Connectivity

  • Added

    • Added CiliumNetworkPolicy for the CRD install job.

    Changed

    • The helm job that installs CRDs is not removed if the job fails.
  • Added

    • Add support for GCP workload identity for authentication.
  • Added

    • Templates: Add controller.admissionWebhooks.patch.labels. (#360)
    • Templates: Add controller.admissionWebhooks.annotations. (#362)
    • Webhook: Add labels & selectors. (#364)
    • Templates: Add controller.admissionWebhooks.existingPsp. (#365)
    • Webhook: Align values & functions. (#366)
      • Webhook: Rename & align NetworkPolicy.
      • Helpers: Add ingress-nginx.controller.fullname.
      • Webhook: Add controller.admissionWebhooks.extraEnvs.
      • Webhook: Add controller.admissionWebhooks.createSecretJob.resources.
      • Webhook: Add controller.admissionWebhooks.patchWebhookJob.resources.
      • Webhook: Add controller.admissionWebhooks.patch.securityContext.

    Changed

    • Helpers: Rename resource.default.name to ingress-nginx.fullname. (#356)
    • Repository: Rename master to main. (#357)
    • Helpers: Rename labels.common to ingress-nginx.labels. (#358)
    • Templates: Align hook annotations, namespaces & indention. (#359, #361)
    • Templates: Align ValidatingWebhookConfiguration. (#363)
    • Webhook: Align values & functions. (#366)
      • Webhook: Disable privilege escalation.
      • Webhook: Align image concatenation.
      • Webhook: Align values.yaml.

    Removed

    • Webhook: Align values & functions. (#366)
      • Webhook: Remove controller.admissionWebhooks.patch.backoffLimit.
        backoffLimit was set to the default value of 6 all the time anyway, so we remove it to ease future upstream alignments.
    • Revert ‘Add support to create internal Load Balancers on GCP.’. (#367)
  • Changed

    • Use CoreDNS as upstream in order to avoid double configuration for internal domains.
  • This version drops support for kubernetes versions below 1.22.0.

    Updates

    • Update kong/kubernetes-ingress-controller to 2.7.0. More information can be found in the Changelog entry of the kong kubernetes Ingress controller.
  • Added

    • Add support to create internal Load Balancers on GCP.

    Changed

    • Update controller container image to v1.4.0. (#353)

    Removed

    • Disable PodSecurityPolicy for Kubernetes >= v1.25. (#352)

    Important notes

    Please upgrade to any v2.18.x version before upgrading to this release or above since the controller image contained in there migrates your setup to the Lease API. Additionally the controller version included in this release deprecates some metric names and introduces others as a replacement. See this PR and the upstream docs for more details.

  • Changed

    • Update controller container image to v1.3.1. (#349)
  • Added

    • Validation for controller.service.externalTrafficPolicy and controller.service.internal.externalTrafficPolicy to only allow Local and Cluster. (#344)
  • Added

    • controller.service.loadBalancerSourceRanges & controller.service.internal.loadBalancerSourceRanges for configuring source IP address ranges which can access the ingress service.
  • Added

    • Service for scraping metrics from ingress controller

    Updates

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.