From cc54bee9b88db2d8c3c8f75f662c8af3b7f549ae Mon Sep 17 00:00:00 2001
From: nginx-bot <68849795+nginx-bot@users.noreply.github.com>
Date: Wed, 6 Nov 2024 09:07:58 -0800
Subject: [PATCH] Release 3.7.1 (#6756)
---
.github/data/version.txt | 4 +--
README.md | 4 +--
charts/nginx-ingress/Chart.yaml | 8 ++---
charts/nginx-ingress/values-icp.yaml | 2 +-
charts/nginx-ingress/values-plus.yaml | 2 +-
charts/nginx-ingress/values.schema.json | 10 +++---
charts/nginx-ingress/values.yaml | 2 +-
deployments/daemon-set/nginx-ingress.yaml | 4 +--
.../daemon-set/nginx-plus-ingress.yaml | 4 +--
deployments/deployment/nginx-ingress.yaml | 4 +--
.../deployment/nginx-plus-ingress.yaml | 4 +--
.../service-insight/README.md | 4 +--
site/content/releases.md | 32 +++++++++++++++++++
site/content/technical-specifications.md | 8 ++---
site/layouts/shortcodes/nic-helm-version.html | 2 +-
.../shortcodes/nic-operator-version.html | 2 +-
site/layouts/shortcodes/nic-version.html | 2 +-
17 files changed, 65 insertions(+), 33 deletions(-)
diff --git a/.github/data/version.txt b/.github/data/version.txt
index c7de7c8366..4ad5af6304 100644
--- a/.github/data/version.txt
+++ b/.github/data/version.txt
@@ -1,2 +1,2 @@
-IC_VERSION=3.7.0
-HELM_CHART_VERSION=1.4.0
+IC_VERSION=3.7.1
+HELM_CHART_VERSION=1.4.1
diff --git a/README.md b/README.md
index 59c6079326..e3f59d84af 100644
--- a/README.md
+++ b/README.md
@@ -120,7 +120,7 @@ In the case of NGINX, the Ingress Controller is deployed in a pod along with the
We publish NGINX Ingress Controller releases on GitHub. See our [releases
page](https://github.com/nginxinc/kubernetes-ingress/releases).
-The latest stable release is [3.7.0](https://github.com/nginxinc/kubernetes-ingress/releases/tag/v3.7.0). For production
+The latest stable release is [3.7.1](https://github.com/nginxinc/kubernetes-ingress/releases/tag/v3.7.1). For production
use, we recommend that you choose the latest stable release.
The edge version is useful for experimenting with new features that are not yet published in a stable release. To use
@@ -140,7 +140,7 @@ your links to the correct versions:
| Version | Description | Image for NGINX | Image for NGINX Plus | Installation Manifests and Helm Chart | Documentation and Examples |
| ------- | ----------- | --------------- | -------------------- | ---------------------------------------| -------------------------- |
-| Latest stable release | For production use | Use the 3.7.0 images from [DockerHub](https://hub.docker.com/r/nginx/nginx-ingress/), [GitHub Container](https://github.com/nginxinc/kubernetes-ingress/pkgs/container/kubernetes-ingress), [Amazon ECR Public Gallery](https://gallery.ecr.aws/nginx/nginx-ingress) or [Quay.io](https://quay.io/repository/nginx/nginx-ingress) or [build your own image](https://docs.nginx.com/nginx-ingress-controller/installation/build-ingress-controller-image/). | Use the 3.7.0 images from the [F5 Container Registry](https://docs.nginx.com/nginx-ingress-controller/installation/pulling-ingress-controller-image/) or the [AWS Marketplace](https://aws.amazon.com/marketplace/search/?CREATOR=741df81b-dfdc-4d36-b8da-945ea66b522c&FULFILLMENT_OPTION_TYPE=CONTAINER&filters=CREATOR%2CFULFILLMENT_OPTION_TYPE) or [Build your own image](https://docs.nginx.com/nginx-ingress-controller/installation/build-nginx-ingress-controller/). | [Manifests](https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.0/deployments). [Helm chart](https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.0/charts/nginx-ingress). | [Documentation](https://docs.nginx.com/nginx-ingress-controller/). [Examples](https://docs.nginx.com/nginx-ingress-controller/configuration/configuration-examples/). |
+| Latest stable release | For production use | Use the 3.7.1 images from [DockerHub](https://hub.docker.com/r/nginx/nginx-ingress/), [GitHub Container](https://github.com/nginxinc/kubernetes-ingress/pkgs/container/kubernetes-ingress), [Amazon ECR Public Gallery](https://gallery.ecr.aws/nginx/nginx-ingress) or [Quay.io](https://quay.io/repository/nginx/nginx-ingress) or [build your own image](https://docs.nginx.com/nginx-ingress-controller/installation/build-ingress-controller-image/). | Use the 3.7.1 images from the [F5 Container Registry](https://docs.nginx.com/nginx-ingress-controller/installation/pulling-ingress-controller-image/) or the [AWS Marketplace](https://aws.amazon.com/marketplace/search/?CREATOR=741df81b-dfdc-4d36-b8da-945ea66b522c&FULFILLMENT_OPTION_TYPE=CONTAINER&filters=CREATOR%2CFULFILLMENT_OPTION_TYPE) or [Build your own image](https://docs.nginx.com/nginx-ingress-controller/installation/build-nginx-ingress-controller/). | [Manifests](https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/deployments). [Helm chart](https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/charts/nginx-ingress). | [Documentation](https://docs.nginx.com/nginx-ingress-controller/). [Examples](https://docs.nginx.com/nginx-ingress-controller/configuration/configuration-examples/). |
| Edge/Nightly | For testing and experimenting | Use the edge or nightly images from [DockerHub](https://hub.docker.com/r/nginx/nginx-ingress/), [GitHub Container](https://github.com/nginxinc/kubernetes-ingress/pkgs/container/kubernetes-ingress), [Amazon ECR Public Gallery](https://gallery.ecr.aws/nginx/nginx-ingress) or [Quay.io](https://quay.io/repository/nginx/nginx-ingress) or [build your own image](https://docs.nginx.com/nginx-ingress-controller/installation/build-nginx-ingress-controller/). | [Build your own image](https://docs.nginx.com/nginx-ingress-controller/installation/build-nginx-ingress-controller/). | [Manifests](https://github.com/nginxinc/kubernetes-ingress/tree/main/deployments). [Helm chart](https://github.com/nginxinc/kubernetes-ingress/tree/main/charts/nginx-ingress). | [Documentation](https://github.com/nginxinc/kubernetes-ingress/tree/main/site/content). [Examples](https://github.com/nginxinc/kubernetes-ingress/tree/main/examples). |
## SBOM (Software Bill of Materials)
diff --git a/charts/nginx-ingress/Chart.yaml b/charts/nginx-ingress/Chart.yaml
index 40556a208b..bf1933139a 100644
--- a/charts/nginx-ingress/Chart.yaml
+++ b/charts/nginx-ingress/Chart.yaml
@@ -1,14 +1,14 @@
apiVersion: v2
name: nginx-ingress
-version: 1.4.0
-appVersion: 3.7.0
+version: 1.4.1
+appVersion: 3.7.1
kubeVersion: ">= 1.23.0-0"
type: application
description: NGINX Ingress Controller
-icon: https://raw.githubusercontent.com/nginxinc/kubernetes-ingress/v3.7.0/charts/nginx-ingress/chart-icon.png
+icon: https://raw.githubusercontent.com/nginxinc/kubernetes-ingress/v3.7.1/charts/nginx-ingress/chart-icon.png
home: https://github.com/nginxinc/kubernetes-ingress
sources:
- - https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.0/charts/nginx-ingress
+ - https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.1/charts/nginx-ingress
keywords:
- ingress
- nginx
diff --git a/charts/nginx-ingress/values-icp.yaml b/charts/nginx-ingress/values-icp.yaml
index 2e88ae7781..d94b20ed02 100644
--- a/charts/nginx-ingress/values-icp.yaml
+++ b/charts/nginx-ingress/values-icp.yaml
@@ -4,7 +4,7 @@ controller:
nginxplus: true
image:
repository: mycluster.icp:8500/kube-system/nginx-plus-ingress
- tag: "3.7.0"
+ tag: "3.7.1"
nodeSelector:
beta.kubernetes.io/arch: "amd64"
proxy: true
diff --git a/charts/nginx-ingress/values-plus.yaml b/charts/nginx-ingress/values-plus.yaml
index f532a5f866..4971d5da56 100644
--- a/charts/nginx-ingress/values-plus.yaml
+++ b/charts/nginx-ingress/values-plus.yaml
@@ -3,4 +3,4 @@ controller:
nginxplus: true
image:
repository: nginx-plus-ingress
- tag: "3.7.0"
+ tag: "3.7.1"
diff --git a/charts/nginx-ingress/values.schema.json b/charts/nginx-ingress/values.schema.json
index 451e625b3d..5e932b6485 100644
--- a/charts/nginx-ingress/values.schema.json
+++ b/charts/nginx-ingress/values.schema.json
@@ -540,10 +540,10 @@
},
"tag": {
"type": "string",
- "default": "3.7.0",
+ "default": "3.7.1",
"title": "The tag of the Ingress Controller image",
"examples": [
- "3.7.0"
+ "3.7.1"
]
},
"digest": {
@@ -580,7 +580,7 @@
"examples": [
{
"repository": "nginx/nginx-ingress",
- "tag": "3.7.0",
+ "tag": "3.7.1",
"pullPolicy": "IfNotPresent"
}
]
@@ -1731,7 +1731,7 @@
"customPorts": [],
"image": {
"repository": "nginx/nginx-ingress",
- "tag": "3.7.0",
+ "tag": "3.7.1",
"digest": "",
"pullPolicy": "IfNotPresent"
},
@@ -2346,7 +2346,7 @@
"customPorts": [],
"image": {
"repository": "nginx/nginx-ingress",
- "tag": "3.7.0",
+ "tag": "3.7.1",
"digest": "",
"pullPolicy": "IfNotPresent"
},
diff --git a/charts/nginx-ingress/values.yaml b/charts/nginx-ingress/values.yaml
index cf0af022a3..7aca213d6e 100644
--- a/charts/nginx-ingress/values.yaml
+++ b/charts/nginx-ingress/values.yaml
@@ -134,7 +134,7 @@ controller:
repository: nginx/nginx-ingress
## The tag of the Ingress Controller image. If not specified the appVersion from Chart.yaml is used as a tag.
- # tag: "3.7.0"
+ # tag: "3.7.1"
## The digest of the Ingress Controller image.
## If digest is specified it has precedence over tag and will be used instead
# digest: "sha256:CHANGEME"
diff --git a/deployments/daemon-set/nginx-ingress.yaml b/deployments/daemon-set/nginx-ingress.yaml
index 62c673f8cb..95e4c1c261 100644
--- a/deployments/daemon-set/nginx-ingress.yaml
+++ b/deployments/daemon-set/nginx-ingress.yaml
@@ -32,7 +32,7 @@ spec:
# - name: nginx-log
# emptyDir: {}
containers:
- - image: nginx/nginx-ingress:3.7.0
+ - image: nginx/nginx-ingress:3.7.1
imagePullPolicy: IfNotPresent
name: nginx-ingress
ports:
@@ -95,7 +95,7 @@ spec:
#- -enable-prometheus-metrics
#- -global-configuration=$(POD_NAMESPACE)/nginx-configuration
# initContainers:
-# - image: nginx/nginx-ingress:3.7.0
+# - image: nginx/nginx-ingress:3.7.1
# imagePullPolicy: IfNotPresent
# name: init-nginx-ingress
# command: ['cp', '-vdR', '/etc/nginx/.', '/mnt/etc']
diff --git a/deployments/daemon-set/nginx-plus-ingress.yaml b/deployments/daemon-set/nginx-plus-ingress.yaml
index e564a95076..e5a63033f1 100644
--- a/deployments/daemon-set/nginx-plus-ingress.yaml
+++ b/deployments/daemon-set/nginx-plus-ingress.yaml
@@ -32,7 +32,7 @@ spec:
# - name: nginx-log
# emptyDir: {}
containers:
- - image: nginx-plus-ingress:3.7.0
+ - image: nginx-plus-ingress:3.7.1
imagePullPolicy: IfNotPresent
name: nginx-plus-ingress
ports:
@@ -98,7 +98,7 @@ spec:
#- -enable-prometheus-metrics
#- -global-configuration=$(POD_NAMESPACE)/nginx-configuration
# initContainers:
-# - image: nginx/nginx-ingress:3.7.0
+# - image: nginx/nginx-ingress:3.7.1
# imagePullPolicy: IfNotPresent
# name: init-nginx-ingress
# command: ['cp', '-vdR', '/etc/nginx/.', '/mnt/etc']
diff --git a/deployments/deployment/nginx-ingress.yaml b/deployments/deployment/nginx-ingress.yaml
index 845186780d..c2708186a2 100644
--- a/deployments/deployment/nginx-ingress.yaml
+++ b/deployments/deployment/nginx-ingress.yaml
@@ -33,7 +33,7 @@ spec:
# - name: nginx-log
# emptyDir: {}
containers:
- - image: nginx/nginx-ingress:3.7.0
+ - image: nginx/nginx-ingress:3.7.1
imagePullPolicy: IfNotPresent
name: nginx-ingress
ports:
@@ -96,7 +96,7 @@ spec:
#- -enable-prometheus-metrics
#- -global-configuration=$(POD_NAMESPACE)/nginx-configuration
# initContainers:
-# - image: nginx/nginx-ingress:3.7.0
+# - image: nginx/nginx-ingress:3.7.1
# imagePullPolicy: IfNotPresent
# name: init-nginx-ingress
# command: ['cp', '-vdR', '/etc/nginx/.', '/mnt/etc']
diff --git a/deployments/deployment/nginx-plus-ingress.yaml b/deployments/deployment/nginx-plus-ingress.yaml
index 030286397b..42e7b1dafd 100644
--- a/deployments/deployment/nginx-plus-ingress.yaml
+++ b/deployments/deployment/nginx-plus-ingress.yaml
@@ -33,7 +33,7 @@ spec:
# - name: nginx-log
# emptyDir: {}
containers:
- - image: nginx-plus-ingress:3.7.0
+ - image: nginx-plus-ingress:3.7.1
imagePullPolicy: IfNotPresent
name: nginx-plus-ingress
ports:
@@ -102,7 +102,7 @@ spec:
#- -enable-service-insight
#- -global-configuration=$(POD_NAMESPACE)/nginx-configuration
# initContainers:
-# - image: nginx/nginx-ingress:3.7.0
+# - image: nginx/nginx-ingress:3.7.1
# imagePullPolicy: IfNotPresent
# name: init-nginx-ingress
# command: ['cp', '-vdR', '/etc/nginx/.', '/mnt/etc']
diff --git a/examples/custom-resources/service-insight/README.md b/examples/custom-resources/service-insight/README.md
index 3ceb018759..84da0510d0 100644
--- a/examples/custom-resources/service-insight/README.md
+++ b/examples/custom-resources/service-insight/README.md
@@ -32,7 +32,7 @@ spec:
securityContext:
...
containers:
- - image: nginx-plus-ingress:3.7.0
+ - image: nginx-plus-ingress:3.7.1
imagePullPolicy: IfNotPresent
name: nginx-plus-ingress
ports:
@@ -321,7 +321,7 @@ spec:
securityContext:
...
containers:
- - image: nginx-plus-ingress:3.7.0
+ - image: nginx-plus-ingress:3.7.1
imagePullPolicy: IfNotPresent
name: nginx-plus-ingress
ports:
diff --git a/site/content/releases.md b/site/content/releases.md
index e4036b6440..acc802d5a5 100644
--- a/site/content/releases.md
+++ b/site/content/releases.md
@@ -36,6 +36,38 @@ If a resource of `kind: GlobalConfiguration`, `kind: Policy` or `kind: Transport
When `v4.0.0` is released, the release notes will contain the required upgrade steps to go from `v3.X.X` to `v4.X.X`
{{< /important >}}
+## 3.7.1
+
+06 Nov 2024
+
+### Fixes
+- [6735](https://github.com/nginxinc/kubernetes-ingress/pull/6735) Add nil check to apikey suppliedIn
+- [6761](https://github.com/nginxinc/kubernetes-ingress/pull/6761) Add OIDC fix for ID token nonce claim validation
+
+### Dependencies
+- [6545](https://github.com/nginxinc/kubernetes-ingress/pull/6545), [6560](https://github.com/nginxinc/kubernetes-ingress/pull/6560), [6560](https://github.com/nginxinc/kubernetes-ingress/pull/6560), [6619](https://github.com/nginxinc/kubernetes-ingress/pull/6619), [6640](https://github.com/nginxinc/kubernetes-ingress/pull/6640), [6664](https://github.com/nginxinc/kubernetes-ingress/pull/6664), [6686](https://github.com/nginxinc/kubernetes-ingress/pull/6686), [6703](https://github.com/nginxinc/kubernetes-ingress/pull/6703), [6720](https://github.com/nginxinc/kubernetes-ingress/pull/6720), [6755](https://github.com/nginxinc/kubernetes-ingress/pull/6755) & [6751](https://github.com/nginxinc/kubernetes-ingress/pull/6751) Bump the Docker dependencies
+- [6553](https://github.com/nginxinc/kubernetes-ingress/pull/6553), [6591](https://github.com/nginxinc/kubernetes-ingress/pull/6591), [6618](https://github.com/nginxinc/kubernetes-ingress/pull/6618), [6648](https://github.com/nginxinc/kubernetes-ingress/pull/6648), [6688](https://github.com/nginxinc/kubernetes-ingress/pull/6688), [6674](https://github.com/nginxinc/kubernetes-ingress/pull/6674), [6707](https://github.com/nginxinc/kubernetes-ingress/pull/6707), [6730](https://github.com/nginxinc/kubernetes-ingress/pull/6730) & [6751](https://github.com/nginxinc/kubernetes-ingress/pull/6751) Bump the go dependencies
+- [6570](https://github.com/nginxinc/kubernetes-ingress/pull/6570) & [6549](https://github.com/nginxinc/kubernetes-ingress/pull/6549) Bump the go version
+
+### Upgrade
+
+- For NGINX, use the 3.7.1 images from our
+[DockerHub](https://hub.docker.com/r/nginx/nginx-ingress/tags?page=1&ordering=last_updated&name=3.7.1),
+[GitHub Container](https://github.com/nginxinc/kubernetes-ingress/pkgs/container/kubernetes-ingress),
+[Amazon ECR Public Gallery](https://gallery.ecr.aws/nginx/nginx-ingress) or [Quay.io](https://quay.io/repository/nginx/nginx-ingress).
+- For NGINX Plus, use the 3.7.1 images from the F5 Container registry,
+the [AWS Marketplace](https://aws.amazon.com/marketplace/search/?CREATOR=741df81b-dfdc-4d36-b8da-945ea66b522c&FULFILLMENT_OPTION_TYPE=CONTAINER&filters=CREATOR%2CFULFILLMENT_OPTION_TYPE),
+the [GCP Marketplace](https://console.cloud.google.com/marketplace/browse?filter=partner:F5,%20Inc.&filter=solution-type:k8s&filter=category:networking)
+or build your own image using the 3.7.1 source code
+- For Helm, use version 1.4.1 of the chart.
+
+### Supported Platforms
+
+We will provide technical support for NGINX Ingress Controller on any Kubernetes platform that is currently supported by
+its provider and that passes the Kubernetes conformance tests. This release was fully tested on the following Kubernetes
+versions: 1.25-1.31.
+
+---
## 3.7.0
30 Sept 2024
diff --git a/site/content/technical-specifications.md b/site/content/technical-specifications.md
index e7bb2036a8..9a6682d590 100644
--- a/site/content/technical-specifications.md
+++ b/site/content/technical-specifications.md
@@ -28,7 +28,7 @@ We test NGINX Ingress Controller on a range of Kubernetes platforms for each rel
{{< bootstrap-table "table table-bordered table-striped table-responsive" >}}
| NIC Version | Supported Kubernetes Version | NIC Helm Chart Version | NIC Operator Version | NGINX / NGINX Plus version |
| --- | --- | --- | --- | --- |
-| {{< nic-version >}} | 1.25 - 1.31 | {{< nic-helm-version >}} | {{< nic-operator-version >}} | 1.27.1 / R32 P1 |
+| {{< nic-version >}} | 1.25 - 1.31 | {{< nic-helm-version >}} | {{< nic-operator-version >}} | 1.27.2 / R32 P1 |
| 3.6.2 | 1.25 - 1.31 | 1.3.2 | 2.3.2 | 1.27.1 / R32 P1 |
| 3.5.2 | 1.23 - 1.30 | 1.2.2 | 2.2.2 | 1.27.0 / R32 |
| 3.4.3 | 1.23 - 1.29 | 1.1.3 | 2.1.2 | 1.25.4 / R31 P1 |
@@ -48,13 +48,13 @@ We provide the following Docker images, which include NGINX or NGINX Plus bundle
### Images with NGINX
-_All images include NGINX 1.27.1._
+_All images include NGINX 1.27.2._
{{< bootstrap-table "table table-bordered table-responsive" >}}
|Name
| Base image
| Third-party modules
| DockerHub image | Architectures |
| ---| --- | --- | --- | --- |
-|Alpine-based image | ``nginx:1.27.1-alpine``,
based on on ``alpine:3.20`` | NGINX OpenTracing module
OpenTracing library
OpenTracing tracers for Jaeger
Zipkin and Datadog | ``nginx/nginx-ingress:{{< nic-version >}}-alpine`` | arm/v7
arm64
amd64
ppc64le
s390x |
-|Debian-based image | ``nginx:1.27.1``,
based on on ``debian:12-slim`` | NGINX OpenTracing module
OpenTracing library
OpenTracing tracers for Jaeger
Zipkin and Datadog | ``nginx/nginx-ingress:{{< nic-version >}}`` | arm/v7
arm64
amd64
ppc64le
s390x |
+|Alpine-based image | ``nginx:1.27.2-alpine``,
based on on ``alpine:3.20`` | NGINX OpenTracing module
OpenTracing library
OpenTracing tracers for Jaeger
Zipkin and Datadog | ``nginx/nginx-ingress:{{< nic-version >}}-alpine`` | arm/v7
arm64
amd64
ppc64le
s390x |
+|Debian-based image | ``nginx:1.27.2``,
based on on ``debian:12-slim`` | NGINX OpenTracing module
OpenTracing library
OpenTracing tracers for Jaeger
Zipkin and Datadog | ``nginx/nginx-ingress:{{< nic-version >}}`` | arm/v7
arm64
amd64
ppc64le
s390x |
|Ubi-based image | ``redhat/ubi9-minimal`` | | ``nginx/nginx-ingress:{{< nic-version >}}-ubi`` | arm64
amd64
ppc64le
s390x |
{{% /bootstrap-table %}}
diff --git a/site/layouts/shortcodes/nic-helm-version.html b/site/layouts/shortcodes/nic-helm-version.html
index e21e727f96..13175fdc43 100644
--- a/site/layouts/shortcodes/nic-helm-version.html
+++ b/site/layouts/shortcodes/nic-helm-version.html
@@ -1 +1 @@
-1.4.0
\ No newline at end of file
+1.4.1
\ No newline at end of file
diff --git a/site/layouts/shortcodes/nic-operator-version.html b/site/layouts/shortcodes/nic-operator-version.html
index 9183195ace..58073ef8d7 100644
--- a/site/layouts/shortcodes/nic-operator-version.html
+++ b/site/layouts/shortcodes/nic-operator-version.html
@@ -1 +1 @@
-2.4.0
\ No newline at end of file
+2.4.1
\ No newline at end of file
diff --git a/site/layouts/shortcodes/nic-version.html b/site/layouts/shortcodes/nic-version.html
index 240bba9069..5cdb444f3d 100644
--- a/site/layouts/shortcodes/nic-version.html
+++ b/site/layouts/shortcodes/nic-version.html
@@ -1 +1 @@
-3.7.0
\ No newline at end of file
+3.7.1
\ No newline at end of file