Connectivity
Changed
- Install PSP resource based on values for PSP deprecation.
- Add PolicyExceptions for PSS compliance.
- Replace build pipeline with ABS.
- Replace testing pipeline with ATS basic test.
Changed
- Make App compliant with PSS policies (#234):
- Set seccompProfile to
RuntimeDefault. - Fix capabilities typo.
- Remove
NET_BIND_SERVICEcapabilities. - Set
runAsNonRootas true.
- Set seccompProfile to
- Make App compliant with PSS policies (#234):
Changed
- Make CRD install job compliant with PSS (#309).
Changed
- Make deployment compliant with PSS (#307).
Changed
- Replace condition for PSP CR installation.
Fixed
- Remove
fallthroughfor reverse zones from kubernetes plugin.
- Remove
This is the first public stable release of our new
ingress-nginxchart. If you are currently usingv2.x.x, this release includes breaking changes. We set up a migration guide to make the upgrade as smooth as possible. Notable changes requiring your attention and/or manual intervention, like renaming, deprecation or removal of values, have been highlighted below. Even though we highly recommend to upgrade to this and future releases,v2.x.xwill continue to receive bugfixes as long as possible. All feedback regarding this release, its changes, or our migration guide is very welcome!Added
- Service: Align features from external service to internal one. (#467)
- Service: Add
controller.service.internal.ports&controller.service.internal.targetPorts. (#469) - PDB: Add
controller.annotations. (#481) - KEDA: Add
fallback. (#497) - OpenTelemetry: Add distroless
init_module. (#498) - Service: Add
controller.service.loadBalancerClass. (#503)
NOTE: The load balancer class of existing services can not be changed. The app deployment might fail when defining this for already installed app instances. - Deployment: Ignore
replicaCountwith KEDA enabled. (#513) - Service: Template annotations. (#514)
- Deployment/DaemonSet: Add
controller.hostAliases. (#521)
Changed
- Helpers: Align labels to upstream. (#450)
- Values: Align CPU & memory requests to actual needs. (#453)
NOTE: This reduces the default resource requests. Please review & configure them to your actual needs. - Values: Deprecate
configmap, usecontroller.configinstead. (#463)
NOTE: This is part of our alignment to upstream. Usecontroller.configinstead. - Chart: Rename to
ingress-nginx. (#464) - HPA: Align to upstream. (#465)
- PDB: Improve checks. (#487)
- Images: Update OpenTelemetry & kube-webhook-certgen image. (#488)
- Image: Update to
v1.8.0. (#489) - HPA: Partially revert #465. (#493)
- Metrics: Use
ServiceMonitor. (#494) - Image: Update to
v1.8.1. (#505) - Values: Update docs about
controller.enableTopologyAwareRouting. (#520) - OpenTelemetry: Update image to
v20230721-3e2062ee5. (#522) - ServiceMonitor: Explicitly set namespace. (#523)
Removed
- Service: Remove
controller.service.suffix&controller.service.internal.suffix. (#448)
NOTE: This is part of our alignment to upstream. There is no replacement for this key. - Params: Align to upstream. (#452)
- Params: Remove
controller.annotationsPrefix.
NOTE: This is part of our alignment to upstream. Usecontroller.extraArgsinstead. - Params: Remove
controller.defaultSSLCertificate.
NOTE: This is part of our alignment to upstream. Usecontroller.extraArgsinstead. - Params: Remove
controller.enableSSLChainCompletion.
NOTE: This is part of our alignment to upstream. Usecontroller.extraArgsinstead. - Params: Remove
controller.updateIngressStatus.
NOTE: This is part of our alignment to upstream. Usecontroller.extraArgsinstead.
- Params: Remove
- Service: Remove default values for
controller.service.nodePorts&controller.service.internal.nodePorts. (#461)
NOTE: If you are running on our KVM product, please make sure to manually set those keys to their prior values. - Params: Remove
controller.disableExternalNameForwarding. (#462)
NOTE: This is part of our alignment to upstream. Usecontroller.extraArgsinstead.