v2.1.0

Help make the NGINX Ingress Controller better by participating in our survey!

New in NGINX Ingress Controller v2.1.0

🚀 Features

• feat: Enable setting mandatory and persistent in upstream healthchecks in VS and VSR (#2251) @ciarams87
• Add support for Nginx DOS feature (#2241) @soneillf5
• Make the resource comparison more informative in case of an error (#2273) @ndk
• Unbind app-protect from -preview-policies (#2237) @galitskiy
• Add grpc_status to the logs (#2216) @ciarams87
• Add Alpine image with OpenTracing (#2200) @lucacome
• feat: Support healthchecks in gRPC upstreams (#2178) @ciarams87
• Support gRPC in the Upstreams of the virtual server resources (#2110) @ciarams87
• Add metric about total number of TransportServers (#2149) @pleshakov
• AP: update appolicies crd (#2094) @galitskiy
• allow init containers, e.g. to deploy a crl file to nginx (#2100) @g10f
• Apply -enable-snippets cli arg to Ingresses (#2124) @pleshakov
• Add support for wildcard cert in VirtualServer resources (#1827) @svvac
• Add option to download IC binary (#2107) @lucacome
• Upload NGINX Ingress Controller binaries to release (#2044) @lucacome

🐛 Bug Fixes

• Revert "Upload NGINX Ingress Controller binaries to release (#2044)" (#2335) @ciarams87
• Fix goreleaser (#2333) @ciarams87
• fixing ap tests validation DOS override (#2292) @soneillf5
• Fix URI rewrite in VirtualServers and VirtualServerRoutes (#2267) @pleshakov
• Check if refresh token is undefined and do not store it in this case (#2260) @tippexs
• Fix grpc health check validation (#2228) @ciarams87
• Fixes #2210 | enableSnippets should not depend from enableCustomResources (#2215) @AlessioCasco
• AP: fix watch-namespace for NAP resources (#1934) @rafwegv
• Allow empty string in server-tokens annotation for NGINX Plus (#2125) @lucacome
• Use release specific repo for NGINX Plus on Debian (#2042) @lucacome

📝 Documentation

• api version clarification (#2276) @brianehlert
• Extend docs and example about wildcard TLS secret (#2288) @pleshakov
• feat: Enable setting mandatory and persistent in upstream healthchecks in VS and VSR (#2251) @ciarams87
• Add support for Nginx DOS feature (#2241) @soneillf5
• fix: docops-551 extra backslashes in KIC docs (#2272) @Jcahilltorre
• stubbing tutorial section of docs (#2164) @brianehlert
• feat: Cherry-Pick DOCOPS-474 F5-hugo theme bump December 2021 (#2263) @Jcahilltorre
• Fixed out-of-place header (#2234) @tomasohaodha
• Add grpc_status to the logs (#2216) @ciarams87
• Add Codecov (#2158) @lucacome
• fix: DOCOPS-539 broken links i troubleshooting-with-app-protect (#2211) @Jcahilltorre
• Add Alpine image with OpenTracing (#2200) @lucacome
• Merge pull request #2185 from nginxinc/theme-update-15.3 (#2186) @ashutoshpradhan-f5
• feat: Support healthchecks in gRPC upstreams (#2178) @ciarams87
• Tests improvements (#2161) @lucacome
• AP: enable FQDN as syslog destination (#1939) @rafwegv
• Move custom-resources with other examples (#2157) @lucacome
• Update Debian to Bullseye (#2173) @lucacome
• Add variables to Makefile help, improve descriptions (#2113) @lucacome
• Support gRPC in the Upstreams of the virtual server resources (#2110) @ciarams87
• Add metric about total number of TransportServers (#2149) @pleshakov
• Fix typos in the codebase (#2155) @lucacome
• Release v2.0.3 (#2135) @ciarams87
• update preview language (#2092) @brianehlert
• Updated theme hugo (#2122) @ashutoshpradhan-f5
• Add option to download IC binary (#2107) @lucacome
• Update issue templates (#2106) @lucacome
• fix: DOCOPS-408 broken image (#2105) @Jcahilltorre
• Release 2.0.2 (#2085) @ciarams87
• Clarify upstream tls in VirtualServer (#2061) @pleshakov
• fixes issues with the 404 and robots.txts redirects (#2059) @jputrino
• Remove note from operator installation (#2049) @ciarams87

🧪 Tests

• adding URL print statement to flakey test (#2326) @soneillf5
• sorting test results for deterministic results (#2325) @soneillf5
• sorted the result of GetDosProtectedThatReferencedDosLogConf in unit … (#2297) @ciarams87
• disabling dos attack tests (#2291) @soneillf5
• fix dos unit test (#2289) @soneillf5
• tests: try and get pipeline green again (#2259) @ciarams87
• AP: Fix sec log tests (#2268) @rafwegv
• tests: add VSR gRPC WAF tests (#2262) @ciarams87
• test: fix flaky test (#2247) @ciarams87
• Chore: add waf vs tests (#2227) @ciarams87
• Add debian-plus to nightly tests (#2213) @lucacome
• Run tests for Plus images (#2189) @lucacome
• Tests improvements (#2161) @lucacome
• Bump pyyaml from 5.4.1 to 6.0 in /tests (#2096) @dependabot
• Refactor policy resources (#2101) @vepatel
• Segregate AP methods (#2084) @vepatel

🔨 Maintenance

• adding URL print statement to flakey test (#2326) @soneillf5
• chore: Cleanup Dockerfile for DoS (#2324) @ciarams87
• sorting test results for deterministic results (#2325) @soneillf5
• Revert lint changes from DOS PR (#2298) @lucacome
• Update-codegen needs a specific path (#2270) @lucacome
• Update codegen (#2271) @lucacome
• Use concurrency groups to cancel running workflows (#2225) @lucacome
• Generate error page warnings for gRPC upstreams (#2196) @ciarams87
• Fix whitespace in default Make variables (#2242) @ciarams87
• Add Codecov (#2158) @lucacome
• Chore: add waf vs tests (#2227) @ciarams87
• Add content-type header to grpc error locations (#2229) @ciarams87
• Add grpc error intercept test (#2217) @ciarams87
• Add go caching in CI (#2190) @lucacome
• Upload Docker images to AWS ECR Public (#2177) @lucacome
• Move custom-resources with other examples (#2157) @lucacome
• Update Debian to Bullseye (#2173) @lucacome
• Add variables to Makefile help, improve descriptions (#2113) @lucacome
• Make curl fail on 4xx and 5xx (#2167) @lucacome
• Fix typos in the codebase (#2155) @lucacome
• fix: Update libtiff5 (#2143) @ciarams87
• Pin trivy scanner to v0.0.21 (#2137) @ciarams87
• Install libcurl on OpenTracing for NGINX Plus (#2132) @lucacome
• Update Release description and script (#2091) @lucacome
• Exclude draft PRs from automatic rebase (#2098) @lucacome
• Add tests label and category in changelog (#2099) @lucacome
• Use the right sha in metadata for Update Docker Images action (#2090) @lucacome
• Restore GHA cache (#2083) @lucacome
• Use release specific repo for NAP on Debian (#2082) @lucacome
• Downgrade the gitlab test image to python 3.9 (#2078) @ciarams87
• Remove nap plus version override (#2079) @ciarams87
• Escape commit message in Notification workflow (#2075) @lucacome
• Add waiting for response label (#2065) @lucacome
• Remove need for extra parameters for Dockerfile (#2045) @lucacome
• Remove sync workflow from master (#2055) @lucacome
• Use release specific repo for NGINX Plus on Debian (#2051) @lucacome
• Remove note from operator installation (#2049) @ciarams87
• Use action to automatically rebase PRs with master (#2052) @lucacome
• Upload Docker images to ghcr.io (#2053) @lucacome
• Fix Issues workflow (#2054) @lucacome
• Fix tests upload in the workflow (#2038) @lucacome
• Increase time before issues/PRs become stale (#2028) @lucacome
• Update Docker Images workflow for v2.0 (#2027) @lucacome

⬆️ Dependencies

• Bump github.com/nginxinc/nginx-prometheus-exporter from 0.9.0 to 0.10.0 (#2305) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.11.0 to 1.11.1 (#2304) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.8.2 to 1.9.0 (#2303) @dependabot
• Bump grpcio-tools from 1.42.0 to 1.43.0 in /tests (#2282) @dependabot
• Bump grpcio from 1.42.0 to 1.43.0 in /tests (#2283) @dependabot
• Bump k8s.io/code-generator from 0.23.0 to 0.23.1 (#2286) @dependabot
• Bump k8s.io/client-go from 0.23.0 to 0.23.1 (#2285) @dependabot
• Install latest libgmp10 in Debian (#2296) @ciarams87
• Bump kubernetes from 20.13.0 to 21.7.0 in /perf-tests (#2278) @dependabot
• Bump kubernetes from 20.13.0 to 21.7.0 in /tests (#2277) @dependabot
• Update kind to 1.23.0 (#2261) @lucacome
• Bump locust from 2.5.0 to 2.5.1 in /perf-tests (#2266) @dependabot
• Bump k8s.io/code-generator from 0.22.4 to 0.23.0 (#2254) @dependabot
• Bump k8s.io/client-go from 0.22.4 to 0.23.0 (#2252) @dependabot
• Bump github.com/golang-jwt/jwt/v4 from 4.1.0 to 4.2.0 (#2243) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.10.3 to 1.11.0 (#2239) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.8.1 to 1.8.2 (#2238) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.10.2 to 1.10.3 (#2232) @dependabot
• Bump aquasecurity/trivy-action from 0.1.0 to 0.2.0 (#2222) @dependabot
• Bump kubernetes from 19.15.0 to 20.13.0 in /perf-tests (#2224) @dependabot
• Bump kubernetes from 20.12.0b1 to 20.13.0 in /tests (#2223) @dependabot
• Update kind to 1.22.4 (#2212) @lucacome
• Bump more-itertools from 8.11.0 to 8.12.0 in /tests (#2209) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.8.0 to 1.8.1 (#2205) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.10.1 to 1.10.2 (#2206) @dependabot
• Bump k8s.io/code-generator from 0.22.3 to 0.22.4 (#2193) @dependabot
• Bump grpcio-tools from 1.41.1 to 1.42.0 in /tests (#2198) @dependabot
• Bump grpcio from 1.41.1 to 1.42.0 in /tests (#2197) @dependabot
• Merge pull request #2185 from nginxinc/theme-update-15.3 (#2186) @ashutoshpradhan-f5
• Bump k8s.io/client-go from 0.22.3 to 0.22.4 (#2192) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.7.0 to 1.8.0 (#2182) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.10.0 to 1.10.1 (#2181) @dependabot
• Bump aquasecurity/trivy-action from 0.0.21 to 0.1.0 (#2180) @dependabot
• Update packages for CVE-2021-42574 and CVE-2021-42374 (#2175) @lucacome
• Bump opentracing/nginx-opentracing from nginx-1.21.3 to nginx-1.21.4 in /build (#2172) @dependabot
• Bump more-itertools from 8.10.0 to 8.11.0 in /tests (#2171) @dependabot
• Bump nginx from 1.21.3 to 1.21.4 in /build (#2169) @dependabot
• Bump library/nginx from 1.21.3-alpine to 1.21.4-alpine in /build (#2170) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.6.0 to 1.7.0 (#2165) @dependabot
• Bump kubernetes from 20.11.0a1 to 20.12.0b1 in /tests (#2168) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.9.0 to 1.10.0 (#2166) @dependabot
• Bump locust from 2.4.3 to 2.5.0 in /perf-tests (#2162) @dependabot
• Update kind to 1.22.2 (#2163) @lucacome
• Update packages for CVEs in UBI (#2159) @lucacome
• Bump pyyaml from 5.4.1 to 6.0 in /tests (#2096) @dependabot
• Bump locust from 2.4.1 to 2.4.3 in /perf-tests (#2151) @dependabot
• Bump forcediphttpsadapter from 1.0.1 to 1.0.2 in /tests (#2146) @dependabot
• Bump grpcio-tools from 1.41.0 to 1.41.1 in /tests (#2127) @dependabot
• Bump k8s.io/client-go from 0.22.2 to 0.22.3 (#2140) @dependabot
• Bump kubernetes from 19.15.0b1 to 20.11.0a1 in /tests (#2138) @dependabot
• Bump k8s.io/code-generator from 0.22.2 to 0.22.3 (#2141) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.5.2 to 1.6.0 (#2119) @dependabot
• Bump kubernetes from 18.20.0 to 19.15.0 in /perf-tests (#2128) @dependabot
• Bump grpcio from 1.41.0 to 1.41.1 in /tests (#2130) @dependabot
• Bump locust from 2.4.0 to 2.4.1 in /perf-tests (#2111) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.8.3 to 1.9.0 (#2118) @dependabot
• Bump pyyaml from 5.4.1 to 6.0 in /perf-tests (#2097) @dependabot
• Bump kubernetes from 19.15.0a1 to 19.15.0b1 in /tests (#2087) @dependabot
• Bump cffi from 1.14.6 to 1.15.0 in /perf-tests (#2088) @dependabot
• Bump cffi from 1.14.6 to 1.15.0 in /tests (#2089) @dependabot
• Bump locust from 2.2.3 to 2.4.0 in /perf-tests (#2070) @dependabot
• Bump certifi from 2021.5.30 to 2021.10.8 in /perf-tests (#2071) @dependabot
• Bump certifi from 2021.5.30 to 2021.10.8 in /tests (#2072) @dependabot
• Update JWT library to golang-jwt/jwt (#2074) @lucacome
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.5.1 to 1.5.2 (#2080) @dependabot
• Bump github.com/aws/aws-sdk-go-v2/config from 1.8.2 to 1.8.3 (#2081) @dependabot
• Update packages for CVE-2021-37750 (#2073) @lucacome
• Use default python image, bump to 3.10 (#2068) @lucacome
• Bump grpcio-tools from 1.40.0 to 1.41.0 in /tests (#2016) @dependabot
• Bump pyopenssl from 20.0.1 to 21.0.0 in /tests (#2025) @dependabot
• Bump github.com/nginxinc/nginx-plus-go-client from 0.8.0 to 0.9.0 (#2026) @dependabot

Upgrade

• For NGINX, use the v2.1.0 image from our DockerHub, GitHub Container or Amazon ECR Public Gallery.
• For NGINX Plus, use the v2.1.0 image from the F5 Container registry or build your own image using the v2.1.0 source code.
• For Helm, use version 0.12.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v2.1.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v2.1.0/deployments/helm-chart
• Operator -- a compatible Operator version for this release will be published shortly.