests by @dependabot in #2787
• Bump kubernetes from 23.6.0 to 24.2.0 in /tests by @dependabot in #2784
• Bump nginx from 1.21.6 to 1.23.0 in /build by @dependabot in #2790
• Bump library/nginx from 1.21.6-alpine to 1.23.0-alpine in /build by @dependabot in #2789
• Bump opentracing/nginx-opentracing from nginx-1.21.6 to nginx-1.23.0 in /build by @dependabot in #2791
• Bump github.com/golang-jwt/jwt/v4 from 4.4.1 to 4.4.2 by @dependabot in #2792
• Bump kindest/node from v1.23.6 to v1.24.2 in /tests/docker by @dependabot in #2795
• Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 by @dependabot in #2796
• Bump locust from 2.9.0 to 2.10.0 in /perf-tests by @dependabot in #2798
• Bump alpine from 3.15 to 3.16 in /build by @dependabot in #2716
• Bump requests from 2.28.0 to 2.28.1 in /perf-tests by @dependabot in #2806
• Bump github.com/spiffe/go-spiffe/v2 from 2.1.0 to 2.1.1 by @dependabot in #2807
• Bump locust from 2.10.0 to 2.10.1 in /perf-tests by @dependabot in #2805
• Bump requests from 2.28.0 to 2.28.1 in /tests by @dependabot in #2804
• Bump cert-manager to 1.8.2 by @lucacome in #2809
• Bump aquasecurity/trivy-action from 0.5.0 to 0.5.1 by @dependabot in #2813
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.6 to 1.13.7 by @dependabot in #2814
• Bump urllib3 from 1.26.9 to 1.26.10 in /tests by @dependabot in #2828
• Bump urllib3 from 1.26.9 to 1.26.10 in /perf-tests by @dependabot in #2829
• Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 by @dependabot in #2815
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.11 to 1.15.13 by @dependabot in #2823
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.7 to 1.13.8 by @dependabot in #2832
• Bump cffi from 1.15.0 to 1.15.1 in /tests by @dependabot in #2817
• Bump cffi from 1.15.0 to 1.15.1 in /perf-tests by @dependabot in #2818

New Contributors

• @jsoref made their first contribution in #2642
• @sjberman made their first contribution in #2652
• @maksym-iv made their first contribution in #2637
• @centromere made their first contribution in #2418
• @thresheek made their first contribution in #2683
• @hvoigt made their first contribution in #2673
• @cmk-pcs made their first contribution in #2672
• @kdomanski made their first contribution in #2625
• @shaun-nx made their first contribution in #2730

Full Changelog: v2.2.2...v2.3.0

Upgrade

• For NGINX, use the v2.3.0 image from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v2.3.0 image from the F5 Container registry or the AWS Marketplace or build your own image using the v2.3.0 source code.
• For Helm, use version 0.14.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v2.3.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v2.3.0/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator/