v2.4.0

What's Changed

🚀 Features

• replace glog with forked version to include years by @haywoodsh in #2876
• Add ServiceMonitor to Helm Chart by @araineUnity in #2831
• Feature/flag include year by @shaun-nx in #2884
• feat: Support watching multiple namespaces by @ciarams87 in #2914
• Support new directive for dos: app_protect_dos_arb_fqdn by @pasmant in #2745
• Add support for wildcard hostname in VirutalServer by @shaun-nx in #2939
• Add initialDelaySeconds to helm charts by @aknot242 in #2854
• Accept proxy protocol when TLS passthrough enabled by @haywoodsh in #2993
• Allow to specify image with digest in helm chart by @hafe in #2979
• adding automountServiceAccountToken to helm chart by @jasonwilliams14 in #3031
• Add command line argument to manually disable IPV6 listeners for unsupported clusters by @haywoodsh in #3040
• Feat/ignore helm secrets by @shaun-nx in #3088
• Feat/transport server external name by @jjngx in #3041

🐛 Bug Fixes

• fix: Correct error message on missing path in path validation by @zachomedia in #2971
• do not create configmap is customConfigMap is used by @coolbry95 in #3095
• Fix helm chart issue when set controller.strategy by @wd in #3106
• Optimise path validation by @haywoodsh in #3094
• Update helm rbac template for watch-ns by @vepatel in #3122

📝 Documentation

• Fix the docs for nginxReloadTimeout cli arg by @pleshakov in #2835
• fix spec.policy example to use a map by @TuxInvader in #2843
• Merge release-2.3 to main by @lucacome in #2844
• fix: fix 2 broken links to NAP and NAP DoS docs by @Jcahilltorre in #2868
• Add missing minReadySeconds & strategy chart values in Helm Installation documentation by @aknot242 in #2853
• NGINX Ingress with Istio Service Mesh document by @jasonwilliams14 in #2768
• Bump f5-theme to v0.22.1 for main by @travisamartin in #2910
• docs: Update release notes with note on CVE by @ciarams87 in #2911
• Remove "new" & redundant text, add "recommended" by @jnewfield in #2938
• fix: update footer for NMS by @Jcahilltorre in #2937
• NGINX Ingress Controller Configuration guide update by @rranghar in #2864
• Make GitHub Checks more readable for CI by @lucacome in #2961
• docs: Reorganise examples by @ciarams87 in #2871
• docs: Fix links in the NAP config doc in main by @ciarams87 in #2983
• Document how the IC reloads NGINX by @pleshakov in #2836
• chore: Batch reloads runtime by @ciarams87 in #2986
• Fix typo in anchor link by @tomasohaodha in #3013
• Add docs for NAP DoS images by @lucacome in #3023
• Add lifecycle for controller container to helm chart by @coolbry95 in #3005
• feat: F5-hugo theme September bump by @Jcahilltorre in #3067
• feat: F5-hugo theme September bump (cherrypick) by @Jcahilltorre in #3071
• Add customConfigMap to helm charts by @coolbry95 in #3003
• Merge branch 'release-2.3' into main by @lucacome in #3084
• Add helloworld.proto and re-generate files by @lucacome in #3091
• Remove deprecated kubernetes.io/ingress.class from examples by @lucacome in #3029
• chore: Allow omitting the default server secret from Helm installs by @ciarams87 in #3087
• Add ARCH in Makefile, make Dockerfile more compatible with podman by @lucacome in #3102
• Apdoslogconf will warning case format is not splunk by @pasmant in #2991
• Release 2.4.0 by @shaun-nx in #3109

🧪 Tests

• Allow multiple markers in tests by @lucacome in #2874
• segregate IC and custom resources fixtures by @vepatel in #2908
• tests: Remove unnecessary library from tests by @ciarams87 in #2925
• Add isort and Black by @lucacome in #2929
• Add pod perf checks for multiple namespaces by @vepatel in #2934
• remove repeat test and add wait_and_assert by @vepatel in #2984
• Bump grpcio from 1.47.0 to 1.48.1 in /tests by @dependabot in #3008
• Bump locust from 2.11.1 to 2.12.0 in /perf-tests by @dependabot in #3021
• Bump certifi from 2022.6.15 to 2022.6.15.1 in /tests by @dependabot in #3028
• Bump certifi from 2022.6.15 to 2022.6.15.1 in /perf-tests by @dependabot in #3027
• Bump certifi from 2022.6.15.1 to 2022.9.14 in /tests by @dependabot in #3042
• Bail tests on test fixture setup error by @jjngx in #3037
• Bump grpcio from 1.48.1 to 1.49.0 in /tests by @dependabot in #3052
• Bump certifi from 2022.6.15.1 to 2022.9.14 in /perf-tests by @dependabot in #3043
• Add Helm test for Plus by @lucacome in #3064
• Improve NAP DoS tests by @pasmant in #2996
• Change timeout for attack ended by @pasmant in #3072
• Bump kindest/node from v1.25.0 to v1.25.1 in /tests/docker by @dependabot in #3068
• Bump locust from 2.12.0 to 2.12.1 in /perf-tests by @dependabot in #3073
• Bump grpcio from 1.49.0 to 1.49.1 in /tests by @dependabot in #3078
• Update containers in examples and tests by @lucacome in #3082
• Bump kindest/node from v1.25.1 to v1.25.2 in /tests/docker by @dependabot in #3089
• chore: Revert change to gitlab branch ref by @ciarams87 in #3093
• Change AppProtect warning message by @vepatel in #3096
• Bump pyopenssl from 22.0.0 to 22.1.0 in /tests by @dependabot in #3098
• Bump certifi from 2022.9.14 to 2022.9.24 in /perf-tests by @dependabot in #3099
• Bump certifi from 2022.9.14 to 2022.9.24 in /tests by @dependabot in #3100
• add canary header and update ap waf log pod by @vepatel in #3116

🔨 Maintenance

• Remove OpenTracing images in Updater by @lucacome in #2837
• Update path for CRD generation to include all by @lucacome in #2846
• fix: Change alpine version grab to include a colon in the updater by @ciarams87 in #2848
• Bump kind 1.21 and 1.22, add 1.23 by @lucacome in #2842
• Try to only include separators when necessary (#2766) by @jsoref in #2767
• Update Go lib for CVE-2022-29526 by @lucacome in #2878
• Use go-version-file in setup-go Action by @lucacome in #2883
• Remove multiple markers from tests by @lucacome in #2891
• Add check for go.mod and go.sum changes by @lucacome in #2902
• Use built-in cache in setup-go by @lucacome in #2905
• Add NAP DoS image to the pipeline by @lucacome in #2912
• Add Other Changes section to release.yml by @lucacome in #2958
• Remove deprecated go linters by @lucacome in #2960
• Replace all versions of glog with nginxinc/glog by @lucacome in #2972
• Remove archived repos from sync by @lucacome in #2980
• Update DoS CRDs version to v0.9.2 by @pasmant in #2981
• Remove workaround for Dependabot by @lucacome in #2997
• Remove duplicate print for k8s version, use right check for args by @lucacome in #3018
• Replace autolabler with actions/labeler by @lucacome in #3019
• Fix docs label name, remove test for unit tests by @lucacome in #3022
• Update kind versions in nightly by @lucacome in #3030
• Fix secrets formatting in workflow by @lucacome in #3066
• Update release prep script by @lucacome in #3085
• Update Helm Chart apiVersion to v2 by @lucacome in #3083
• Fix staticcheck linter issues by @jjngx in #3097
• Add RBAC for coordination.k8s.io/leases by @coolbry95 in #3101
• Eliminate dead code by @jjngx in #3104
• Fix staticcheck linter issues in k8s, nginx packages by @jjngx in #3107
• Pass Git info to Docker by @lucacome in #3112
• Announce release in Community Slack by @lucacome in #3124
• Upload Release artifacts to Azure by @lucacome in #3123
• Don't use latest tag for AWS images by @lucacome in #3125

⬆️ Dependencies

• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.13 to 1.15.14 by @dependabot in #2841
• Bump google.golang.org/grpc from 1.47.0 to 1.48.0 by @dependabot in #2849
• Bump nginx from 1.23.0 to 1.23.1 in /build by @dependabot in #2872
• Bump library/nginx from 1.23.0-alpine to 1.23.1-alpine in /build by @dependabot in #2873
• Bump opentracing/nginx-opentracing from nginx-1.23.0 to nginx-1.23.1 in /build by @dependabot in #2879
• Bump github.com/nginxinc/nginx-plus-go-client from 0.9.0 to 0.10.0 by @dependabot in #2870
• Bump aquasecurity/trivy-action from 0.5.1 to 0.6.0 by @dependabot in #2882
• Bump urllib3 from 1.26.10 to 1.26.11 in /tests by @dependabot in #2886
• Bump urllib3 from 1.26.10 to 1.26.11 in /perf-tests by @dependabot in #2885
• Bump aquasecurity/trivy-action from 0.6.0 to 0.6.1 by @dependabot in #2890
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.14 to 1.15.15 by @dependabot in #2898
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.8 to 1.13.9 by @dependabot in #2897
• Bump golang from 1.18-alpine to 1.19-alpine in /build by @dependabot in #2899
• Bump locust from 2.10.1 to 2.10.2 in /perf-tests by @dependabot in #2903
• Bump aquasecurity/trivy-action from 0.6.1 to 0.6.2 by @dependabot in #2906
• Bump Go to 1.19 by @lucacome in #2900
• Bump cert-manager to 1.9.1 by @lucacome in #2839
• Bump k8s.io/client-go from 0.24.2 to 0.24.3 by @dependabot in #2856
• Bump k8s.io/code-generator from 0.24.2 to 0.24.3 by @dependabot in #2858
• Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 by @dependabot in #2913
• Bump kindest/node from v1.24.2 to v1.24.3 in /tests/docker by @dependabot in #2915
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.15 to 1.15.16 by @dependabot in #2918
• Bump more-itertools from 8.13.0 to 8.14.0 in /tests by @dependabot in #2916
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.9 to 1.13.11 by @dependabot in #2919
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.16 to 1.15.17 by @dependabot in #2920
• Bump locust from 2.10.2 to 2.11.0 in /perf-tests by @dependabot in #2926
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.11 to 1.13.12 by @dependabot in #2927
• Bump github.com/aws/aws-sdk-go-v2/config from 1.15.17 to 1.16.1 by @dependabot in #2928
• Bump github.com/aws/aws-sdk-go-v2/config from 1.16.1 to 1.17.1 by @dependabot in #2932
• Bump anchore/sbom-action from 0.11.0 to 0.12.0 by @dependabot in #2941
• Bump aquasecurity/trivy-action from 0.6.2 to 0.7.1 by @dependabot in #2942
• Bump k8s.io/client-go from 0.24.3 to 0.24.4 by @dependabot in #2945
• Bump k8s.io/code-generator from 0.24.3 to 0.24.4 by @dependabot in #2944
• Bump urllib3 from 1.26.11 to 1.26.12 in /tests by @dependabot in #2954
• Update packages for CVE-2022-3209 and CVE-2021-46828 by @lucacome in #2957
• Bump urllib3 from 1.26.11 to 1.26.12 in /perf-tests by @dependabot in #2953
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.12 to 1.13.13 by @dependabot in #2959
• Bump locust from 2.11.0 to 2.11.1 in /perf-tests by @dependabot in #2973
• Bump google.golang.org/grpc from 1.48.0 to 1.49.0 by @dependabot in #2966
• Bump kindest/node from v1.24.3 to v1.25.0 in /tests/docker by @dependabot in #3007
• Bump pytest from 7.1.2 to 7.1.3 in /perf-tests by @dependabot in #3009
• Bump github.com/aws/aws-sdk-go-v2/config from 1.17.1 to 1.17.5 by @dependabot in #3015
• Bump grpcio-tools from 1.47.0 to 1.48.1 in /tests by @dependabot in #3010
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.13 to 1.13.17 by @dependabot in #3014
• Bump pytest from 7.1.2 to 7.1.3 in /tests by @dependabot in #3011
• Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 by @dependabot in #3025
• Bump github.com/nginxinc/nginx-prometheus-exporter from 0.10.0 to 0.11.0 by @dependabot in #3026
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.17 to 1.13.18 by @dependabot in #3044
• Bump github.com/aws/aws-sdk-go-v2/config from 1.17.5 to 1.17.6 by @dependabot in #3045
• Update dependencies for CVEs by @lucacome in #3063
• Bump sigs.k8s.io/controller-tools from 0.9.2 to 0.10.0 by @dependabot in #3074
• Bump k8s.io/client-go from 0.25.0 to 0.25.1 by @dependabot in #3058
• Bump k8s.io/code-generator from 0.25.0 to 0.25.1 by @dependabot in #3059
• Bump github.com/aws/aws-sdk-go-v2/config from 1.17.6 to 1.17.7 by @dependabot in #3069
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.13.18 to 1.13.19 by @dependabot in #3070
• Bump actions/stale from 5 to 6 by @dependabot in #3075
• Bump k8s.io/client-go from 0.25.1 to 0.25.2 by @dependabot in #3077
• Bump k8s.io/code-generator from 0.25.1 to 0.25.2 by @dependabot in #3080
• Bump joshdales/labeler from 0861fa5accbc36878f85f40b98a9f40b15fe0429 to 4c74e8446142eeec7aa182f52ea24306a5479850 by @dependabot in #3090
• Update packages for CVE-2022-40674 by @lucacome in #3115
• Bump github.com/aws/aws-sdk-go-v2/config from 1.17.7 to 1.17.8 by @dependabot in #3117

New Contributors

• @TuxInvader made their first contribution in #2843
• @araineUnity made their first contribution in #2831
• @aknot242 made their first contribution in #2853
• @jnewfield made their first contribution in #2938
• @rranghar made their first contribution in #2864
• @hafe made their first contribution in #2979
• @zachomedia made their first contribution in #2971
• @coolbry95 made their first contribution in #3005
• @wd made their first contribution in #3106

Full Changelog: v2.3.1...v2.4.0

Upgrade

• For NGINX, use the v2.4.0 image from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v2.4.0 image from the F5 Container registry or the AWS Marketplace or build your own image using the v2.4.0 source code.
• For Helm, use version 0.15.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v2.4.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v2.4.0/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator/