22 Pull requests merged by 10 people

• add ssl patches to nginx-1.25 image for coroutines to work in lua client hello and cert ssl blocks

  #11535 merged Jul 2, 2024

• trigger build for NGINX-1.25 v0.0.8

  #11539 merged Jul 2, 2024

• add ssl patches to nginx-1.25 image for coroutines to work in lua client hello and cert ssl blocks

  #11534 merged Jul 2, 2024

• trigger build for NGINX-1.25 v0.0.8

  #11533 merged Jul 2, 2024

• bump alpine version to 3.20 to custom-error-pages

  #11538 merged Jul 2, 2024

• bump alpine version to 3.20 to custom-error-pages

  #11537 merged Jul 2, 2024

• bump alpine version to 3.20 to custom-error-pages

  #11530 merged Jul 2, 2024

• add ssl patches to nginx-1.25 image for coroutines to work in lua client hello and cert ssl blocks

  #11485 merged Jul 2, 2024

• fix: Ensure changes in MatchCN annotation are detected

  #11529 merged Jul 2, 2024

• fix: Ensure changes in MatchCN annotation are detected

  #11528 merged Jul 2, 2024

• fix: Ensure changes in MatchCN annotation are detected

  #11173 merged Jul 1, 2024

• Docs: Add information about HTTP/3 support.

  #11525 merged Jul 1, 2024

• Docs: Add information about HTTP/3 support.

  #11513 merged Jul 1, 2024

• Bump the all group with 2 updates

  #11524 merged Jul 1, 2024

• Bump the all group with 2 updates

  #11523 merged Jul 1, 2024

• Bump k8s.io/klog/v2 from 2.130.0 to 2.130.1 in the all group

  #11521 merged Jul 1, 2024

• Bump k8s.io/klog/v2 from 2.130.0 to 2.130.1 in the all group

  #11499 merged Jul 1, 2024

• Docs: Specify `ingressClass` for multi-controller setup.

  #11520 merged Jul 1, 2024

• Docs: Improve default certificate usage.

  #11519 merged Jul 1, 2024

• Docs: Specify `ingressClass` for multi-controller setup.

  #11493 merged Jul 1, 2024

• Docs: Improve default certificate usage.

  #11504 merged Jul 1, 2024

• NGINX: Upgrade ModSecurity to v4.4.0.

  #11511 merged Jul 1, 2024

5 Pull requests opened by 4 people

• Bump github.com/prometheus/common from 0.54.0 to 0.55.0

  #11522 opened Jul 1, 2024

• add k8s 1.30 to ci build

  #11526 opened Jul 1, 2024

• force all ci to run on workflow dispatch

  #11527 opened Jul 1, 2024

• bump NGINX_BASE to v0.0.8

  #11540 opened Jul 2, 2024

• [feature] bump nginx to 1.25.5 and add http3 module

  #11541 opened Jul 3, 2024

15 Issues closed by 3 people

• Build nginx image with FromAsCasing

  #11506 closed Jul 2, 2024

• Changing nginx.ingress.kubernetes.io/auth-tls-match-cn value is ignored

  #10915 closed Jul 1, 2024

• A document is needed to explain that the current support for HTTP3 is not complete.

  #11502 closed Jul 1, 2024

• Update OWASP CRS to 4.4.0

  #11510 closed Jul 1, 2024

• Proxy grpc path have prefix , no work !!!

  #9033 closed Jun 29, 2024

• Websocket connections timeout if a new ingress rule is applied while clients are connected

  #8977 closed Jun 29, 2024

• ModSecurity [uri "/is-dynamic-lb-initialized"] Host header is a numeric IP address

  #8974 closed Jun 29, 2024

• Getting continuous 404s for nginx controller which loads many ingresses.

  #8831 closed Jun 29, 2024

• nginx.ingress.kubernetes.io/cors-allow-origin doesn't seem to work?

  #8469 closed Jun 29, 2024

• Job resources are not automatically cleaned up preventing version upgrades

  #7118 closed Jun 29, 2024

• Building Nginx with FIPS support.

  #11512 closed Jun 29, 2024

• File uploads failing after sometime

  #11516 closed Jun 29, 2024

• Nginx Ingress Timeout Configuration and Persistent 499 and 504 Errors

  #10093 closed Jun 27, 2024

• Public IP of Ingress-nginx is not accessible for CAPZ in v1.29.1

  #11492 closed Jun 27, 2024

• reading incoming context metadata on grpc requests and setting the value to a local variable

  #11509 closed Jun 27, 2024

9 Issues opened by 9 people

• Cross-Site Scripting: Reflected in tcp.go

  #11536 opened Jul 2, 2024

• CVEs in controller:v1.10.1

  #11532 opened Jul 2, 2024

• modsecurity: Including custom rules file throws error

  #11531 opened Jul 2, 2024

• num of worker_processes set to max num of cores of cluster node with cgroups-v2

  #11518 opened Jun 30, 2024

• field ingress.spec.defaultBackend.service.port.number is broken

  #11517 opened Jun 28, 2024

• Long worker-shutdown-timeout causes long-lived connections to fail

  #11515 opened Jun 27, 2024

• Bump NGINX_BASE to new tag or revert TAG

  #11514 opened Jun 27, 2024

• Server scaling causes ingress TCP retransmissions, and the client cannot access the server properly.

  #11508 opened Jun 26, 2024

• SSL client certificate authentication at kubernetes level and nginx ingress as a Defaultbackend

  #11507 opened Jun 26, 2024

25 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Annotation: Make `proxy-ssl-secret` optional.

  #11490 commented on Jul 1, 2024 • 10 new comments

• Reoccurrence of Service does not have any active Endpoint [when it actually does]

  #9932 commented on Jun 28, 2024 • 4 new comments

• Generate correct output on NumCPU() when using cgroups2

  #9816 commented on Jul 1, 2024 • 4 new comments

• Ingress controller with scoped ingress class validates ingress of other class

  #11505 commented on Jun 26, 2024 • 3 new comments

• Ingress Status: Improve checking for rollover or shutdown.

  #10686 commented on Jul 2, 2024 • 3 new comments

• EKS Nginx Proxy Protocol Broken Header

  #9643 commented on Jun 27, 2024 • 2 new comments

• use-proxy-protocol for SSL passthrough breaks HTTP

  #11365 commented on Jun 28, 2024 • 2 new comments

• [Vulnerabilities] current version of nginx-ingress-controller v1.10.1 has many vulnerabilties

  #11396 commented on Jul 3, 2024 • 2 new comments

• Add feature toggle for custom error pages /metrics

  #10984 commented on Jul 2, 2024 • 1 new comment

• Allow proxy-ssl-* annotations without proxy-ssl-secret

  #10557 commented on Jul 2, 2024 • 1 new comment

• Allow specifying the name of the header for forwarding client certificates

  #10359 commented on Jul 2, 2024 • 1 new comment

• fix: issue where canary overwrites default backend

  #10072 commented on Jul 2, 2024 • 1 new comment

• Random backend reloads - "unable to decode an event from the watch stream: http2: client connection lost"

  #10022 commented on Jul 2, 2024 • 1 new comment

• New e2e test for static deployment for kind

  #9467 commented on Jul 2, 2024 • 1 new comment

• ProxySSL ingress annotations do not work as expected when not all annotations are provided

  #10264 commented on Jul 1, 2024 • 1 new comment

• expose one workload with both an mTLS ingress and also with a non-mTLS ingress

  #8299 commented on Jun 29, 2024 • 1 new comment

• Add option to forbid plain http requests (where ssl-redirect is unsafe)

  #11391 commented on Jun 29, 2024 • 1 new comment

• Kubectl plugin backends does not show backends for TCP and UDP services

  #11392 commented on Jun 29, 2024 • 1 new comment

• Vulnerability (CVE-2022-27782) in the curl package

  #11388 commented on Jun 28, 2024 • 1 new comment

• opentelemetry_propagate do not work with auth endpoints

  #9811 commented on Jun 26, 2024 • 1 new comment

• How to properly log the "Path" in metrics (Ingress `pathType: Prefix`)

  #10465 commented on Jun 26, 2024 • 1 new comment

• Tolerations are not getting applied on Ingress Controllers

  #10758 commented on Jun 26, 2024 • 1 new comment

• Canary does not work if primary workload has no active endpoints

  #9635 commented on Jun 27, 2024 • 0 new comments

• Chart: Improve CI.

  #10815 commented on Jul 2, 2024 • 0 new comments

• Draft: Fix ssl-passthrough under fragmented ClientHello (#11424)

  #11498 commented on Jul 2, 2024 • 0 new comments