v0.5.1

New in NGINX Ingress Operator v0.5.1

🔨 Maintenance

• Update Operator SDK to v1.18.0 (#205) @lucacome
• Increase resource limits in manager (#210) @lucacome
• Update Operator SDK to v1.16.0 (#198) @lucacome
• Add missing metadata in the bundle, helper script for certification (#195) @lucacome
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#188) @nginx-bot

⬆️ Dependencies

• Update packages for CVE-2022-24407 (#209) @lucacome
• Bump golangci/golangci-lint-action from 2 to 3 (#207) @dependabot
• Bump k8s.io/client-go from 0.23.3 to 0.23.4 (#204) @dependabot
• Bump aquasecurity/trivy-action from 0.2.1 to 0.2.2 (#203) @dependabot
• Bump github.com/onsi/gomega from 1.18.0 to 1.18.1 (#202) @dependabot
• Bump k8s.io/client-go from 0.23.1 to 0.23.3 (#201) @dependabot
• Bump github.com/onsi/gomega from 1.17.0 to 1.18.0 (#197) @dependabot
• Bump github.com/go-logr/logr from 1.2.0 to 1.2.2 (#181) @dependabot
• Bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#196) @dependabot
• Update Go to 1.17 (#200) @lucacome

Compatibility

• NGINX Ingress Controller 2.1.1
• Openshift 4.6 or newer.

v0.5.0

New in NGINX Ingress Operator v0.5.0

🚀 Features

• Upload Docker images to ghcr.io (#194) @lucacome
• Add builds for arm64, s390x and ppc64le (#193) @lucacome
• Adding extra annotations to service (#150) @matthewkrupnik
• Add support for App Protect DoS (#189) @lucacome
• Add support for watching namespaces (#178) @lucacome

🐛 Bug Fixes

• fix for CVE-2021-42574 (#184) @ciarams87

📝 Documentation

• Release 0.5.0 (#192) @lucacome
• Add support for App Protect DoS (#189) @lucacome

🔨 Maintenance

• Release 0.5.0 (#192) @lucacome
• Update Dockerfile and CI (#191) @lucacome
• Use concurrency groups to cancel running workflows (#187) @lucacome
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#182) @nginx-bot
• Update Operator SDK to v1.15.0 (#179) @lucacome
• Add Trivy scan (#170) @lucacome
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#171) @nginx-bot
• Update Dockerfile location in dependabot config (#168) @lucacome
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#166) @nginx-bot
• Increase time before issues/PRs become stale (#164) @lucacome

⬆️ Dependencies

• Bump aquasecurity/trivy-action from 0.2.0 to 0.2.1 (#190) @dependabot
• Update Operator SDK to v1.15.0 (#179) @lucacome
• Bump aquasecurity/trivy-action from 0.1.0 to 0.2.0 (#175) @dependabot
• Bump github.com/onsi/gomega from 1.16.0 to 1.17.0 (#167) @dependabot
• Bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5 (#165) @dependabot

Compatibility

• NGINX Ingress Controller 2.1.0
• Openshift 4.6 or newer.

v0.4.0

New in NGINX Ingress Operator v0.4.0

🚀 Features

• Replace v1beta1 with v1 and remove uses of flag 'use-ingress-class (#151) @soneillf5

🐛 Bug Fixes

• Add vars to the needs list for release job (#162) @ciarams87
• 🐞 fix(controller):update deployment or daemonset error (#158) @sunlintong

📝 Documentation

• Release 0.4.0 (#159) (#161) @ciarams87
• Update manual installation docs to include tag checkout (#157) @ciarams87
• Replace v1beta1 with v1 and remove uses of flag 'use-ingress-class (#151) @soneillf5
• Update Openshift Installation docs (#142) @ciarams87
• Add OLM upgrade instructions (#141) @ciarams87

🔨 Maintenance

• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#156) @nginx-bot
• Update Operator SDK to v1.11.0 (#153) @lucacome
• Update CI workflow to use right variables and GHA cache (#154) @lucacome
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#149) @nginx-bot
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#145) @nginx-bot

⬆️ Dependencies

• Bump github.com/onsi/gomega from 1.15.0 to 1.16.0 (#155) @dependabot
• Update Operator SDK to v1.11.0 (#153) @lucacome
• Bump github.com/onsi/gomega from 1.14.0 to 1.15.0 (#148) @dependabot
• Bump k8s.io/client-go from 0.20.4 to 0.20.9 (#144) @dependabot
• Bump actions/stale from 3 to 4 (#143) @dependabot
• Bump github.com/onsi/gomega from 1.13.0 to 1.14.0 (#136) @dependabot

Compatibility

• NGINX Ingress Controller 2.0.0
• Openshift 4.6 or newer.

v0.3.0

New in NGINX Ingress Operator v0.3.0

🚀 Features

• Add tls secret option (#131) @soneillf5
• Add default name to IngressClass and tidy SCC handling (#130) @soneillf5
• Update to Operator SDK 1.8.0 (#109) @lucacome

🐛 Bug Fixes

• Fix Dockerfile path (#138) @ciarams87
• Make spec.Prometheus.secret field optional (#133) @pleshakov
• Increase resource limits for controller-manager container (#129) @ciarams87
• Fix go.sum (#120) @lucacome

📝 Documentation

• Release 0.3.0 (#137) @ciarams87
• Make spec.Prometheus.secret field optional (#133) @pleshakov
• Add tls secret option (#131) @soneillf5
• Update badge for Fossa (#101) @lucacome

🔨 Maintenance

• Add bundle target for OpenShift (#135) @lucacome
• Add revive linter with recommended config (#127) @lucacome
• chore: support deploying to Openshift and add gitlab pipeline (#121) @ciarams87
• Add more linters (#125) @lucacome
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#126) @nginx-bot
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#115) @nginx-bot
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#113) @nginx-bot
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#107) @nginx-bot
• Add workflow to push README to Docker Hub (#108) @lucacome
• 🔄 Synced file(s) with nginxinc/kubernetes-ingress (#104) @nginx-bot
• Update badge for Fossa (#101) @lucacome

⬆️ Dependencies

• chore: support deploying to Openshift and add gitlab pipeline (#121) @ciarams87
• Fix go.sum (#120) @lucacome
• Bump github.com/onsi/gomega from 1.10.2 to 1.13.0 (#118) @dependabot
• Bump github.com/google/go-cmp from 0.5.5 to 0.5.6 (#117) @dependabot
• Bump github.com/onsi/ginkgo from 1.14.1 to 1.16.4 (#119) @dependabot
• Update to Operator SDK 1.8.0 (#109) @lucacome
• Bump actions/cache from 2.1.5 to 2.1.6 (#112) @dependabot

Compatibility

• NGINX Ingress Controller 1.12.0
• Openshift 4.5 or newer.

Upgrade instructions

Please see the upgrade docs here

v0.2.0

New in NGINX Ingress Operator v0.2.0

🐛 Bug Fixes

• Fix updating ClusterRoleBinding on NIC deletion (#91) @pleshakov
• Fix leader election for IC pods (#90) @pleshakov

📝 Documentation

• Update for release 0.2.0 (#93) @ciarams87
• Add workflow for Fossa (#99) @lucacome
• Document the GlobalConfig resource as a TransportServer pre-requisite (#92) @soneillf5
• Fix leader election for IC pods (#90) @pleshakov
• Update docs (#82) @pleshakov
• Fix upgrade notes for 0.1.0 release (#77) @Dean-Coakley

🔨 Maintenance

• Remove Go version from CI, add trimpath and ldflags (#96) @lucacome
• Move dependencies into separate category (#97) @lucacome
• Add workflow for Fossa (#99) @lucacome
• Create codeql-analysis.yml (#98) @lucacome
• Update CRDs and RBAC for KIC 1.11 (#83) @ciarams87
• Add GitHub workflow to check for stale PRs and issues (#79) @lucacome
• Remove unused labels (#75) @lucacome

⬆️ Dependencies

• Bump actions/cache from v2.1.4 to v2.1.5 (#100) @dependabot
• Add golangci-lint and operator-sdk as dependencies (#95) @lucacome
• Bump golangci/golangci-lint-action from v2.5.1 to v2.5.2 (#94) @dependabot
• Update Go version to 1.16 (#80) @lucacome

Known Issues

• The Operator doesn't automatically remove IngressClasses created by #29. Issue is tracked in #88

Compatibility

• NGINX Ingress Controller 1.11.x
• Openshift 4.5 or newer.

v0.1.0

New in NGINX Ingress Operator v0.1.0

🚀 Features

• Add AppProtect User Defined Signatures support (#55) @Dean-Coakley
• Graduate Policies. Add enablePreviewPolicy flag support. (#56) @Dean-Coakley
• Update secret type of default secret to TLS (#39) @pleshakov

🐛 Bug Fixes

• Fix enableCRDs default to be true (#76) @Dean-Coakley
• Fix RBAC to be able to watch for AppProtect UDS changes (#74) @Dean-Coakley
• Fix replicas and service to be optional fields (#71) @Dean-Coakley
• Make enableCRDs optional (#70) @Dean-Coakley
• Fix Service to be an optional field. Add support for updating ExtraLabels. (#66) @Dean-Coakley
• Fix SCC resource to only affect KIC pods (#65) @Dean-Coakley

📝 Documentation

• Release 0.1.0 (#72) @Dean-Coakley
• Update IC compatibility in changelog (#54) @pleshakov

🔨 Maintenance

• Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 (#73) @dependabot
• Bump golangci/golangci-lint-action from v2.4.0 to v2.5.1 (#67) @dependabot
• Add release-drafter (#64) @lucacome
• Change dependabot interval to weekly (#63) @lucacome
• Bump actions/cache from v2 to v2.1.4 (#53) @dependabot
• Bump golangci/golangci-lint-action from v2 to v2.4.0 (#59) @dependabot
• Bump github.com/google/go-cmp from 0.4.0 to 0.5.4 (#49) @dependabot
• Add dependabot (#45) @lucacome
• Update CRDs, CSVs and Makefile (#36) @lucacome

Known Issues:

The Operator doesn't automatically remove IngressClasses created by #29. Issue is tracked in #88

Compatibility

• NGINX Ingress Controller 1.10.x
• Openshift 4.5 or newer.

Upgrade Instructions:

1. Remove the existing Policy CRD: kubectl delete crd policies.k8s.nginx.org
   Please note that deletion of the policies.k8s.nginx.org CRD will result in all instances of that CRD being deleted too. Ensure to back up any important Custom Resource instances first!
2. Delete the existing SCC: kubectl delete scc nginx-ingress-scc
3. Upgrade the operator to version 0.1.0.
4. If the defaultSecret field is not set in your nginxingresscontrollers.k8s.nginx.org resource (or resources):
   1. Remove the generated default secret. For example: kubectl delete secret -n my-nginx-ingress my-nginx-ingress-controller
   2. Wait until the operator regenerates the secret. The old secret was of the type Opaque. The new secret will be of the type kubernetes.io/tls.
5. Alternatively, if the defaultSecret is set to some secret, make sure it is of the type kubernetes.io/tls. If not, recreate the secret with the type kubernetes.io/tls.
6. If the wildcardTLS is set to some secret, make sure it is of the type kubernetes.io/tls. If not, recreate the secret with the type kubernetes.io/tls.
7. Ensure that the TLS secrets referenced by Ingress, VirtualServer and Policy resources are of the type kubernetes.io/tls, JWT secrets are of the type nginx.org/jwt and CA secrets are of the type nginx.org/ca. To avoid potential disruption of client traffic, instead of recreating the secrets, create new secrets with the correct type and update the Ingress, VirtualServer and Policy resources to use the new secrets.
8. Update any existing instances of the nginxingresscontrollers.k8s.nginx.org Custom Resource to use an NGINX Ingress Controller 1.10.x image.

Note: Steps 4-8 are required because Version 1.10.0 of the Ingress Controller added a requirement for secrets to be one of the following types: kubernetes.io/tls for TLS secrets; nginx.org/jwk for JWK secrets; or nginx.org/ca for CA secrets. Please see the section UPDATING SECRETS in https://docs.nginx.com/nginx-ingress-controller/releases/#nginx-ingress-controller-1-10-0 for more details.

NGINX Ingress Operator 0.0.7

FEATURES:

• 29 Add IngressClass support.
• 26 Add mTLS policy support.
• 25 Add JWT policy support.
• 21 Add latency metrics support.
• 18 Add support for policies in VS routes and VSR subroutes. Add RateLimit policy support

FIXES:

• 31 Add Status update for VS/VSR to RBAC.

KNOWN ISSUES:

• The Operator doesn't automatically remove IngressClasses created by 29

COMPATIBILITY:

• NGINX Ingress Controller 1.9.x.
• Openshift 4.5 or newer.

NGINX Ingress Operator 0.0.6

FEATURES:

• 13 Add support for App Protect.
• 11 Add enableSnippets cli argument support.

IMPROVEMENTS:

• 15 Downgrade operator-sdk to 0.17.
• 14 Add KIC supported versions to README.
• 12 Make operator install KIC CRDs from manifests.
• 10 Update operator-sdk to 0.18.
• 8 Update go to 1.14.
• 7 Update makefile to include all manifests.

COMPATIBILITY:

• NGINX Ingress Controller 1.8.x.
• Openshift 4.3 or newer.

NGINX Ingress Operator 0.0.4

FEATURES:

• 4 Add new CRDs for NGINX Ingress Controller 1.7.0
• 5 Make NGINX Ingress Operator RedHat certified. Learn more about certified operators for Openshift here.

COMPATIBILITY:

• NGINX Ingress Controller 1.7.x.
• Openshift 4.3 or newer.