Connectivity

    • Sync with upstream - v1.5.0
    • Bump Kong version - v2.0.4
    • Bump Kong Ingress Controller version - v0.8.1
  • Changed

    • Make forward options optional.
  • Changed

    • Make NGINX IC Service externalTrafficPolicy configurable and default to Local.
  • Changed

    • Restrict PodSecurityPolicy volumes to only those required (removes wildcard).
    • Tune net.ipv4.ip_local_port_range to 1024 65535 as a safe sysctl.
    • Tune net.core.somaxconn to 32768 via an initContainer with privilege escalation.
    • Use 4 worker processes by default.
    • Use upstream default of max-worker-connections of 16384.
    • Ignore NGINX IC Deployment replica count configuration when HorizontalPodAutoscaler is enabled.
    • Drop unnecessary Helm release revision annotation from NGINX IC Deployment.
    • Adjust README for display in the web interface context.
  • Changed

    • Default max-worker-connections to 0, making it same as max-worker-open-files i.e. max open files (system's limit) / worker-processes - 1024. This optimizes for high load conditions where it improves performance at the cost of increasing RAM utilization (even on idle).
    • HorizontalPodAutoscaler was tuned to use targetMemoryUtilizationPercentage of 80 due to increased RAM utilization with new default for max-worker-connections of 0.
    • Removed use of enable-dynamic-certificates CLI flag, it has been deprecated since ingress-nginx 0.26.0 via ingress-nginx PR #4356
    • Changed default error-log-level from error to notice.
    • Added a link to the README in the sources of Chart.yaml
  • Changed

    • Align graceful termination configuration with changes made in upstream ingress-nginx 0.26.0 (see related PR #4487 and important section in 0.26.0 release notes).
      • Make NGINX IC Deployment’s terminationGracePeriodSeconds configurable and align its default with configmap.worker-shutdown-timeout
      • Make NGINX IC controller container lifecycle hooks configurable, and change from sleep 60 to using /wait-shutdown as preStop hook.
    • Make controller.minReadySeconds configurable.
  • Changed

    • Change deployment to use release revision not time for Helm 3 support.
  • Updated

    • Enable Giant Swarm monitoring
    • Set default ingressClass to kong-app. See #48
  • Changed

    • Fix small cluster profile resource requests. (#42)
  • Changed

    • Use cluster.kubernetes.clusterDomain instead of cluster.kubernetes.domain for custom DNS suffix.

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.