ingress-nginx-app release v2.1.2
Changed
- Disallow the controller Ingress to parse and add *-snippet annotations/directives created by the user. This can be changed by setting
controller.enableSnippetDirectives
totrue
. We recommend enabling this option only if you TRUST users with permission to create Ingress objects, as this may allow a user to add restricted configurations to the final nginx.conf file. This is a mitigation against CVE-2021-25742. (#237)