v5.1.0

What's Changed

🚀 Features

• Add ConfigMapKeys & MGMTConfigMapKeys to Telemetry by @AlexFenlon in #7695
• Add Context to logging for JSON and TEXT formats by @AlexFenlon in #7705
• Add request_method to rate-limit Policy by @vepatel in #7832
• Add OpenTelemetry support by @haywoodsh in #7642
• Add OIDC PKCE configuration through Policy by @javorszky in #7765
• Add support for Agent V3 by @AlexFenlon in #7916
• Tiered rate limits with variables by @pdabelf5 in #7884

🐛 Bug Fixes

• Use pod labels as headless selector labels by @pdabelf5 in #7651
• Avoid applying updates on Ingress Controller shutdown by @vepatel in #7691
• Add ; in oidc files by @vepatel in #7748
• Correct namespace for mgmt secrets by @pdabelf5 in #7786
• Update template for custom redirect URI by @vepatel in #7853
• Maintain HeadlessService on upgrade by @vepatel in #7865

📦 Helm Chart

• Release 5.1.0 by @github-actions in #7940

🧪 Tests

• Add retries to test logic by @vepatel in #7643
• Docker image update a48c8357 by @github-actions in #7980

🔨 Maintenance

• Remove community slack notification by @pdabelf5 in #7663
• Add separator to the end of the new release notes by @pdabelf5 in #7676
• Update OIDC files with reference implementation by @vepatel in #7722
• Update ci files to build on oidc conf changes by @vepatel in #7753
• Add oidc refactor commit from ref impl by @vepatel in #7762
• Remove s390x, arm/7 and ppc64le by @AlexFenlon in #7784
• Clean up Agent values file and tests by @AlexFenlon in #7758
• Add pull policy to Minikube local tests by @AlexFenlon in #7759
• Replace archive.builds with .ids in goreleaser by @javorszky in #7801
• Fix markdown linter issues by @jjngx in #7822
• Trigger an image rebuild if the js or conf files change by @pdabelf5 in #7843
• Reference main mend job by @jjngx in #7834
• Run codeql from referenced workflow by @jjngx in #7837
• Update mend and codeql versions to commit at v0.2 by @javorszky in #7851
• Pin NGINX App Protect images to use NGINX Agent V2 by @AlexFenlon in #7858
• Update agent test marker in regression matrix by @vepatel in #7863
• Tidy NGINX PAT usage by @pdabelf5 in #7886
• Add BUILD OS & Arch to rhel system registration host name by @pdabelf5 in #7895
• Move internal docs folder outside of website docs folder by @ADubhlaoich in #7892
• Add dev docs exception by @vepatel in #7908
• Run mend workflow on main and release branches by @jjngx in #7881
• Disable release note generation by @pdabelf5 in #7921
• Pin mvdan/gofumpt in github workflow ci and fix bash variable quoting by @javorszky in #7923
• Remove arm, s390x & ppc64le references by @pdabelf5 in #7924
• Use GITHUB_TOKEN for auto merge by @pdabelf5 in #7928
• Update release process by @pdabelf5 in #7922
• Update Dockerfile syntax version to 1.16 by @pdabelf5 in #7898
• Update references to migrated nginxinc projects by @pdabelf5 in #7936
• Pin OSS version in Dockerfile by @github-actions in #7990

📝 Documentation

• Update the zone-sync ConfigMap key note by @AlexFenlon in #7641
• Update OpenTracing ConfigMap docs by @vepatel in #7652
• Remove extra characters in zone-sync note by @AlexFenlon in #7658
• Update tech spec with supported versions by @vepatel in #7674
• Update the ConfigMap Zone Sync documentation by @ADubhlaoich in #7681
• Adds installation guide for NIC and NGINX App Protect WAF by @javorszky in #7688
• Update all self-referential Release links from production URLs by @ADubhlaoich in #7708
• Removed unused configurations parameters for helm installation by @cdxker in #7729
• Formatted example clone repo command as codeblock by @travisamartin in #7728
• Update docs for watch-secret-namespace by @vepatel in #7744
• Update NIC about page by @vepatel in #7755
• NIC+NAP wafv5 install guide perm fix by @javorszky in #7760
• Add note to the Tech Specs about removal of archs by @AlexFenlon in #7782
• Update AWS LB doc by @vepatel in #7818
• Remove release page links to marketplaces by @ADubhlaoich in #7871
• Remove 3.1.1 from tech specs by @vepatel in #7894
• Remove documentation website files by @ADubhlaoich in #7915

⬆️ Dependencies

• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.28.2 to 1.29.0 in the go group by @dependabot in #7647
• chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in the go_modules group by @dependabot in #7666
• Docker image update c1e42434 by @nginx-bot in #7714
• chore(deps): bump the go group across 1 directory with 8 updates by @dependabot in #7711
• chore(deps): bump the go group with 2 updates by @dependabot in #7767
• Docker image update 78a6243e by @nginx-bot in #7788
• chore(deps): bump the go group with 4 updates by @dependabot in #7798
• Update kubernetes version to v1.33.1 in helm schema by @nginx-bot in #7808
• chore(deps): bump the go group with 2 updates by @dependabot in #7824
• Docker image update 5b83e3f7 by @nginx-bot in #7825
• Docker image update 1de54b35 by @nginx-bot in #7855
• chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.11 to 0.5.12 in the go group by @dependabot in #7854
• Update NGINX OSS to 1.27.5 by @pdabelf5 in #7890
• Update go version to 1.24.4 by @pdabelf5 in #7896
• Docker image update 61b675bc by @github-actions in #7888
• Update UBI9 version to 9.6 as 9.5 is no longer updated by @pdabelf5 in #7893
• chore(deps): bump the go group across 1 directory with 5 updates by @dependabot in #7900
• Docker image update 6913142a by @github-actions in #7903
• chore(deps): bump the go group with 3 updates by @dependabot in #7918
• chore(deps): bump the go group with 4 updates by @dependabot in #7926
• Docker image update 1e04714a by @github-actions in #7948
• Docker image update 79d70b3a by @github-actions in #7963
• chore(deps): bump the go group with 2 updates (#7959) by @pdabelf5 in #7964
• Docker ima...

v5.0.0

What's Changed

💣 Breaking Changes

• Remove support for Open Tracing for NGINX Plus by @jjngx in #7567
• Remove OpenTracing Support from NIC by @pdabelf5 in #7633

🚀 Features

• Increase port number range by @saedx1 in #7054
• Ratelimit based on JWT claim by @pdabelf5 in #7175
• add auth_jwt_claim_set in nginx plus virtualserver template by @haywoodsh in #7205
• Add initial zone_sync values to the ConfigMap by @AlexFenlon in #7239
• Update to NGINX OSS 1.27.4 by @pdabelf5 in #7299
• generate auth_jwt_claim_set directive by @haywoodsh in #7238
• Tiered Rate limit group maps by @pdabelf5 in #7390
• Rate limit group example by @pdabelf5 in #7393
• Add zone-sync with no TLS to ConfigMap by @AlexFenlon in #7347
• Update zone-sync headless service selector label by @pdabelf5 in #7445
• Rate limit zone sync by @pdabelf5 in #7468
• Rate limit with zone sync and scale by @pdabelf5 in #7521
• Update NGINX Plus to R34 and App Protect to 4.14 & 5.6 by @pdabelf5 in #7597
• Add forward proxy support to Plus mgmt config by @AlexFenlon in #7560
• Use pod labels as headless selector labels by @nginx-bot in #7654

🐛 Bug Fixes

• Clean up and fix for NIC Pod failing to bind when NGINX exits unexpectedly by @AlexFenlon in #7121
• Correct typo in helm lease annotations template by @pdabelf5 in #7185
• Add tracking.info and copy into plus images by @javorszky in #7400
• Add NGINX state directory for ReadOnlyRootFilesystem by @haywoodsh in #7519

📦 Helm Chart

• Allow customization of service http and https port names through helm by @arussellf5 in #7318
• Release 5.0.0 by @nginx-bot in #7617

🧪 Tests

• Add mgmt configmap tests by @j1m-ryan in #6957
• Expand mgmt configmap tests by @pdabelf5 in #6987
• Add minikube as option for running tests by @pdabelf5 in #7018
• Add plus jwt to local tests by @pdabelf5 in #7032
• Add OIDC test using keycloak as idp by @vepatel in #7242
• Enable jwksuri tests with keycloak by @vepatel in #7396
• Add delay & retry to flakey weight splits test by @pdabelf5 in #7324
• Update split tests to use delete and create lib function by @vepatel in #7418
• tiered rate limit jwt e2e tests by @pdabelf5 in #7412
• Add zone-sync support to OIDC tests by @vepatel in #7440
• replace patch with delete and create by @vepatel in #7638

🔨 Maintenance

72 changes

• ensure tag exists before scanning by @pdabelf5 in #6958
• allow scan uploads to fail by @pdabelf5 in #6961
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #6944, #7044, #7072, #7124, #7168, #7261, #7373, #7402, #7487, #7548, #7587
• Re-add FIPs images to tests, image patching & release by @haywoodsh in #6948
• chore(deps): bump the actions group across 1 directory with 2 updates by @dependabot in #6960
• update regression matrix to include old k8s by @vepatel in #6974
• Remove unused packages from UBI images by @pdabelf5 in #6989
• chore(deps): bump the actions group with 2 updates by @dependabot in #6991
• Certify UBI images for Redhat catalog by @pdabelf5 in #7011
• chore(deps): bump the actions group with 2 updates by @dependabot in #7005
• chore(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 in the actions group by @dependabot in #7019
• Symlink to central secret by @pdabelf5 in #6714
• remove all attestation layers from AWS marketplace images by @pdabelf5 in #7033
• chore(deps): bump codecov/codecov-action from 5.1.1 to 5.1.2 in the actions group by @dependabot in #7030
• Add tests for kubernetes versions by @pdabelf5 in #7035
• chore(deps): bump the actions group across 1 directory with 5 updates by @dependabot in #7055
• remove index annotations from AWS marketplace images by @pdabelf5 in #7058
• Add unprivileged port validation by @pdabelf5 in #7034
• pre-commit: silence markdownlint by @javorszky in #7067
• chore(deps): bump reviewdog/action-actionlint from 1.61.0 to 1.62.0 in the actions group by @dependabot in #7070
• remove ubi images from CI by @pdabelf5 in #7093
• remove additional ubi config by @pdabelf5 in #7104
• chore(deps): bump the actions group across 1 directory with 4 updates by @dependabot in #7107
• Update from nginxinc to nginx by @lucacome in #7103
• chore(deps): bump the actions group with 3 updates by @dependabot in #7123
• chore(deps): bump docker/build-push-action from 6.11.0 to 6.12.0 in the actions group by @dependabot in #7139
• Avoid floating semi-colon on rate-limiting newline by @pdabelf5 in #7156
• chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.1 in the actions group by @dependabot in #7159, #7344, #7503
• chore(deps): bump the actions group with 2 updates by @dependabot in #7172
• chore(deps): bump the actions group with 3 updates by @dependabot in #7180
• Docker image update 00f989f4 by @nginx-bot in #7199
• Remove kind 1.32.1 from available kind versions by @pdabelf5 in #7208
• chore(deps): bump the actions group across 1 directory with 5 updates by @dependabot in #7209
• VS template test tidy up by @pdabelf5 in #7211
• Add central event reasons to the log package by @pdabelf5 in #7215
• chore(deps): bump the actions group across 1 directory with 3 updates by @dependabot in #7224
• Refactor policy config structs by @pdabelf5 in #7232
• chore(deps): bump the actions group across 1 directory with 2 updates by @dependabot in #7241
• re-enable ubi image build & publish by @pdabelf5 in #7246
• chore(deps): bump the actions group across 1 directory with 3 updates by @dependabot in #7270
• chore(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.0 in the actions group by @dependabot in #7291
• Pin app protect version by @pdabelf5 in #7298
• update helm snaps versions when creating release PR...

v4.0.1

What's Changed

🐛 Bug Fixes

• Clean up and fix for NIC Pod failing to bind when NGINX exits unexpectedly by @AlexFenlon in #7295

📦 Helm Chart

• Correct typo in helm lease annotations template by @nginx-bot in #7188

🧪 Tests

• Symlink to central secret by @nginx-bot in #7038

🔨 Maintenance

• Certify UBI images for Redhat catalog workflow by @pdabelf5 in #7013
• Remove all attestation layers from AWS marketplace images by @nginx-bot in #7039
• Remove index annotations from AWS marketplace images by @nginx-bot in #7060
• Remove kind 1.32.1 from available kind versions by @nginx-bot in #7210
• Pin app protect v5 version by @pdabelf5 in #7297

📝 Documentation

• Fix link in security.md by @AlexFenlon in #7008
• Fixed documentation for specifying NAP enforcer and configManager images in Helm values by @pdabelf5 in #7026
• Update upgrade docs by @nginx-bot in #7037
• Update policy waf docs by @nginx-bot in #7077
• Update APIKey suppliedIn docs by @nginx-bot in #7085
• Fix broken link to NIM Security Monitoring by @pdabelf5 in #7095
• Fix broken url in compile-waf-policies.md by @nginx-bot in #7112
• Fix broken link in example for nginx plus license by @nginx-bot in #7117
• Fix links to NIM App-protect docs by @nginx-bot in #7130
• Update build instruction link, remove EoS versions from specifications by @nginx-bot in #7146
• Update master/minion allowed ingress annotations by @nginx-bot in #7153
• Fix mountPath directory for NAP5 policy documentation by @nginx-bot in #7201
• Remove email support by @nginx-bot in #7249
• Release 4.0.1 by @nginx-bot in #7279

⬆️ Dependencies

• Docker image update e784ea43 by @nginx-bot in #7012
• Bump redhat/ubi9-minimal from dee813b to daa61d6 in /build by @nginx-bot in #7022
• Bump github.com/gruntwork-io/terratest from 0.48.0 to 0.48.1 in the go group by @nginx-bot in #7024
• Docker image update edf8f98b by @nginx-bot in #7028
• Bump the go group across 1 directory with 4 updates by @nginx-bot in #7061
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #7113
• Bump the go group with 2 updates by @nginx-bot in #7145
• Docker image update 43d85eaa by @nginx-bot in #7144
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #7148
• Docker image update cc87db80 by @nginx-bot in #7152
• Bump the docker-images group across 1 directory with 2 updates by @nginx-bot in #7155
• Bump the go group with 7 updates by @nginx-bot in #7154
• Bump Go version to 1.23.5 by @nginx-bot in #7163
• Docker image update 849e80b1 by @nginx-bot in #7181
• Bump the go group across 1 directory with 4 updates by @nginx-bot in #7164
• Bump the go group with 2 updates by @nginx-bot in #7229
• Bump the go group across 1 directory with 5 updates by @nginx-bot in #7265
• Docker image update d723130c by @nginx-bot in #7267
• Bump the go group with 2 updates by @nginx-bot in #7250
• Update to nginx 1.27.4 by @nginx-bot in #7301
• Bump redhat/ubi9-minimal from b870979 to 3902bab in /build by @nginx-bot in #7302
• Bump the go group with 2 updates by @nginx-bot in #7296
• Docker image update 44932776 by @nginx-bot in #7304
• Update opentracing module by @nginx-bot in #7307
• Ubi dependecy update for NGINX 1.27.4 by @pdabelf5 in #7310
• Bump the go group with 2 updates by @nginx-bot in #7321
• Docker image update e0520048 by @nginx-bot in #7320

Full Changelog: v4.0.0...v4.0.1

Upgrade

• For NGINX, use the v4.0.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v4.0.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v4.0.1 source code.
• For Helm, use version 2.0.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginx/kubernetes-ingress/tree/v4.0.1/examples
• Helm Chart -- https://github.com/nginx/kubernetes-ingress/tree/v4.0.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v4.0.0

What's Changed

💣 Breaking Changes

• Add LogLevel & LogFormat flags by @AlexFenlon in #6520
• Deprecate v1alpha1 CRDs for GlobalConfiguration, Policy & TransportServer by @pdabelf5 in #6800
• Add license secret and mgmt config map for r33 by @AlexFenlon in #6903

🚀 Features

• Add glog slog handler by @pdabelf5 in #6474
• TransportServer SNI by @j1m-ryan in #6605
• Add events to configmap by @j1m-ryan in #6819
• Add events when special secrets update by @AlexFenlon in #6878
• Add additional mgmt config parameters by @pdabelf5 in #6921

🐛 Bug Fixes

• Generate valid yaml for readOnly fs by @jjngx in #6583
• UpstreamServer Fields Logs Displayed as Memory Addresses by @AlexFenlon in #6635
• Revert to original main-template without pod downtime by @jjngx in #6661
• Add nil check to apikey suppliedIn by @j1m-ryan in #6733
• Use default VS and TS templates when CfgMap obj is deleted by @jjngx in #6780

📦 Helm Chart

• Helm schema examples by @pdabelf5 in #6667
• Update kubernetes version to v1.32.0 in helm schema by @nginx-bot in #6998
• Release 4.0.0 by @nginx-bot in #6986

🧪 Tests

• Remove unnecessary type assertion by @j1m-ryan in #6479
• Add marker to conftest by @vepatel in #6491
• Add separate config to skip v5 tests by @vepatel in #6493
• Add support for readonlyrootfilesystem test for wafv5 by @vepatel in #6708
• Helm unit tests by @pdabelf5 in #6895
• Add wait in scaled rate-limit test by @vepatel in #6940
• Add mgmt configmap tests by @nginx-bot in #6965

🔨 Maintenance

• Add wafv5 tests to regression matrix by @vepatel in #6478
• Refactor to prepare for structured logs by @AlexFenlon in #6501
• Prevent final result from succeeding if any image builds fail by @pdabelf5 in #6509
• Grafana template update that works with grafana v11.2.0 by @sdutta9 in #6511
• Simplify bug report form by @shaun-nx in #6550
• Add ubi8 images patching workflow by @pdabelf5 in #6555
• Remove deprecated log level parameters by @AlexFenlon in #6620
• Replace glog in healthcheck.go & remove glog dependency by @AlexFenlon in #6628
• Fix make staticcheck, (use NewInformerWithOptions and TypedRateLimitingInterface) by @j1m-ryan in #6647
• Add static check action to CI by @j1m-ryan in #6649
• Update python to 3.13 and disable pytest-profiling by @AlexFenlon in #6651
• Update helm schema examples by @pdabelf5 in #6665
• Renew expired certificate used in tests by @pdabelf5 in #6736
• Add plus mgmt deployment context process by @j1m-ryan in #6309
• Remove unused functions by @pdabelf5 in #6806
• Refactor special secret input and validation by @pdabelf5 in #6808
• Allow k8s events in initial validation by @pdabelf5 in #6814
• Refactor resolver in template by @j1m-ryan in #6832
• Build UBI s390x nginx package for OSS images by @pdabelf5 in #6846
• Rename TLSSecretFileMode to ReadWriteOnlyFileMode by @pdabelf5 in #6854
• Add ubi-9 container image tag by @pdabelf5 in #6874
• Refactor namespace/name logic by @pdabelf5 in #6871
• Refactor, set staticSSLPath to a variable for reuse by @AlexFenlon in #6872
• Refactor configmap.go for extensability by @j1m-ryan in #6873
• Add secret type for getAndValidateSecret() by @pdabelf5 in #6877
• Refactor handleSpecialSecretUpdate by @j1m-ryan in #6875
• Refactor lbc to add metadata struct by @j1m-ryan in #6885
• Add license expiry checks by @pdabelf5 in #6917
• Prevent auto publishing docs on push to release branch by @pdabelf5 in #6926
• Update secrets when mgmt configmap changes by @pdabelf5 in #6947
• Fix Makefile Bug by @saedx1 in #6809
• Re-add FIPs images to tests, image patching & release by @nginx-bot in #6972
• Update regression matrix to include old k8s by @nginx-bot in #6977
• Trim UBI python packages by @pdabelf5 in #6993

📝 Documentation

• Update community call dates by @AlexFenlon in #6506
• Added Support page by @mrajagopal in #6467
• Fix external url links by @nginx-aoife in #6519
• Add hugo version check and theme update to Makefile by @nginx-jack in #6518
• Update documentation folder, dependencies and deployment action by @ADubhlaoich in #6554
• Migrate access control example to documentation website by @ADubhlaoich in #6572
• Update community call information by @danielnginx in #6766
• Updates to WAF v5 docs by @jjngx in #6694
• Update NMS references by @Jcahilltorre in #6802
• Add endpoint to product telemetry doc by @j1m-ryan in #6855
• Update README.md by @danielnginx in #6870
• Updates to usage-reporting page by @vepatel in #6899
• Remove marketplace plus images from docs for 4.0.0 by @pdabelf5 in #6928
• Add upgrading to 4.x docs by @nginx-bot in #6985

⬆️ Dependencies

65 changes

• Docker image update c30328bf by @nginx-bot in #6485
• Bump the go group with 2 updates by @dependabot in #6483
• Bump the go group with 2 updates by @dependabot in #6496
• Docker image update e58c873f by @nginx-bot in #6497
• Docker image update e000531c by @nginx-bot in #6512
• Bump the go group with 2 updates by @dependabot in #6522
• Docker image update 46d483c1 by @nginx-bot in #6533
• Docker image update 31e5a443 by @nginx-bot in #6543
• Bump the go group with 2 updates by @dependabot in #6540
• Docker image update 40274c4b by @nginx-bot in #6557
• Bump Go version by @jjngx in #6559
• Docker image update b31cdb28 by @nginx-bot in #6580
• Bump the go group with 2 updates by @dependabot in #6589
• Bump the go group across 1 directory with 3 updates by @dependabot in #6614
• Bump the docker-images group ...

v3.7.2

What's Changed

🐛 Bug Fixes

• Update oidc_template and conf to fix #6812 by @vepatel in #6838

🔨 Maintenance

• Upgrade Go to 1.23.3 by @nginx-bot in #6781
• Build UBI s390x nginx package for OSS images by @pdabelf5 in #6847
• Update kubernetes version to v1.31.2 in helm schema by @nginx-bot in #6818
• Update go toolchain and NIC version by @vepatel in #6859

📝 Documentation

• Fix docs 404s by @pdabelf5 in #6768
• Remove fips images from documentation until OpenSSL fix is available by @pdabelf5 in #6799
• Update NMS references by @Jcahilltorre in #6820
• Add endpoint to product telemetry doc by @j1m-ryan in #6856

⬆️ Dependencies

• Docker image updates by @nginx-bot in #6779
• Bump the go dependencies by @nginx-bot in #6791
• Docker image updates by @nginx-bot in #6790
• Bump the go dependencies by @nginx-bot in #6849
• Docker image update 9ca30b62 by @nginx-bot in #6851
• Bump github.com/cert-manager/cert-manager from 1.16.1 to 1.16.2 by @nginx-bot in #6839

Full Changelog: v3.7.1...v3.7.2

Upgrade

• For NGINX, use the v3.7.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.7.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.7.2 source code.
• For Helm, use version 1.4.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.2/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.7.1

What's Changed

🐛 Bug Fixes

• Add nil check to apikey suppliedIn by @j1m-ryan in #6735
• Add OIDC fix for ID token nonce claim validation by @jjngx in #6761

🔨 Maintenance

• Update kubernetes version to v1.31.1 in helm schema by @nginx-bot in #6646
• Update helm schema examples by @pdabelf5 in #6666

📝 Documentation

• Fix typo and add missing version by @vepatel in #6537
• Update NGINX Plus Version for v3.6.2 and v3.7.0 by @shaun-nx in #6569
• Update documentation folder by @nginx-jack in #6602

⬆️ Dependencies

• Docker image update 31e5a443 by @nginx-bot in #6545
• Fix go toolchain by @nginx-bot in #6549
• Bump the go group with 2 updates by @nginx-bot in #6553
• Docker image update 40274c4b by @nginx-bot in #6560
• Bump Go version by @nginx-bot in #6570
• Bump the go group with 2 updates by @nginx-bot in #6591
• Bump the docker-images group across 1 directory with 3 updates by @nginx-bot in #6619
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6618
• Docker image update 556fd680 by @nginx-bot in #6640
• Bump the go group across 1 directory with 6 updates by @nginx-bot in #6648
• Bump nginxinc/dependencies/nginx-ot from 0f5479b to 8604f87 in /build by @nginx-bot in #6664
• Docker image update 0772406c by @nginx-bot in #6686
• Bump github.com/aws/aws-sdk-go-v2/config from 1.27.43 to 1.28.0 by @nginx-bot in #6688
• Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @nginx-bot in #6674
• Docker image update 3c3e619d by @nginx-bot in #6703
• Bump the go group with 4 updates by @nginx-bot in #6707
• Docker image update e6c0a4ef by @nginx-bot in #6720
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6730
• Docker image update 52a62c5c by @nginx-bot in #6755
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @nginx-bot in #6751
• Update ubi-ppc64le to nginx 1.27.2 by @nginx-bot in #6759

Full Changelog: v3.7.0...v3.7.1

Upgrade

• For NGINX, use the v3.7.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.7.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.7.1 source code.
• For Helm, use version 1.4.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.7.0

Important

FIPS compliant images are currently impacted by compatibility issues with a dependent library.
We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🚀 Features

• Add BUILD_OS to Telemetry by @AlexFenlon in #5968
• Sync oidc repo by @haywoodsh in #6014
• Support End Session Endpoint for OIDC and allow customizable Post-logout Redirect URI by @haywoodsh and @llomgui in #6092
• Make access_log in http context configurable by @hafe in #5648
• Add ip as an option to listeners for VirtualServer by @AlexFenlon in #6180
• Add ip as an option to listeners for TransportServer by @j1m-ryan in #6367

🐛 Bug Fixes

• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• Fix api key policy undefined routes by @j1m-ryan in #5838
• Add default telemetry endpoint by @shaun-nx in #5885
• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5899
• Don't log errors for not implemented grpc metrics by @jjngx in #6125
• Fix panic when creating VirtualServer by @hafe in #6232
• Create unique lease obj for each NIC installed via Helm by @jjngx in #6372
• Fix udp/http listener validation logic by @j1m-ryan in #6406
• Disable batch reload when batch finishes by @dareste in #6446
• grafana template update that works with grafana v11.2.0 (#6511) by @jjngx in #6526

📦 Helm Chart

• Remove include-year and includeYear flag by @harsha-mangena in #5817
• Choose NodePort values for controller.service.type = LoadBalancer by @Falltrades in #5335
• Update helm docs by @vepatel in #6235
• [cherry-pick] WAFv5 update to 5.3/alpine update by @nginx-bot in #6510
• Release 3.7.0 by @nginx-bot in #6480

🧪 Tests

• Check for non 50x 404 response by @vepatel in #5851
• Chore/python clean up, and unused variable check to pre commit by @j1m-ryan in #5866
• Split VSR matrix in 3 by @j1m-ryan in #5883
• Move some python tests from vs1 to vs2 by @j1m-ryan in #5888
• Pod logs in tests when startup fails by @oseoin in #5901
• Make markers strict, and add project.toml to local python tests, by @j1m-ryan in #5911
• Add flaky label to some flaky tests by @j1m-ryan in #5955
• Dos - Allow list by @pasmant in #5824
• Reduce NAP CI time by @j1m-ryan in #5999
• Add test to check for agent by @vepatel in #6111
• Move test to correct directory by @vepatel in #6114
• Assert version from log and chart by @vepatel in #6307
• Add NIC+WAFv5 tests by @vepatel in #6456
• Add retry to version check in logs by @nginx-bot in #6504

🔨 Maintenance

129 changes

• Add name to image promotion and always run promotion by @oseoin in #5793
• Add 'needs cherry pick' label to auto-create cherrypick PRs by @oseoin in #5796
• Bump the actions group across 1 directory with 12 updates by @dependabot in #5798
• add addiitional pr tag to images by @pdabelf5 in #5799
• Enable auto-merge for dependabot by @oseoin in #5801
• Bump docker/build-push-action from 6.0.1 to 6.0.2 in the actions group by @dependabot in #5805
• add regression workflow by @pdabelf5 in #5809
• Test splitting smoke tests by dependency by @oseoin in #5803
• Re-order docker builds by @oseoin in #5812
• consolidate image generation matrices by @pdabelf5 in #5815
• Run Trivy & DockerScout on main & release branches by @pdabelf5 in #5818
• Skip upload test results on skipped tests by @oseoin in #5827
• Change test upload logic to match test run logic by @oseoin in #5829
• Fix branch prefix for docker sha updates by @oseoin in #5830
• add permissions to update released images by @pdabelf5 in #5831
• Forked workflow build by @oseoin in #5835
• Bump the actions group across 1 directory with 5 updates by @dependabot in #5825
• Add actionlint pre commit plugin by @pdabelf5 in #5839
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5841
• remove sarif artifact upload for images in feature branches by @pdabelf5 in #5850
• ensure example versions are updated by @pdabelf5 in #5853
• add permissions for gcr login to base image build by @pdabelf5 in #5860
• Bump docker/build-push-action from 6.1.0 to 6.2.0 in the actions group by @dependabot in #5871
• Exclude files from stable tag which don't impact build or test by @oseoin in #5875
• add run-name to ci & update docker sha workflows by @pdabelf5 in #5876
• add nap-v5 images to image patch workflow by @pdabelf5 in #5894
• Change always references to not cancelled by @oseoin in #5898
• ensure release draft occurs by @pdabelf5 in #5900
• remove fips from tests, image patching & release by @pdabelf5 in #5912
• Delete netlify.toml by @j1m-ryan in #5915
• Bump the actions group across 1 directory with 2 updates by @dependabot in #5904
• Mount pyproject.toml in smoke tests by @oseoin in #5932
• Add missing write permission for release draft by @oseoin in #5945
• Bump the actions group with 2 updates by @dependabot in #5948
• OT dependency build by @oseoin in #5919
• test single image workflow by @pdabelf5 in #5969
• pull test image by @pdabelf5 in #5971
• Add missing opentracing build action SHAs by @oseoin in #5970
• Shortcode for NIC version in docs by @oseoin in #5953
• Update description for k8s version in single image regression by @oseoin in #5986
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5984
• Workflow to build ppc64le binary for ubi by @oseoin in #6005
• Bump the actions group across 1 directory with 11 updates by @dependabot in #6024
• Bump docker/build-push-action from 6.4.0 to 6.4.1 in the actions group by @dependabot in #6035
• Bump the actions group across 1 directory with 5 updates by @dependabot in #6045
• ensure s...

v3.6.2

Important

FIPS compliant images are currently impacted by compatibility issues with a dependent library.
We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🐛 Bug Fixes

• Don't log errors for not implemented grpc metrics (#6125) by @jjngx in #6150
• re-order mounting debian apt source file by @nginx-bot in #6225

📦 Helm Chart

• Update helm docs by @nginx-bot in #6236
• Release 3.6.2 by @nginx-bot in #6220

🧪 Tests

• add agent test by @vepatel in #6115

🔨 Maintenance

• Shortcode for NIC version in docs by @nginx-bot in #5975
• replace promlog with go-kit by @nginx-bot in #6053
• pin wafv5 module by @vepatel in #6170
• update example for WAF v5 by @nginx-bot in #6189
• Bump kindest/node from v1.30.2 to v1.31.0 in /tests in the docker-tests group by @nginx-bot in #6206
• update kubernetes version to v1.31.0 in helm schema by @nginx-bot in #6219

📝 Documentation

• fips compatibility issue by @oseoin in #5973
• update k8s compatibility order in tech specs by @j1m-ryan in #5991
• update WAF v5 documentation by @nginx-bot in #6019
• remove link to ingress example by @nginx-bot in #6102
• App Protect WAFv5 compatibility matrix by @nginx-bot in #6178
• update README.md by @vepatel in #6190
• Fix manifest CRD documentation by @ADubhlaoich in #6208

⬆️ Dependencies

• Bump the go group with 1 update by @nginx-bot in #5967
• Docker image update d41d8cd9 by @nginx-bot in #5974
• Docker image update d41d8cd9 by @nginx-bot in #6013
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6021
• Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in the go_modules group by @nginx-bot in #5998
• Docker image update d41d8cd9 by @nginx-bot in #6070
• Bump the go group across 1 directory with 6 updates by @nginx-bot in #6081
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6120
• Docker image update d41d8cd9 by @nginx-bot in #6098
• Docker image update d41d8cd9 by @nginx-bot in #6126
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6141
• Docker image update d41d8cd9 by @nginx-bot in #6158
• Docker image update d41d8cd9 by @nginx-bot in #6179
• Docker image update d41d8cd9 by @nginx-bot in #6191
• Bump the go group across 1 directory with 11 updates by @nginx-bot in #6196
• update telemetry exporter to v0.1.1 by @nginx-bot in #6204
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6211
• Bump github.com/nginxinc/nginx-plus-go-client from 1.2.2 to 1.3.0 in the go group by @nginx-bot in #6222
• nginx 1.27.1 dependencies by @pdabelf5 in #6226
• Docker image update d41d8cd9 by @nginx-bot in #6233
• Bump the go group with 3 updates by @nginx-bot in #6234

Full Changelog: v3.6.1...v3.6.2

Upgrade

• For NGINX, use the v3.6.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.6.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.6.2 source code.
• For Helm, use version 1.3.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.2/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.6.1

Important

FIPS compliant images are currently impacted by compatibility issues with a dependent library.
We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🐛 Bug Fixes

• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5921
• Add default telemetry endpoint by @shaun-nx in #5889

🔨 Maintenance

• Add permissions for gcr login to base image build (#5860) by @oseoin in #5862
• release pipeline fixes by @pdabelf5 in #5863
• terminate milestone api call by @pdabelf5 in #5864
• Update release skip job logic by @pdabelf5 in #5865
• aws marketplace id token by @pdabelf5 in #5867
• add v prefix to github version by @pdabelf5 in #5868
• skip closing already closed milestone by @pdabelf5 in #5869
• remove fips from tests & image publishing by @pdabelf5 in #5918
• ensure example versions are updated by @pdabelf5 in #5897
• Mount pyproject.toml in smoke tests by @nginx-bot in #5935
• Add missing write permission for release draft by @nginx-bot in #5946
• Image matrix by @oseoin in #5950
• Version Bump for 3.6.1 by @nginx-bot in #5895

📝 Documentation

• remove reference to auth_request off by @j1m-ryan in #5937
• add scc and update deployment by @vepatel in #5940

⬆️ Dependencies

• Bump the go group with 1 update by @nginx-bot in #5877
• Bump the go group with 2 updates by @nginx-bot in #5884
• Bump Go version - fix vulnerability in the std lib by @nginx-bot in #5930
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #5933
• Bump the go group with 2 updates by @nginx-bot in #5951
• Bump kindest/node from v1.30.0 to v1.30.2 in /tests in the docker-tests group by @nginx-bot in #5941
• Docker image update d41d8cd9 by @nginx-bot in #5923
• Bump the python group in /tests with 2 updates by @nginx-bot in #5926
• Docker image update d41d8cd9 by @nginx-bot in #5882
• Docker image update d41d8cd9 by @nginx-bot in #5939
• Docker image update d41d8cd9 by @nginx-bot in #5943
• Docker image update d41d8cd9 by @nginx-bot in #5947
• Bump the actions group across 1 directory with 2 updates by @nginx-bot in #5931

Full Changelog: v3.6.0...v3.6.1

Upgrade

• For NGINX, use the v3.6.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.6.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, the Azure Marketplace or build your own image using the v3.6.1 source code.
• For Helm, use version 1.3.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

v3.6.0

What's Changed

🚀 Features

• Preserve valid listeners when invalid listeners are present in GlobalConfiguration by @haywoodsh in #5205
• Add proxy-set-headers annotation for ingress by @AlexFenlon in #5366
• Add telemetry data - ingresses by @jjngx in #5406
• add service count metric to telemetry by @j1m-ryan in #5408
• Add Ingress Classes to Telemetry data by @jjngx in #5418
• Add policies count to telemetry by @AlexFenlon in #5457
• Add support for headers in action return by @andrew-s in #5204
• Add Granular Policy count for telemetry by @AlexFenlon in #5489
• Add Ingress Annotation List to Telemetry by @AlexFenlon in #5516
• Add AppProtectVersion to Telemetry by @AlexFenlon in #5554
• Add IsPlus to Telemetry by @AlexFenlon in #5571
• Add Installation Flags to Telemetry by @AlexFenlon in #5586
• Scale ratelimit with ingress pods by @dbaumgarten in #5113
• Add Granular Ingress Counts to Telemetry by @AlexFenlon in #5608
• Add Granular Services Counts to Telemetry by @AlexFenlon in #5627
• enable external service args by @vepatel in #5736
• Integrate NAP WAF v5 by @shaun-nx in #5698
• Support APIKey authentication by @haywoodsh in #5580

🐛 Bug Fixes

• fix ap-waf flag in error message by @vepatel in #5350
• Don't reload when use-cluster-ip endpoints update, and change the ingress use-cluster-ip implementation to use the cluster ip instead of the fqdn by @j1m-ryan in #5318
• fix status for invalid vs and vsr, for weight changes dynamic reload by @j1m-ryan in #5375
• pin ap compiler by @vepatel in #5433
• Add support for named ports in ingresses which use-cluster-ip by @j1m-ryan in #5456
• Fix nginx breaking & remove unused code for ProxySetHeaders annotation by @AlexFenlon in #5426
• Fix error messages by @jjngx in #5542
• Fix incorrect errors showing in Telemetry by @AlexFenlon in #5561
• Don't count Custom Resources if not enabled at NIC startup by @jjngx in #5749
• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• fix api key policy undefined routes by @j1m-ryan in #5838

📦 Helm Chart

• Remove the before NGINX Ingress Controller in some cases by @j1m-ryan in #5274
• Version Bump for 3.6.0 by @nginx-bot in #5285
• correct helm version in docs by @pdabelf5 in #5287
• update helm flag in docs for enableWeightChangesDynamicReload by @j1m-ryan in #5313
• docs version update to 3.5.0 by @pdabelf5 in #5327
• Collect count of secrets by @shaun-nx in #5404
• add local helm schema validation by @pdabelf5 in #5493
• 3.5.1 docs update by @pdabelf5 in #5520
• Revert "add local helm schema validation" by @oseoin in #5528
• Release 3.5.2 by @pdabelf5 in #5678
• helm: add knob to control cluster level rbac rendering by @hafe in #5229
• update values schema from 1.29 to 1.30 by @j1m-ryan in #5772
• Version Bump for 3.7.0 by @nginx-bot in #5828

🧪 Tests

• Wait before assertion in weight changes dynamic reload test by @j1m-ryan in #5302
• simplify smoke-test action by @pdabelf5 in #5311
• enable logging in tests by @vepatel in #5499
• Revert "enable logging in tests" by @oseoin in #5543
• Bump kindest/node from v1.29.2 to v1.30.0 in /tests in the docker-tests group across 1 directory by @dependabot in #5549
• add files for upgrade tests by @vepatel in #5553
• Docker image update d41d8cd9 by @nginx-bot in #5570
• exclude upgrade files from nightly regression tests by @vepatel in #5581
• add wait to dos test by @vepatel in #5656
• skip dos log test by @vepatel in #5658
• Fix test_dos_sec_logs_on by @pasmant in #5725
• Mount config and deployments dirs to smoke containers by @oseoin in #5740
• Docker image update d41d8cd9 by @nginx-bot in #5743
• replace skopeo action with skopeo image by @pdabelf5 in #5760
• add functional tests for rate-limit scaling by @vepatel in #5758
• check pod readiness in ingress scale test by @vepatel in #5774
• Workflow refactor by @pdabelf5 in #5766
• add docker scout scan to pipelines by @pdabelf5 in #5759
• Docker image update d41d8cd9 by @nginx-bot in #5822
• check for non 50x 404 response by @vepatel in #5851

🔨 Maintenance

79 changes

• Bump Go version to v1.22.2 by @jjngx in #5354
• Fix false-positive code scanning issue by @jjngx in #5365
• update labeller config by @pdabelf5 in #5381
• Bump the go group with 3 updates by @dependabot in #5368
• Republish helm chart workflow by @pdabelf5 in #5370
• update github labels by @pdabelf5 in #5392
• docs only workflow by @pdabelf5 in #5405
• Set reporting endpoint in makefile by @shaun-nx in #5411
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5403
• filter README changes in examples by @pdabelf5 in #5437
• Bump the actions group across 1 directory with 5 updates by @dependabot in #5438
• fix broken image cache update workflow by @pdabelf5 in #5439
• Bump the actions group across 1 directory with 5 updates by @dependabot in #5458
• update codegen by @haywoodsh in #5462
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5475
• Bump the actions group across 1 directory with 4 updates by @dependabot in #5485
• Bump the actions group with 2 updates by @dependabot in #5494
• update image patching to use new workflows by @pdabelf5 in #5497
• improve forked workflow detection by @pdabelf5 in #5501
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #5507
• rebuild python test image daily by @pdabelf5 in #5508
• Bump the actions group across 1 directory with 3 updates by @dependabot in #5510
• fix syntax error in helm release workfl...