controller-v1.3.1

In v1.3.1 leader elections will be done entirely using the Lease API and no longer using configmaps. v1.3.0 is a safe transition version, using v1.3.0 can automatically complete the merging of election locks, and then you can safely upgrade to v1.3.1.

Also, important note, with the Release of Kubernetes v1.25 we are dropping support for the legacy branches, Also, important note, with the release of Kubernetes v1.25, we are dropping support for the legacy edition, that means all version <1.0.0 of the ingress-nginx-controller.

Important Changes

• Updated to golang 1.19
• Started migration for Data and Control Plane splits
• Upgraded to Alpine 3.16.2
• New kubectl plugin release workflow
• New CVE findings template

Image:

• registry.k8s.io/ingress-nginx/controller:v1.3.1@sha256:54f7fe2c6c5a9db9a0ebf1131797109bb7a4d91f56b9b362bde2abd237dd1974
• registry.k8s.io/ingress-nginx/controller-chroot:v1.3.1@sha256:a8466b19c621bd550b1645e27a004a5cc85009c858a9ab19490216735ac432b1

What's Changed

• bump Golang to 1.19 #8932 by @Volatus in #8970
• Migrate ginkgo to v2 in e2e-test-runner image by @lilien1010 in #8830
• migrate ginkgo to v2 by @lilien1010 in #8826
• bump alpine to v3.16.2 by @longwuyuan in #8934
• bump baseimage alpine to v3.16.2 for zlib CVE fix by @longwuyuan in #8939
• bumped kubectl in test-runner to v1.24.0 by @longwuyuan in #8807
• Move utils to better locations to help in decoupling by @rikatz in #8853
• Move APIs to be used by both controller and configurer by @rikatz in #8854

Other Changes

• Fixed typo by @mtnezm in #8817
• fix(docs): describe MetalLB configuration via CRDs rather than configMap by @tamcore in #8821
• feat: update mimalloc to 1.7.6 by @guilhem in #8827
• Bump actions/setup-go from 3.2.0 to 3.2.1 by @dependabot in #8835
• Bump actions/dependency-review-action from 2.0.2 to 2.0.4 by @dependabot in #8836
• Bump github.com/prometheus/common from 0.35.0 to 0.37.0 by @dependabot in #8832
• Bump github/codeql-action from 2.1.15 to 2.1.16 by @dependabot in #8837
• Bump google.golang.org/grpc from 1.47.0 to 1.48.0 by @dependabot in #8833
• fix: test-runner Makefile by @tao12345666333 in #8840
• FIx typo x_forwarded_for by @inosato in #8838
• Decouple shared functions between controllers by @rikatz in #8829
• added fixes for make dev-env by @longwuyuan in #8804
• Add docs on Election ID to Multiple Ingress Controller guide by @qilongqiu in #8855
• bump to alpine-3.16.1 by @longwuyuan in #8858
• update dd-opentracing-cpp version in nginx build script by @dgoffredo in #8848
• changed baseimage sha & bumped ginkgo to 2.1.4 in test by @longwuyuan in #8860
• update baseimage after bump of opentracing-cpp by @longwuyuan in #8861
• fix: test-runner prow build by @tao12345666333 in #8863
• fix: make use of sed portable for BSD and GNU by @Volatus in #8859
• fix: test-runner prow build by @tao12345666333 in #8864
• Revert "fix: test-runner prow build" by @tao12345666333 in #8865
• version (commit sha) bump for dependency github.com/moul/pb due to dependency licence by @europ in #8841
• fix: change cloudbuild configuration by @tao12345666333 in #8869
• Update gce docs by @strongjz in #8866
• fix: change all cloudbuild jobs configuration by @tao12345666333 in #8870
• Add X-Forwarded-For in custom error template by @mrksngl in #7892
• update to baseiamge built after CI changes by @longwuyuan in #8892
• Bump github/codeql-action from 2.1.16 to 2.1.17 by @dependabot in #8894
• Bump github/codeql-action from 2.1.17 to 2.1.18 by @dependabot in #8914
• Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 by @dependabot in #8913
• updated to new images built today by @longwuyuan in #8896
• Trivy Image Scanning by @strongjz in #8776
• Improve hack/generate-deploy-scripts.sh to no longer generate versioned manifests by @Volatus in #8877
• Reimplement kubectl plugin release workflow by @Volatus in #8812
• Make securityContext in admission-webhook more configurable e.g. to set seccompProfiles by @omichels in #8895
• Clean old code and move helper functions by @rikatz in #8946
• updated testrunner and testecho images by @longwuyuan in #8948
• Bump github/codeql-action from 2.1.18 to 2.1.19 by @dependabot in #8950
• Bump geekyeggo/delete-artifact from a6ab43859c960a8b74cbc6291f362c7fb51829ba to 1 by @dependabot in #8951
• Bump securego/gosec from b99b5f7838e43a4104354ad92a6a1774302ee1f9 to 2.13.1 by @dependabot in #8952
• Bump aquasecurity/trivy-action from 0.5.1 to 0.7.1 by @dependabot in #8953
• Bump actions/dependency-review-action from 2.0.4 to 2.1.0 by @dependabot in #8954
• Bump azure/setup-helm from 2.1 to 3.3 by @dependabot in #8956
• Bump github/codeql-action from 2.1.19 to 2.1.20 by @dependabot in #8957
• Don't error log when no OCSP responder URL exists by @zeeZ in #8881
• feat: using LeaseLock for election. by @tao12345666333 in #8921
• Add NetworkPolicy support by @mjudeikis in #8928
• securityContext in admission-webhook now configurable e.g. to set seccompProfiles by @omichels in #8930
• Document internal-logger-address cli arg by @NissesSenap in #8873
• Add protocol prefix to Metrics port (Helm) by @anders-swanson in #8665
• fix(controller): typo in catch-all CheckIngress error message by @aslafy-z in #8905
• Fix defaultServer backend update for Ingress with defaultBackend. by @harry1064 in #8825
• Make keep-alive documentation more explicit for clarity by @Volatus in #8944
• Determine the hpa version and select the hpa version by @qilongqiu in #8872
• revert changes to configmap resource permissions by @tao12345666333 in #8959
• upgrade yamale and yamllint version by @tao12345666333 in #8960
• updated to testrunnerimage with updated yamale yamllint by @longwuyuan in #8967
• fix: go-restful CVE #8745 by @Volatus in #8969
• added note on digitalocean annotations by @longwuyuan in #8966
• adding cve finding and adding release-notes to PR template by @strongjz in #8916
• Update apiserver to 0.25 to remove v2 go-restful by @Volatus in #8976
• fixed deprecated ginkgo flags by @longwuyuan in #8984
• Bump actions/setup-go from 3.2.1 to 3.3.0 by @dependabot in #8981
• Bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 by @dependabot in #8992
• Bump goreleaser/goreleaser-action from 3.0.0 to 3.1.0 by @dependabot in #8986
• Bump github/codeql-action from 2.1.20 to 2.1.21 by @dependabot in #8982
• GitHub Workflows security hardening by @sashashura in #9001
• Bump google.golang.org/grpc from 1.48.0 to 1.49.0 by @dependabot in #8991
• Bump github/codeql-action from 2.1.21 to 2.1.22 by @dependabot in #9003
• issue:8739 fix doc issue by @sreelakshminarayananm in #9006
• start 1.3.1 release by @strongjz in #9010
• Fix cloud build git error by @strongjz in #9012
• 1.3.1 for real by @strongjz in #9013

New Contributors

• @mtnezm made their first contribution in #8817
• @tamcore made their first contribution in #8821
• @guilhem made their first contribution in #8827
• @lilien1010 made their first contribution in #8830
• @qilongqiu made their first contribution in #8855
• @dgoffredo made their first contribution in #8848
• @Volatus made their first contribution in #8859
• @europ made their first contribution in #8841
• @mrksngl made their first contribution in #7892
• @omichels made their first contribution in #8895
• @zeeZ made their first contribution in #8881
• @mjudeikis made their first contribution in #8928
• @NissesSenap made their first contribution in #8873
• @anders-swanson made their first contribution in #8665
• @aslafy-z made their first contribution in #8905
• @harry1064 made their first contribution in #8825
• @sashashura made their first contribution in #9001
• @sreelakshminarayananm made their first contribution in #9006

Full Changelog: controller-v1.3.0...controller-v1.3.1