v3.3.0

What's Changed

🚀 Features

• Read Prometheus key/cert from memory by @jjngx in #4023
• Expose Location Zones metrics by @jjngx in #4080
• Add path-regex annotation for ingress by @jjngx in #4127
• Add support for path-regex annotation in Ingress Master-Minion by @jjngx in #4200
• Add command line argument for custom TLS Passthrough port by @haywoodsh in #4108
• Path-Regex annotation on master and minions are set independently by @jjngx in #4223
• Match file permissions for GID 0 as owner UID 101 by @sigv in #3962
• Add custom listener controls to VirtualServer by @shaun-nx in #4271

🐛 Bug Fixes

• Update JWT/JWKS policy validation by @jjngx in #4160
• Improve runtime batch reloads by @ciarams87 in #4371

📦 Helm Chart

• Clarify language about default TLS certificate on helm chart by @danielnginx in #4084
• Check if API is available in Helm Chart by @lucacome in #4070
• Add support for controller.selectorLabels by @hanyouqing in #3977
• Update Helm schema by @lucacome in #4150
• Add clusterIP to service if specified in values by @EutiziStefano in #4058
• Make containerPort and hostPort customizable by @lucacome in #4252
• Expose Prometheus metrics through a headless Service. by @shaun-nx in #4331
• Update helm values file to move controller.serviceMonitor to prometheus.serviceMonitor by @shaun-nx in #4351
• Allow installing IC without creating a new ingress class by @haywoodsh in #4333
• Release 3.3.0 by @lucacome in #4423

🧪 Tests

• Check for ready endpoints by @jjngx in #3983
• Remove obsolete test placeholder by @jjngx in #4072
• disable ap-waf tests by @vepatel in #4098
• Bump balabit/syslog-ng and coredns/coredns by @lucacome in #4136
• Update AP tests and remove redundant ones by @vepatel in #4177
• Remove GitLab related files by @lucacome in #4175
• Bump kindest/node from v1.27.3 to v1.28.0 in /tests by @dependabot in #4250
• Bump test containers to 0.2.1 by @lucacome in #4227
• Add automated tests for custom vs listeners by @haywoodsh in #4311
• Dos access log dest by @pasmant in #4187
• fix: typo by @testwill in #4369

🔨 Maintenance

• Use correct product ID in AWS action by @lucacome in #4063
• Strip trailing whitespace from TARGET variable by @ciarams87 in #4079
• Add docs dependency to dependabot config by @lucacome in #4113
• Update dependabot config after refactor by @lucacome in #4105
• Add strip to all Makefile variables by @lucacome in #4112
• Add permissions to all workflows by @lucacome in #4134
• Add linting for markdown files by @lucacome in #4133
• Fix permissions in Helm job and Docker update by @lucacome in #4145
• Move configs to central repo by @lucacome in #4146
• Remove duplicated logic from templates by @jjngx in #4176
• Add mend workflow by @lucacome in #4158
• Sign checksum with cosign by @lucacome in #4181
• Add docs team as codeowners by @lucacome in #4182
• Update workflows by @lucacome in #4180
• Add workflow to update docs/go.mod by @lucacome in #4228
• Add gotype comments in templates to map types between go template and go files by @haywoodsh in #4155
• Update Go docs for path-regex by @jjngx in #4248
• Bump Go to 1.21 by @lucacome in #4230
• Update example spec comment for GlobalConfiguration in helm values.yaml by @shaun-nx in #4285
• Update CodeQL workflow by @lucacome in #4374
• Update go version in go.mod by @lucacome in #4373
• Update OpenSSF scorecard workflow by @lucacome in #4375
• Update goreleaser permissions by @lucacome in #4379
• Update GoReleaser config by @lucacome in #4411
• Trigger Operator Sync PR on release by @lucacome in #4413
• Add RH certification step by @lucacome in #4412

📝 Documentation

• Small Update to troubleshooting document by @jasonwilliams14 in #3346
• Update manifest installation guide, fix theme highlighting & spec table by @ADubhlaoich in #4066
• Update library paths and requirements file by @vepatel in #4085
• Update installation-with-manifests.md by @jputrino in #4090
• Add explicit note to that docs apply to latest release by @ADubhlaoich in #4093
• NGINX Ingress with Linkerd virtualserver example by @jasonwilliams14 in #4135
• Upgrade nginx-hugo-theme version to support newer Hugo releases by @jputrino in #4149
• Add Hugo mod tidy by @lucacome in #4174
• Change links on NGINX Plus introduction page to relative links by @ADubhlaoich in #4212
• fix: bump hugo theme to 0.35.0 by @Jcahilltorre in #4225
• Add examples for master-minion path-regex by @jjngx in #4235
• Update path-regex doc by @jjngx in #4247
• Update JWT install guide by @jasonwilliams14 in #3884
• Release 3.2.1 (#4264) by @lucacome in #4265
• Add howto doc for path-regex annotations by @jjngx in #4266
• Docs/upgrade using helm by @vepatel in #4272
• Add tutorial doc for VirtualServer configuration with Custom Listener Ports by @shaun-nx in #4294
• fixes commit SHA in docs/go.sum by @jputrino in #4315
• fix: correcting various typos and casing issues by @aknot242 in #4308
• NGINX Dynamic module with NGINX Ingress controller by @jasonwilliams14 in #3992
• Update helm docs with serviceNameOverride by @vepatel in #4334
• feat: Hugo theme bump by @Jcahilltorre in #4345
• Link to proper NGINX Ingress Operator by @sigv in #4348
• Fixed typo in installation / Helm Chart by @fabriziofiorucci in #4335
• Update existing prometheus documentation to include configuration options for ServiceMonitor by @shaun-nx in #4414

⬆️ Dependencies

115 changes

• Bump kind versions in nightly by @lucacome in #4056
• Bump nginxinc/aws-marketplace-publish from 0.1.0 to 0.1.1 by @dependabot in #4064
• Bump docker/setup-buildx-action from 2.7.0 to 2.8.0 by @dependabot in #4068
• Bump charset-normalizer from 3.1.0 to 3.2.0 in /tests by @dependabot in #4087
• Bump sigs.k8s.io/controller-tools from 0.12.0 to 0.12.1 by @dependabot in #4101
• Bump google-auth from 2.21.0 to 2.22.0 in /tests by @dependabot in #4104
• Bump github.com/go-chi/chi/v5 from 5.0.8 to 5.0.10 by @dependabot in #4100
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4075
• Bump github/codeql-action from 2.20.1 to 2.20.3 by @dependabot in #4081
• Bump docker/setup-buildx-action from 2.8.0 to 2.9.1 by @dependabot in #4096
• Bump mock from 5.0.2 to 5.1.0 in /tests by @dependabot in #4102
• Bump cryptography from 41.0.1 to 41.0.2 in /tests by @dependabot in #4103
• Bump protobuf from 4.23.3 to 4.23.4 in /tests by @dependabot in #4086
• Bump github/codeql-action from 2.20.3 to 2.20.4 by @dependabot in #4109
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.14.13 to 1.14.14 by @dependabot in #4110
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.27 to 1.18.28 by @dependabot in #4111
• Bump kubernetes from 26.1.0 to 27.2.0 in /tests by @dependabot in #4122
• Bump nginxinc/aws-marketplace-publish from 0.1.1 to 0.1.2 by @dependabot in #4119
• Bump lucacome/draft-release from 0.2.1 to 0.2.2 by @dependabot in #4120
• Bump pyyaml from 6.0 to 6.0.1 in /tests by @dependabot in #4121
• Bump k8s.io/client-go from 0.27.3 to 0.27.4 by @dependabot in #4128
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4123
• Bump k8s.io/code-generator from 0.27.3 to 0.27.4 by @dependabot in #4129
• Bump github/codeql-action from 2.20.4 to 2.21.0 by @dependabot in #4126
• Bump certifi from 2023.5.7 to 2023.7.22 in /tests by @dependabot in #4144
• Bump grpcio from 1.56.0 to 1.56.2 in /tests by @dependabot in #4140
• Bump grpcio-tools from 1.56.0 to 1.56.2 in /tests by @dependabot in #4142
• Bump more-itertools from 9.1.0 to 10.0.0 in /tests by @dependabot in #4141
• Bump github.com/cert-manager/cert-manager from 1.12.2 to 1.12.3 by @dependabot in #4156
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4166
• Bump github/codeql-action from 2.21.0 to 2.21.2 by @dependabot in #4162
• Bump pyparsing from 3.1.0 to 3.1.1 in /tests by @dependabot in #4165
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.28 to 1.18.30 by @dependabot in #4164
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.14.14 to 1.15.1 by @dependabot in #4171
• Bump cryptography from 41.0.2 to 41.0.3 in /tests by @dependabot in #4172
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.30 to 1.18.32 by @dependabot in #4170
• Bump more-itertools from 10.0.0 to 10.1.0 in /tests by @dependabot in #4185
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.32 to 1.18.33 by @dependabot in #4191
• Bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in #4193
• Bump github/codeql-action from 2.21.2 to 2.21.3 by @dependabot in #4192
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.15.1 to 1.15.2 by @dependabot in #4190
• Bump goreleaser/goreleaser-action from 4.3.0 to 4.4.0 by @dependabot in #4213
• Bump forcediphttpsadapter from 1.0.2 to 1.1.0 in /tests by @dependabot in #4219
• Bump actions/dependency-review-action from 3.0.6 to 3.0.7 by @dependabot in #4207
• Bump protobuf from 4.23.4 to 4.24.0 in /tests by @dependabot in #4220
• Bump github/codeql-action from 2.21.3 to 2.21.4 by @dependabot in #4222
• Bump grpcio from 1.56.2 to 1.57.0 in /tests by @dependabot in #4221
• Bump grpcio-tools from 1.56.2 to 1.57.0 in /tests by @dependabot in #4218
• Bump golang from 1.20-alpine to 1.21-alpine in /build by @dependabot in #4229
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4233
• Bump actions/dependency-review-action from 3.0.7 to 3.0.8 by @dependabot in #4238
• Bump NGINX Plus to R30 by @lucacome in #4236
• Bump nginx from 1.25.1-alpine to 1.25.2-alpine in /build by @dependabot in #4241
• Bump nginxcontrib/nginx from 1.25.1-ubi to 1.25.2-ubi in /build by @dependabot in #4242
• Bump opentracing/nginx-opentracing from nginx-1.25.1 to nginx-1.25.2 in /build by @dependabot in #4256
• Fix CVEs in UBI NAP images by @lucacome in #4257
• Bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @dependabot in #4239
• Bump k8s.io/client-go from 0.27.4 to 0.28.0 by @dependabot in #4243
• Bump k8s.io/code-generator from 0.27.4 to 0.28.0 by @dependabot in #4244
• Bump sigs.k8s.io/controller-tools from 0.12.1 to 0.13.0 by @dependabot in #4255
• Bump protobuf from 4.24.0 to 4.24.1 in /tests by @dependabot in #4275
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.33 to 1.18.35 by @dependabot in #4274
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.15.2 to 1.15.5 by @dependabot in #4277
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4280
• Bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #4292
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4303
• Bump aws-actions/configure-aws-credentials from 2.2.0 to 3.0.1 by @dependabot in #4296
• Bump websocket-client from 1.6.1 to 1.6.2 in /tests by @dependabot in #4298
• Bump github/codeql-action from 2.21.4 to 2.21.5 by @dependabot in #4305
• Bump docker/setup-buildx-action from 2.9.1 to 2.10.0 by @dependabot in #4301
• Bump github.com/nginxinc/nginx-hugo-theme from 0.35.0 to 0.37.0 in /docs by @dependabot in #4300
• Bump protobuf from 4.24.1 to 4.24.2 in /tests by @dependabot in #4297
• Revert "enable use of CRDs imported as modules (#4152)" by @vepatel in #4327
• Bump pluggy from 1.2.0 to 1.3.0 in /tests by @dependabot in #4299
• Bump DavidAnson/markdownlint-cli2-action from 11.0.0 to 12.0.0 by @dependabot in #4309
• Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #4318
• Bump aquasecurity/trivy-action from 0.11.2 to 0.12.0 by @dependabot in #4319
• Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 by @dependabot in #4320
• Bump goreleaser/goreleaser-action from 4.4.0 to 5.0.0 by @dependabot in #4346
• Bump docker/setup-qemu-action from 2.2.0 to 3.0.0 by @dependabot in #4353
• Bump actions/dependency-review-action from 3.0.8 to 3.1.0 by @dependabot in #4356
• Bump github/codeql-action from 2.21.5 to 2.21.7 by @dependabot in #4359
• Bump docker/setup-buildx-action from 2.10.0 to 3.0.0 by @dependabot in #4357
• Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #4360
• Bump actions/cache from 3.3.1 to 3.3.2 by @dependabot in #4354
• Bump docker/metadata-action from 4.6.0 to 5.0.0 by @dependabot in #4363
• Bump docker/login-action from 2.2.0 to 3.0.0 by @dependabot in #4358
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4344
• Bump docker/build-push-action from 4.1.1 to 5.0.0 by @dependabot in #4364
• Bump aws-actions/configure-aws-credentials from 3.0.1 to 4.0.0 by @dependabot in #4361
• Bump reviewdog/action-actionlint from 1.37.1 to 1.38.0 by @dependabot in #4362
• Bump pytest from 7.4.0 to 7.4.2 in /tests by @dependabot in #4339
• Bump websocket-client from 1.6.2 to 1.6.3 in /tests by @dependabot in #4365
• Bump protobuf from 4.24.2 to 4.24.3 in /tests by @dependabot in #4366
• Bump google-auth from 2.22.0 to 2.23.0 in /tests by @dependabot in #4367
• Bump kubernetes from 27.2.0 to 28.1.0 in /tests by @dependabot in #4372
• Bump nginxinc/aws-marketplace-publish from 0.1.2 to 1.0.0 by @dependabot in #4376
• Bump lucacome/draft-release from 0.2.2 to 1.0.0 by @dependabot in #4377
• Bump reviewdog/action-actionlint from 1.38.0 to 1.39.0 by @dependabot in #4378
• Bump github.com/cert-manager/cert-manager from 1.12.3 to 1.13.0 by @dependabot in #4381
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.35 to 1.18.40 by @dependabot in #4385
• Bump k8s.io/client-go from 0.28.1 to 0.28.2 by @dependabot in #4386
• Bump k8s.io/code-generator from 0.28.0 to 0.28.2 by @dependabot in #4384
• Bump github.com/nginxinc/nginx-plus-go-client from 0.10.0 to 0.11.0 by @dependabot in #4387
• Bump github/codeql-action from 2.21.7 to 2.21.8 by @dependabot in #4389
• Bump github.com/aws/aws-sdk-go-v2/service/marketplacemetering from 1.15.5 to 1.16.0 by @dependabot in #4388
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4380
• Bump DavidAnson/markdownlint-cli2-action from 12.0.0 to 13.0.0 by @dependabot in #4399
• Bump cryptography from 41.0.3 to 41.0.4 in /tests by @dependabot in #4402
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.40 to 1.18.41 by @dependabot in #4410
• Bump github.com/nginxinc/nginx-plus-go-client from 0.11.0 to 1.0.0 by @dependabot in #4400
• Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #4420
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.41 to 1.18.42 by @dependabot in #4421
• Update packages for CVEs in NAP by @lucacome in #4424
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #4426

New Contributors

• @danielnginx made their first contribution in #4084
• @hanyouqing made their first contribution in #3977
• @EutiziStefano made their first contribution in #4058
• @9bany made their first contribution in #4152
• @fabriziofiorucci made their first contribution in #4335
• @testwill made their first contribution in #4369

Full Changelog: v3.2.1...v3.3.0

Upgrade

• For NGINX, use the v3.3.0 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.3.0 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.3.0 source code.
• For Helm, use version 1.0.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.3.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.3.0/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator