helm-chart-4.12.1

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.1

• Update Ingress-Nginx version controller-v1.12.1

Full Changelog: helm-chart-4.12.0...helm-chart-4.12.1

helm-chart-4.11.5

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.11.5

• Update Ingress-Nginx version controller-v1.11.5

Full Changelog: helm-chart-4.11.4...helm-chart-4.11.5

controller-v1.12.1

Changelog

controller-v1.12.1

This release fixes the following CVEs:

• CVE-2025-1097
• CVE-2025-1098
• CVE-2025-1974
• CVE-2025-24513
• CVE-2025-24514

Unfortunately, to fix CVE-2025-1974 it was necessary to disable the validation of the generated NGINX configuration during the validation of Ingress resources.

The resulting NGINX configuration is still checked before the actual loading, so that there are no failures of the underlying NGINX. However, invalid Ingress resources can lead to the NGINX configuration no longer being able to be updated.

To reduce such situations as far as possible, we therefore recommend enabling annotation validation and disabling snippet annotations. In case of doubt, such states can be determined from the logs of the Ingress NGINX Controller. Watch out for a line of dashes followed by "Error:" telling you what went wrong.

Images:

• registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
• registry.k8s.io/ingress-nginx/controller-chroot:v1.12.1@sha256:90155c86548e0bb95b3abf1971cd687d8f5d43f340cfca0ad3484e2b8351096e

All changes:

• Images: Trigger controller build. (#13071)
• Controller: Several security fixes. (#13069)
• Chart: Bump Kube Webhook CertGen. (#13066)
• Tests & Docs: Bump images. (#13064)
• Images: Trigger other builds (2/2). (#13061)
• Images: Trigger other builds (1/2). (#13059)
• Tests: Bump Test Runner to v1.3.1. (#13048)
• Images: Trigger Test Runner build. (#13045)
• Images: Bump NGINX_BASE to v1.2.1. (#13044)
• Images: Trigger NGINX build. (#13039)
• Go: Update dependencies. (#13036)
• CI: Update KIND to v1.32.3. (#13029)
• CI: Update Kubernetes to v1.32.3. (#13025)
• Images: Rework. (3/3) (#13016)
• Images: Rework. (2/3) (#13011)
• Images: Rework. (1/3) (#13014)
• Custom Error Pages: Accept first of many MIME types. (#13006)
• Docs: Use enable-global-auth annotation instead of non-existing ConfigMap option. (#12978)
• Go: Update dependencies. (#12963)
• Docs: Update link to values.yaml. (#12960)
• fix DNS issues with unresolvable backends with ExternalName (#12951)
• Go: Bump to v1.24.1. (#12942)
• CI: Update KIND images. (#12931)
• Test: Remove gRPC Fortune Teller. (#12929)
• NGINX: Update ModSecurity. (#12915)
• Development: Update KIND images. (#12909)
• Config: Remove notes about future defaults. (#12898)
• Images: Update kubectl to v1.32.2. (#12856)
• Development: Update Kubernetes to v1.32.0. (#12853)
• CI: Update kubectl to v1.32.2. (#12851)
• Images: Migrate to AR. (2/2) (#12849)
• Images: Migrate to AR. (1/2) (#12846)
• Docs: Migrate to AR. (#12809)
• Docs: Enable code copy button. (#12805)
• Go: Bump to v1.23.6. (#12801)
• CI: Update Artifact Hub to v1.20.0. (#12793)
• Images: Update kubectl to v1.31.5. (#12791)
• CI: Update kubectl to v1.31.5. (#12789)
• Development: Bump Kubernetes to v1.31.4. (#12784)
• Go: Replace golang.org/x/exp/slices with slices. (#12781)
• Docs: Fix character format. (#12773)
• Docs: Improve bare-metal setup. (#12744)
• Build: Always use local tmp dir on macOS. (#12741)
• Development: Bump Kubernetes to v1.31.4. (#12739)
• Images: Bump gcb-docker-gcloud to v20250116-2a05ea7e3d. (#12738)
• Go: Bump to v1.23.5. (#12736)
• Docs: Clarify rate limits are per ingress controller replica. (#12715)
• Go: Stop using workspace. (#12712)
• Chart: Bump Kube Webhook CertGen. (#12696)
• Tests & Docs: Bump images. (#12694)
• Images: Trigger other builds (2/2). (#12690)
• Images: Trigger other builds (1/2). (#12688)
• Tests: Bump Test Runner to v20250112-01b7af21. (#12684)
• Images: Trigger Test Runner build. (#12681)
• Images: Bump NGINX_BASE to v1.2.0. (#12677)
• Images: Trigger NGINX build. (#12674)
• NGINX: Align quotes. (#12673)
• Annotations: Deny newlines. (#12667)
• Annotations: Reload on custom header changes. (#12652)
• NGINX: Bump ModSecurity. (#12651)
• NGINX: Bump OpenTelemetry. (#12631)

Dependency updates:

• Bump github.com/opencontainers/runc from 1.2.5 to 1.2.6 in the go group across 1 directory (#13033)
• Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.3 (#13027)
• Bump the actions group with 5 updates (#13023)
• Bump dorny/test-reporter from 1.9.1 to 2.0.0 (#12989)
• Bump github.com/prometheus/common from 0.62.0 to 0.63.0 (#12987)
• Bump the go group across 3 directories with 9 updates (#12985)
• Bump the actions group with 3 updates (#12984)
• Bump github/codeql-action from 3.28.10 to 3.28.11 in the actions group (#12968)
• Bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0 (#12958)
• Bump golang.org/x/crypto from 0.35.0 to 0.36.0 (#12955)
• Bump the go group across 2 directories with 1 update (#12938)
• Bump google.golang.org/grpc from 1.70.0 to 1.71.0 (#12937)
• Bump golang.org/x/crypto from 0.34.0 to 0.35.0 (#12923)
• Bump the actions group with 3 updates (#12921)
• Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 (#12900)
• Bump golang.org/x/crypto from 0.33.0 to 0.34.0 (#12893)
• Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 in /images/custom-error-pages/rootfs (#12892)
• Bump the actions group with 4 updates (#12889)
• Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#12867)
• Bump the go group across 3 directories with 11 updates (#12865)
• Bump the actions group with 2 updates (#12863)
• Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in /images/kube-webhook-certgen/rootfs (#12861)
• Bump the actions group with 4 updates (#12814)
• Bump golang.org/x/crypto from 0.32.0 to 0.33.0 (#12812)
• Bump the actions group with 2 updates (#12777)
• Bump the go group across 2 directories with 1 update (#12775)
• Bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#12760)
• Bump sigs.k8s.io/controller-runtime from 0.20.0 to 0.20.1 in the go group across 1 directory (#12758)
• Bump the actions group with 5 updates (#12756)
• Bump sigs.k8s.io/controller-runtime from 0.19.4 to 0.20.0 (#12732)
• Bump github.com/prometheus/common from 0.61.0 to 0.62.0 (#12728)
• Bump the go group across 3 directories with 9 updates (#12726)
• Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 in the actions group (#12725)
• Bump google.golang.org/grpc from 1.69.2 to 1.69.4 in the go group across 1 directory (#12699)
• Bump the actions group with 3 updates (#12664)
• Bump the go group across 1 directory with 3 updates (#12662)
• Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#12661)
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#12628)

Full Changelog: controller-v1.12.0...controller-v1.12.1

controller-v1.11.5

Changelog

controller-v1.11.5

This release fixes the following CVEs:

• CVE-2025-1097
• CVE-2025-1098
• CVE-2025-1974
• CVE-2025-24513
• CVE-2025-24514

Unfortunately, to fix CVE-2025-1974 it was necessary to disable the validation of the generated NGINX configuration during the validation of Ingress resources.

The resulting NGINX configuration is still checked before the actual loading, so that there are no failures of the underlying NGINX. However, invalid Ingress resources can lead to the NGINX configuration no longer being able to be updated.

To reduce such situations as far as possible, we therefore recommend enabling annotation validation and disabling snippet annotations. In case of doubt, such states can be determined from the logs of the Ingress NGINX Controller. Watch out for a line of dashes followed by "Error:" telling you what went wrong.

Images:

• registry.k8s.io/ingress-nginx/controller:v1.11.5@sha256:a1cbad75b0a7098bf9325132794dddf9eef917e8a7fe246749a4cea7ff6f01eb
• registry.k8s.io/ingress-nginx/controller-chroot:v1.11.5@sha256:ec9df3eb6b06563a079ee46045da94cbf750f7dbb16fdbcb9e3265b551ed72ad

All changes:

• Images: Trigger controller build. (#13072)
• Controller: Several security fixes. (#13070)
• Chart: Bump Kube Webhook CertGen. (#13067)
• Tests & Docs: Bump images. (#13065)
• Images: Trigger other builds (2/2). (#13060)
• Images: Trigger other builds (1/2). (#13058)
• Tests: Bump Test Runner to v1.3.1. (#13049)
• Images: Trigger Test Runner build. (#13046)
• Images: Bump NGINX_BASE to v0.3.1. (#13041)
• Images: Trigger NGINX build. (#13040)
• Go: Update dependencies. (#13037)
• CI: Update KIND to v1.32.3. (#13030)
• CI: Update Kubernetes to v1.32.3. (#13026)
• Images: Rework. (3/3) (#13017)
• Images: Rework. (2/3) (#13012)
• Images: Rework. (1/3) (#13015)
• Custom Error Pages: Accept first of many MIME types. (#13007)
• Docs: Use enable-global-auth annotation instead of non-existing ConfigMap option. (#12977)
• Go: Update dependencies. (#12964)
• Docs: Update link to values.yaml. (#12961)
• fix DNS issues with unresolvable backends with ExternalName (#12952)
• Go: Bump to v1.24.1. (#12943)
• CI: Update KIND images. (#12932)
• Test: Remove gRPC Fortune Teller. (#12930)
• NGINX: Update ModSecurity. (#12916)
• Development: Update KIND images. (#12910)
• Config: Remove notes about future defaults. (#12899)
• Images: Update kubectl to v1.32.2. (#12855)
• Development: Update Kubernetes to v1.32.0. (#12854)
• CI: Update kubectl to v1.32.2. (#12852)
• Images: Migrate to AR. (2/2) (#12850)
• Images: Migrate to AR. (1/2) (#12847)
• Docs: Migrate to AR. (#12808)
• Docs: Enable code copy button. (#12806)
• Go: Bump to v1.23.6. (#12800)
• CI: Update Artifact Hub to v1.20.0. (#12794)
• Images: Update kubectl to v1.31.5. (#12792)
• CI: Update kubectl to v1.31.5. (#12790)
• Development: Bump Kubernetes to v1.31.4. (#12783)
• Go: Replace golang.org/x/exp/slices with slices. (#12780)
• Docs: Fix character format. (#12774)
• Docs: Improve bare-metal setup. (#12745)
• Build: Always use local tmp dir on macOS. (#12742)
• Development: Bump Kubernetes to v1.31.4. (#12740)
• Images: Bump gcb-docker-gcloud to v20250116-2a05ea7e3d. (#12737)
• Go: Bump to v1.23.5. (#12735)
• Docs: Clarify rate limits are per ingress controller replica. (#12716)
• Go: Stop using workspace. (#12713)
• Chart: Bump Kube Webhook CertGen. (#12697)
• Tests & Docs: Bump images. (#12695)
• Images: Trigger other builds (2/2). (#12691)
• Images: Trigger other builds (1/2). (#12687)
• Tests: Bump Test Runner to v20250112-01b7af21. (#12685)
• Images: Trigger Test Runner build. (#12682)
• Images: Bump NGINX_BASE to v0.3.0. (#12679)
• Images: Trigger NGINX build. (#12675)
• NGINX: Align quotes. (#12670)
• Annotations: Deny newlines. (#12666)
• Annotations: Reload on custom header changes. (#12653)
• NGINX: Bump ModSecurity. (#12650)
• NGINX: Bump OpenTelemetry. (#12632)

Dependency updates:

• Bump github.com/opencontainers/runc from 1.2.5 to 1.2.6 in the go group across 1 directory (#13034)
• Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.3 (#13028)
• Bump the actions group with 5 updates (#13024)
• Bump dorny/test-reporter from 1.9.1 to 2.0.0 (#12990)
• Bump github.com/prometheus/common from 0.62.0 to 0.63.0 (#12988)
• Bump the go group across 3 directories with 9 updates (#12986)
• Bump the actions group with 3 updates (#12983)
• Bump github/codeql-action from 3.28.10 to 3.28.11 in the actions group (#12969)
• Bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0 (#12959)
• Bump golang.org/x/crypto from 0.35.0 to 0.36.0 (#12956)
• Bump the go group across 2 directories with 1 update (#12939)
• Bump google.golang.org/grpc from 1.70.0 to 1.71.0 (#12936)
• Bump golang.org/x/crypto from 0.34.0 to 0.35.0 (#12924)
• Bump the actions group with 3 updates (#12922)
• Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 (#12901)
• Bump golang.org/x/crypto from 0.33.0 to 0.34.0 (#12894)
• Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 in /images/custom-error-pages/rootfs (#12891)
• Bump the actions group with 4 updates (#12890)
• Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#12868)
• Bump the go group across 3 directories with 11 updates (#12866)
• Bump the actions group with 2 updates (#12864)
• Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in /images/kube-webhook-certgen/rootfs (#12862)
• Bump the actions group with 4 updates (#12815)
• Bump golang.org/x/crypto from 0.32.0 to 0.33.0 (#12813)
• Bump the actions group with 2 updates (#12778)
• Bump the go group across 2 directories with 1 update (#12776)
• Bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#12761)
• Bump sigs.k8s.io/controller-runtime from 0.20.0 to 0.20.1 in the go group across 1 directory (#12759)
• Bump the actions group with 5 updates (#12757)
• Bump sigs.k8s.io/controller-runtime from 0.19.4 to 0.20.0 (#12731)
• Bump github.com/prometheus/common from 0.61.0 to 0.62.0 (#12729)
• Bump the go group across 3 directories with 9 updates (#12727)
• Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 in the actions group (#12724)
• Bump google.golang.org/grpc from 1.69.2 to 1.69.4 in the go group across 1 directory (#12700)
• Bump the actions group with 3 updates (#12665)
• Bump the go group across 1 directory with 3 updates (#12663)
• Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#12660)
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#12629)

Full Changelog: controller-v1.11.4...controller-v1.11.5

helm-chart-4.12.0

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.0

• CI: Fix chart testing. (#12258)
• Update Ingress-Nginx version controller-v1.12.0

Full Changelog: helm-chart-4.11.0...helm-chart-4.12.0

helm-chart-4.11.4

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.11.4

• CI: Fix chart testing. (#12259)
• Update Ingress-Nginx version controller-v1.11.4

Full Changelog: helm-chart-4.11.3...helm-chart-4.11.4

helm-chart-4.10.6

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.10.6

• CI: Fix chart testing. (#12260)
• Update Ingress-Nginx version controller-v1.10.6

Full Changelog: helm-chart-4.10.5...helm-chart-4.10.6

controller-v1.12.0

Changelog

controller-v1.12.0

Images:

• registry.k8s.io/ingress-nginx/controller:v1.12.0@sha256:e6b8de175acda6ca913891f0f727bca4527e797d52688cbe9fec9040d6f6b6fa
• registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0@sha256:87c88e1c38a6c8d4483c8f70b69e2cca49853bb3ec3124b9b1be648edf139af3

All changes:

• Images: Trigger controller build. (#12609)

• Chart: Bump Kube Webhook CertGen. (#12606)

• Tests & Docs: Bump images. (#12603)

• Images: Trigger other builds (2/2). (#12599)

• Images: Trigger other builds (1/2). (#12595)

• Tests: Bump e2e-test-runner to v20241224-68ed4e7b. (#12590)

• Images: Trigger test-runner build. (#12587)

• Images: Bump NGINX_BASE to v1.1.0. (#12582)

• Images: Trigger NGINX build. (#12579)

• Go: Clean go.work.sum. (#12573)

• Repository: Update owners. (#12568)

• Images: Bump gcb-docker-gcloud to v20241217-ff46a068cd. (#12561)

• CI: Update KIND images. (#12560)

• Images: Bump Alpine to v3.21. (#12528)

• Docs: Add guide on how to set a Maintenance Page. (#12525)

• rikatz is stepping down (#12516)

• rikatz is stepping down (#12494)

• Go: Bump to v1.23.4. (#12483)

• Plugin: Bump goreleaser to v2. (#12440)

• GitHub: Fix exec in issue template. (#12387)

• CI: Update KIND images. (#12367)

• Images: Bump gcb-docker-gcloud to v20241110-72bb0b1665. (#12342)

• Go: Bump to v1.23.3. (#12337)

• Auth TLS: Add _ to redirect RegEx. (#12326)

• Auth TLS: Improve redirect RegEx. (#12323)

• Update custom headers annotation documentation (#12318)

• Tests: Bump e2e-test-runner to v20241104-02a3933e. (#12312)

• Docs: Add CPU usage note for --metrics-per-undefined-host. (#12310)

• Images: Trigger test-runner build. (#12308)

• Config: Fix panic on invalid lua-shared-dict. (#12283)

• Docs: fix limit-rate-after references (#12278)

• Chart: Rework ServiceMonitor. (#12269)

• Chart: Add ServiceAccount tests. (#12263)

• CI: Fix chart testing. (#12258)

• [fix] fix nginx temp configs cleanup (#12225)

• Chart: Suggest matchLabelKeys in Topology Spread Constraints. (#12202)

• Docs: Add Pod Security Admission. (#12195)

• Docs: Clarify external & service port in TCP/UDP services explanation. (#12192)

• Images: Trigger controller build. (#12154)

• ⚠️ Metrics: Disable by default. (#12153) ⚠️

  This changes the default of the following CLI arguments:

  • --enable-metrics gets disabled by default.

• Tests & Docs: Bump e2e-test-echo to v1.0.1. (#12147)

• Images: Trigger e2e-test-echo build. (#12140)

• ⚠️ Images: Drop s390x. (#12137) ⚠️

  Support for the s390x architecture has already been removed from the controller image. This also removes it from the NGINX base image and CI relevant images.

• Images: Build s390x controller. (#12126)

• Chart: Bump Kube Webhook CertGen. (#12119)

• Tests & Docs: Bump images. (#12118)

• Cloud Build: Bump gcb-docker-gcloud to v20240718-5ef92b5c36. (#12113)

• Images: Trigger other builds. (#12110)

• Tests: Bump e2e-test-runner to v20241004-114a6abb. (#12103)

• Images: Trigger test-runner build. (#12100)

• Docs: Add a multi-tenant warning. (#12091)

• Go: Bump to v1.22.8. (#12069)

• Images: Bump NGINX_BASE to v1.0.0. (#12066)

• Images: Trigger NGINX build. (#12063)

• Images: Remove NGINX v1.21. (#12031)

• Chart: Add controller.metrics.service.enabled. (#12056)

• GitHub: Improve Dependabot. (#12033)

• Chart: Add global.image.registry. (#12028)

• ⚠️ Images: Remove OpenTelemetry. (#12024) ⚠️

  OpenTelemetry is still supported, but since the module is built into the controller image since v1.10, we hereby remove the init container and image which were used to install it upon controller startup.

• Chart: Improve CI. (#12003)

• Chart: Extend image tests. (#12025)

• Chart: Add controller.progressDeadlineSeconds. (#12017)

• Docs: Add health check annotations for AWS. (#12018)

• Docs: Convert opentelemetry.md from CRLF to LF. (#12005)

• Chart: Implement unhealthyPodEvictionPolicy. (#11992)

• Chart: Add defaultBackend.maxUnavailable. (#11995)

• Chart: Test controller.minAvailable & controller.maxUnavailable. (#12000)

• Chart: Align default backend PodDisruptionBudget. (#11993)

• Metrics: Fix namespace in nginx_ingress_controller_ssl_expire_time_seconds. (#10274)

• ⚠️ Chart: Remove Pod Security Policy. (#11971) ⚠️

  This removes Pod Security Policies and related resources from the chart.

• Chart: Improve default backend service account. (#11972)

• Go: Bump to v1.22.7. (#11943)

• NGINX: Remove inline Lua from template. (#11806)

• Images: Bump OpenTelemetry C++ Contrib. (#11629)

• Docs: Add note about --watch-namespace. (#11947)

• Images: Use latest Alpine 3.20 everywhere. (#11944)

• Fix minor typos (#11935)

• Chart: Implement controller.admissionWebhooks.service.servicePort. (#11931)

• Allow any protocol for cors origins (#11153)

• Tests: Bump e2e-test-runner to v20240829-2c421762. (#11919)

• Images: Trigger test-runner build. (#11916)

• Chart: Add controller.metrics.prometheusRule.annotations. (#11849)

• Chart: Add tests for PrometheusRule & ServiceMonitor. (#11883)

• Annotations: Allow commas in URLs. (#11882)

• CI: Grant checks write permissions to E2E Test Report. (#11862)

• Chart: Use generic values for ConfigMap test. (#11877)

• Security: Follow-up on recent changes. (#11874)

• Lua: Remove plugins from .luacheckrc & E2E docs. (#11872)

• Dashboard: Remove ingress_upstream_latency_seconds. (#11878)

• Metrics: Add --metrics-per-undefined-host argument. (#11818)

• Update maxmind post link about geolite2 license changes (#11861)

• ⚠️ Remove global-rate-limit feature (#11851) ⚠️

  This removes the following configuration options:

  • global-rate-limit-memcached-host
  • global-rate-limit-memcached-port
  • global-rate-limit-memcached-connect-timeout
  • global-rate-limit-memcached-max-idle-timeout
  • global-rate-limit-memcached-pool-size
  • global-rate-limit-status-code

  It also removes the following annotations:

  • global-rate-limit
  • global-rate-limit-window
  • global-rate-limit-key
  • global-rate-limit-ignored-cidrs

• Revert "docs: Add deployment for AWS NLB Proxy." (#11857)

• Add custom code handling for temporal redirect (#10651)

• Add native histogram support for histogram metrics (#9971)

• Replace deprecated queue method (#11853)

• ⚠️ Enable security features by default (#11819) ⚠️

  This changes the default of the following CLI arguments:

  • --enable-annotation-validation gets enabled by default.

  It also changes the default of the following configuration options:

  • allow-cross-namespace-resources gets disabled by default.
  • annotations-risk-level gets lowered to "High" by default.
  • strict-validate-path-type gets enabled by default.

• docs: Add deployment for AWS NLB Proxy. (#9565)

• ⚠️ Remove 3rd party lua plugin support (#11821) ⚠️

  This removes the following configuration options:

  • plugins

  It also removes support for user provided Lua plugins in the /etc/nginx/lua/plugins directory.

• Auto-generate annotation docs (#11820)

• ⚠️ Metrics: Remove ingress_upstream_latency_seconds. (#11795) ⚠️

  This metric has already been deprecated and is now getting removed.

• Release controller v1.11.2/v1.10.4 & chart v4.11.2/v4.10.4. (#11816)

• Chart: Bump Kube Webhook CertGen & OpenTelemetry. (#11809)

• Tests & Docs: Bump images. (#11803)

• Images: Trigger failed builds. (#11800)

• Images: Trigger other builds. (#11796)

• Controller: Fix panic in alternative backend merging. (#11789)

• Tests: Bump e2e-test-runner to v20240812-3f0129aa. (#11788)

• Images: Trigger test-runner build. (#11785)

• Images: Bump NGINX_BASE to v0.0.12. (#11782)

• Images: Trigger NGINX build. (#11779)

• Cloud Build: Add missing config, remove unused ones. (#11774)

• Cloud Build: Tweak timeouts. (#11761)

• Cloud Build: Fix substitutions. (#11758)

• Cloud Build: Some chores. (#11633)

• Go: Bump to v1.22.6. (#11747)

• Images: Bump NGINX_BASE to v0.0.11. (#11741)

• Images: Trigger NGINX build. (#11735)

• docs: update OpenSSL Roadmap link (#11730)

• Go: Bump to v1.22.5. (#11634)

• Docs: Fix typo in AWS LB Controller reference (#11723)

• Perform some cleaning operations on line breaks. (#11720)

• Missing anchors in regular expression. (#11717)

• Docs: Fix from-to-www redirect description. (#11712)

• Chart: Remove isControllerTagValid. (#11710)

• Tests: Bump e2e-test-runner to v20240729-04899b27. (#11702)

• Chart: Explicitly set runAsGroup. (#11679)

• Docs: Clarify from-to-www redirect direction. (#11682)

• added real-client-ip faq (#11663)

• Docs: Format NGINX configuration table. (#11659)

• Release controller v1.11.1/v1.10.3 & chart v4.11.1/v4.10.3. (#11654)

• Tests: Bump test-runner to v20240717-1fe74b5f. (#11645)

• Images: Trigger test-runner build. (#11636)

• Images: Bump NGINX_BASE to v0.0.10. (#11635)

• remove modsecurity coreruleset test files from nginx image (#11617)

• unskip the ocsp tests and update images to fix cfssl bug (#11606)

• Fix indent in YAML for example pod (#11598)

• Images: Bump test-runner. (#11600)

• Images: Bump NGINX_BASE to v0.0.9. (#11599)

• revert module upgrade (#11594)

• README: Fix support matrix. (#11586)

• Repository: Add changelogs from release-v1.10. (#11587)

Dependency updates:

• Bump k8s.io/apiextensions-apiserver from 0.31.3 to 0.32.0 (#12566)
• Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.1 (#12555)
• Bump k8s.io/code-generator from 0.31.3 to 0.32.0 (#12550)
• Bump k8s.io/cli-runtime from 0.31.3 to 0.32.0 (#12547)
• Bump k8s.io/apiserver from 0.31.3 to 0.32.0 (#12544)
• Bump the actions group with 2 updates (#12541)
• Bump google.golang.org/grpc from 1.68.1 to 1.69.2 (#12538)
• Bump k8s.io/client-go from 0.31.3 to 0.32.0 (#12512)
• Bump github.com/opencontainers/runc from...

controller-v1.11.4

Changelog

controller-v1.11.4

Images:

• registry.k8s.io/ingress-nginx/controller:v1.11.4@sha256:981a97d78bee3109c0b149946c07989f8f1478a9265031d2d23dea839ba05b52
• registry.k8s.io/ingress-nginx/controller-chroot:v1.11.4@sha256:f29d0f9e7a9ef4947eda59ed0c09ec13380b13639d1518cf1ab8ec09c3e22ef8

All changes:

• Images: Trigger controller build. (#12610)
• Chart: Bump Kube Webhook CertGen. (#12607)
• Tests & Docs: Bump images. (#12604)
• Images: Trigger other builds (2/2). (#12600)
• Images: Trigger other builds (1/2). (#12596)
• Tests: Bump e2e-test-runner to v20241224-68ed4e7b. (#12591)
• Images: Trigger test-runner build. (#12588)
• Images: Bump NGINX_BASE to v0.2.0. (#12583)
• Images: Trigger NGINX build. (#12577)
• Go: Clean go.work.sum. (#12574)
• Repository: Update owners. (#12569)
• Images: Bump gcb-docker-gcloud to v20241217-ff46a068cd. (#12562)
• CI: Update KIND images. (#12558)
• Images: Bump Alpine to v3.21. (#12529)
• Docs: Add guide on how to set a Maintenance Page. (#12526)
• rikatz is stepping down (#12517)
• rikatz is stepping down (#12495)
• Go: Bump to v1.23.4. (#12484)
• Plugin: Bump goreleaser to v2. (#12441)
• GitHub: Fix exec in issue template. (#12388)
• CI: Update KIND images. (#12365)
• Images: Bump gcb-docker-gcloud to v20241110-72bb0b1665. (#12343)
• Go: Bump to v1.23.3. (#12338)
• Auth TLS: Add _ to redirect RegEx. (#12327)
• Auth TLS: Improve redirect RegEx. (#12322)
• Update custom headers annotation documentation (#12319)
• Tests: Bump e2e-test-runner to v20241104-02a3933e. (#12313)
• Images: Trigger test-runner build. (#12306)
• Config: Fix panic on invalid lua-shared-dict. (#12284)
• Docs: fix limit-rate-after references (#12279)
• Chart: Rework ServiceMonitor. (#12270)
• Chart: Add ServiceAccount tests. (#12264)
• CI: Fix chart testing. (#12259)
• [fix] fix nginx temp configs cleanup (#12223)
• Chart: Suggest matchLabelKeys in Topology Spread Constraints. (#12203)
• Docs: Add Pod Security Admission. (#12197)
• Docs: Clarify external & service port in TCP/UDP services explanation. (#12193)
• Docs: Goodbye, v1.10. (#12159)

Dependency updates:

• Bump k8s.io/apiextensions-apiserver from 0.31.3 to 0.32.0 (#12567)
• Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.1 (#12556)
• Bump k8s.io/code-generator from 0.31.3 to 0.32.0 (#12551)
• Bump k8s.io/cli-runtime from 0.31.3 to 0.32.0 (#12548)
• Bump k8s.io/apiserver from 0.31.3 to 0.32.0 (#12545)
• Bump the actions group with 2 updates (#12542)
• Bump google.golang.org/grpc from 1.68.1 to 1.69.2 (#12539)
• Bump k8s.io/client-go from 0.31.3 to 0.32.0 (#12513)
• Bump github.com/opencontainers/runc from 1.2.2 to 1.2.3 in the go group across 1 directory (#12510)
• Bump the actions group with 3 updates (#12507)
• Bump k8s.io/kube-aggregator from 0.31.3 to 0.32.0 in /images/kube-webhook-certgen/rootfs (#12503)
• Bump k8s.io/apimachinery from 0.31.3 to 0.32.0 in /images/ext-auth-example-authsvc/rootfs (#12500)
• Bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#12477)
• Bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /magefiles (#12475)
• Bump github.com/prometheus/common from 0.60.1 to 0.61.0 (#12465)
• Bump github/codeql-action from 3.27.5 to 3.27.6 in the actions group (#12462)
• Bump the go group across 1 directory with 2 updates (#12458)
• Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 (#12427)
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#12417)
• Bump the go group across 3 directories with 10 updates (#12415)
• Bump the actions group with 3 updates (#12411)
• Bump github.com/opencontainers/runc from 1.2.1 to 1.2.2 in the go group across 1 directory (#12381)
• Bump github/codeql-action from 3.27.1 to 3.27.4 in the actions group (#12374)
• Bump golangci-lint on actions and disable deprecated linters (#12362)
• Bump google.golang.org/grpc from 1.67.1 to 1.68.0 (#12355)
• Bump the actions group with 3 updates (#12352)
• Bump golang.org/x/crypto from 0.28.0 to 0.29.0 (#12350)
• Bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0 (#12298)
• Bump github.com/opencontainers/runc from 1.2.0 to 1.2.1 in the go group across 1 directory (#12295)
• Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0 (#12289)
• Bump actions/dependency-review-action from 4.3.5 to 4.4.0 in the actions group (#12274)
• Bump the go group across 3 directories with 11 updates (#12245)
• Bump github.com/opencontainers/runc from 1.1.15 to 1.2.0 (#12239)
• Bump the actions group with 5 updates (#12240)
• Bump github.com/ncabatoff/process-exporter from 0.8.3 to 0.8.4 in the go group across 1 directory (#12220)
• Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 in the actions group (#12216)
• Bump github/codeql-action from 3.26.12 to 3.26.13 in the actions group (#12190)
• Bump the go group across 2 directories with 1 update (#12187)
• Bump the actions group with 2 updates (#12181)
• Bump github.com/opencontainers/runc from 1.1.14 to 1.1.15 in the go group across 1 directory (#12179)

Full Changelog: controller-v1.11.3...controller-v1.11.4

controller-v1.10.6

Changelog

controller-v1.10.6

Images:

• registry.k8s.io/ingress-nginx/controller:v1.10.6@sha256:b6fbd102255edb3ba8e5421feebe14fd3e94cf53d199af9e40687f536152189c
• registry.k8s.io/ingress-nginx/controller-chroot:v1.10.6@sha256:44ceedafc0e04a75521b5d472c1b6b5cc08afb8038b5bbfd79c21d066ccf300e

All changes:

• Images: Trigger controller build. (#12611)
• Chart: Bump Kube Webhook CertGen. (#12608)
• Tests & Docs: Bump images. (#12605)
• Images: Trigger other builds (2/2). (#12598)
• Images: Trigger other builds (1/2). (#12597)
• Tests: Bump e2e-test-runner to v20241224-68ed4e7b. (#12592)
• Images: Trigger test-runner build. (#12586)
• Images: Bump NGINX_BASE to v0.2.0. (#12584)
• Images: Trigger NGINX build. (#12578)
• Go: Clean go.work.sum. (#12575)
• Repository: Update owners. (#12570)
• Images: Bump gcb-docker-gcloud to v20241217-ff46a068cd. (#12563)
• CI: Update KIND images. (#12559)
• Images: Bump Alpine to v3.21. (#12530)
• Docs: Add guide on how to set a Maintenance Page. (#12527)
• rikatz is stepping down (#12518)
• rikatz is stepping down (#12497)
• Go: Bump to v1.23.4. (#12485)
• Plugin: Bump goreleaser to v2. (#12442)
• GitHub: Fix exec in issue template. (#12389)
• CI: Update KIND images. (#12368)
• Images: Bump gcb-docker-gcloud to v20241110-72bb0b1665. (#12341)
• Go: Bump to v1.23.3. (#12339)
• Auth TLS: Add _ to redirect RegEx. (#12328)
• Auth TLS: Improve redirect RegEx. (#12321)
• Tests: Bump e2e-test-runner to v20241104-02a3933e. (#12314)
• Images: Trigger test-runner build. (#12307)
• Config: Fix panic on invalid lua-shared-dict. (#12282)
• Docs: fix limit-rate-after references (#12280)
• Chart: Rework ServiceMonitor. (#12268)
• Chart: Add ServiceAccount tests. (#12266)
• CI: Fix chart testing. (#12260)
• [fix] fix nginx temp configs cleanup (#12224)
• Chart: Suggest matchLabelKeys in Topology Spread Constraints. (#12204)
• Docs: Add Pod Security Admission. (#12198)
• Docs: Clarify external & service port in TCP/UDP services explanation. (#12194)

Dependency updates:

• Bump k8s.io/apiextensions-apiserver from 0.31.3 to 0.32.0 (#12565)
• Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.1 (#12557)
• Bump k8s.io/code-generator from 0.31.3 to 0.32.0 (#12552)
• Bump k8s.io/cli-runtime from 0.31.3 to 0.32.0 (#12549)
• Bump k8s.io/apiserver from 0.31.3 to 0.32.0 (#12546)
• Bump the actions group with 2 updates (#12543)
• Bump google.golang.org/grpc from 1.68.1 to 1.69.2 (#12540)
• Bump k8s.io/client-go from 0.31.3 to 0.32.0 (#12514)
• Bump github.com/opencontainers/runc from 1.2.2 to 1.2.3 in the go group across 1 directory (#12511)
• Bump the actions group with 3 updates (#12508)
• Bump k8s.io/kube-aggregator from 0.31.3 to 0.32.0 in /images/kube-webhook-certgen/rootfs (#12504)
• Bump k8s.io/apimachinery from 0.31.3 to 0.32.0 in /images/ext-auth-example-authsvc/rootfs (#12501)
• Bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#12478)
• Bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /magefiles (#12473)
• Bump github.com/prometheus/common from 0.60.1 to 0.61.0 (#12466)
• Bump github/codeql-action from 3.27.5 to 3.27.6 in the actions group (#12463)
• Bump the go group across 1 directory with 2 updates (#12459)
• Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 (#12425)
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#12416)
• Bump the go group across 3 directories with 10 updates (#12414)
• Bump the actions group with 3 updates (#12410)
• Bump github.com/opencontainers/runc from 1.2.1 to 1.2.2 in the go group across 1 directory (#12382)
• Bump github/codeql-action from 3.27.1 to 3.27.4 in the actions group (#12375)
• Bump golangci-lint on actions and disable deprecated linters (#12363)
• Bump google.golang.org/grpc from 1.67.1 to 1.68.0 (#12356)
• Bump the actions group with 3 updates (#12353)
• Bump golang.org/x/crypto from 0.28.0 to 0.29.0 (#12351)
• Bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0 (#12297)
• Bump github.com/opencontainers/runc from 1.2.0 to 1.2.1 in the go group across 1 directory (#12294)
• Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0 (#12290)
• Bump actions/dependency-review-action from 4.3.5 to 4.4.0 in the actions group (#12275)
• Bump the go group across 3 directories with 11 updates (#12246)
• Bump github.com/opencontainers/runc from 1.1.15 to 1.2.0 (#12241)
• Bump the actions group with 5 updates (#12243)
• Bump github.com/ncabatoff/process-exporter from 0.8.3 to 0.8.4 in the go group across 1 directory (#12219)
• Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 in the actions group (#12215)
• Bump github/codeql-action from 3.26.12 to 3.26.13 in the actions group (#12191)
• Bump the go group across 2 directories with 1 update (#12189)
• Bump the actions group with 2 updates (#12185)
• Bump github.com/opencontainers/runc from 1.1.14 to 1.1.15 in the go group across 1 directory (#12184)

Full Changelog: controller-v1.10.5...controller-v1.10.6