What's Changed

🐛 Bug Fixes

• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5921
• Add default telemetry endpoint by @shaun-nx in #5889

🔨 Maintenance

• Add permissions for gcr login to base image build (#5860) by @oseoin in #5862
• release pipeline fixes by @pdabelf5 in #5863
• terminate milestone api call by @pdabelf5 in #5864
• Update release skip job logic by @pdabelf5 in #5865
• aws marketplace id token by @pdabelf5 in #5867
• add v prefix to github version by @pdabelf5 in #5868
• skip closing already closed milestone by @pdabelf5 in #5869
• remove fips from tests & image publishing by @pdabelf5 in #5918
• ensure example versions are updated by @pdabelf5 in #5897
• Mount pyproject.toml in smoke tests by @nginx-bot in #5935
• Add missing write permission for release draft by @nginx-bot in #5946
• Image matrix by @oseoin in #5950
• Version Bump for 3.6.1 by @nginx-bot in #5895

📝 Documentation

• remove reference to auth_request off by @j1m-ryan in #5937
• add scc and update deployment by @vepatel in #5940

⬆️ Dependencies

• Bump the go group with 1 update by @nginx-bot in #5877
• Bump the go group with 2 updates by @nginx-bot in #5884
• Bump Go version - fix vulnerability in the std lib by @nginx-bot in #5930
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #5933
• Bump the go group with 2 updates by @nginx-bot in #5951
• Bump kindest/node from v1.30.0 to v1.30.2 in /tests in the docker-tests group by @nginx-bot in #5941
• Docker image update d41d8cd9 by @nginx-bot in #5923
• Bump the python group in /tests with 2 updates by @nginx-bot in #5926
• Docker image update d41d8cd9 by @nginx-bot in #5882
• Docker image update d41d8cd9 by @nginx-bot in #5939
• Docker image update d41d8cd9 by @nginx-bot in #5943
• Docker image update d41d8cd9 by @nginx-bot in #5947
• Bump the actions group across 1 directory with 2 updates by @nginx-bot in #5931

Full Changelog: v3.6.0...v3.6.1

Upgrade

• For NGINX, use the v3.6.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.6.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, the Azure Marketplace or build your own image using the v3.6.1 source code.
• For Helm, use version 1.3.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

🚀 Features

• Preserve valid listeners when invalid listeners are present in GlobalConfiguration by @haywoodsh in #5205
• Add proxy-set-headers annotation for ingress by @AlexFenlon in #5366
• Add telemetry data - ingresses by @jjngx in #5406
• add service count metric to telemetry by @j1m-ryan in #5408
• Add Ingress Classes to Telemetry data by @jjngx in #5418
• Add policies count to telemetry by @AlexFenlon in #5457
• Add support for headers in action return by @andrew-s in #5204
• Add Granular Policy count for telemetry by @AlexFenlon in #5489
• Add Ingress Annotation List to Telemetry by @AlexFenlon in #5516
• Add AppProtectVersion to Telemetry by @AlexFenlon in #5554
• Add IsPlus to Telemetry by @AlexFenlon in #5571
• Add Installation Flags to Telemetry by @AlexFenlon in #5586
• Scale ratelimit with ingress pods by @dbaumgarten in #5113
• Add Granular Ingress Counts to Telemetry by @AlexFenlon in #5608
• Add Granular Services Counts to Telemetry by @AlexFenlon in #5627
• enable external service args by @vepatel in #5736
• Integrate NAP WAF v5 by @shaun-nx in #5698
• Support APIKey authentication by @haywoodsh in #5580

🐛 Bug Fixes

• fix ap-waf flag in error message by @vepatel in #5350
• Don't reload when use-cluster-ip endpoints update, and change the ingress use-cluster-ip implementation to use the cluster ip instead of the fqdn by @j1m-ryan in #5318
• fix status for invalid vs and vsr, for weight changes dynamic reload by @j1m-ryan in #5375
• pin ap compiler by @vepatel in #5433
• Add support for named ports in ingresses which use-cluster-ip by @j1m-ryan in #5456
• Fix nginx breaking & remove unused code for ProxySetHeaders annotation by @AlexFenlon in #5426
• Fix error messages by @jjngx in #5542
• Fix incorrect errors showing in Telemetry by @AlexFenlon in #5561
• Don't count Custom Resources if not enabled at NIC startup by @jjngx in #5749
• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• fix api key policy undefined routes by @j1m-ryan in #5838

📦 Helm Chart

• Remove the before NGINX Ingress Controller in some cases by @j1m-ryan in #5274
• Version Bump for 3.6.0 by @nginx-bot in #5285
• correct helm version in docs by @pdabelf5 in #5287
• update helm flag in docs for enableWeightChangesDynamicReload by @j1m-ryan in #5313
• docs version update to 3.5.0 by @pdabelf5 in #5327
• Collect count of secrets by @shaun-nx in #5404
• add local helm schema validation by @pdabelf5 in #5493
• 3.5.1 docs update by @pdabelf5 in #5520
• Revert "add local helm schema validation" by @oseoin in #5528
• Release 3.5.2 by @pdabelf5 in #5678
• helm: add knob to control cluster level rbac rendering by @hafe in #5229
• update values schema from 1.29 to 1.30 by @j1m-ryan in #5772
• Version Bump for 3.7.0 by @nginx-bot in #5828

🧪 Tests

• Wait before assertion in weight changes dynamic reload test by @j1m-ryan in #5302
• simplify smoke-test action by @pdabelf5 in #5311
• enable logging in tests by @vepatel in #5499
• Revert "enable logging in tests" by @oseoin in #5543
• Bump kindest/node from v1.29.2 to v1.30.0 in /tests in the docker-tests group across 1 directory by @dependabot in #5549
• add files for upgrade tests by @vepatel in #5553
• Docker image update d41d8cd9 by @nginx-bot in #5570
• exclude upgrade files from nightly regression tests by @vepatel in #5581
• add wait to dos test by @vepatel in #5656
• skip dos log test by @vepatel in #5658
• Fix test_dos_sec_logs_on by @pasmant in #5725
• Mount config and deployments dirs to smoke containers by @oseoin in #5740
• Docker image update d41d8cd9 by @nginx-bot in #5743
• replace skopeo action with skopeo image by @pdabelf5 in #5760
• add functional tests for rate-limit scaling by @vepatel in #5758
• check pod readiness in ingress scale test by @vepatel in #5774
• Workflow refactor by @pdabelf5 in #5766
• add docker scout scan to pipelines by @pdabelf5 in #5759
• Docker image update d41d8cd9 by @nginx-bot in #5822
• check for non 50x 404 response by @vepatel in #5851

🔨 Maintenance

What's Changed

⚠️ NGINX App Protect

• Bundles compiled on NAP WAF versions <= v4.8.x are not compatible with NAP WAF versions >= 4.9.x, this release of NIC includes NAP WAF v4.10 so recompilation of policy bundles is required. JSON based WAF Policies aren’t affected with this change.

📦 Helm Chart

• Version Bump for 3.5.2 by @nginx-bot in #5641

🧪 Tests

• skip dos log test (#5658) by @oseoin in #5660

🔨 Maintenance

• [cherry-pick] remove cert-gen script by @vepatel in #5632

📝 Documentation

• update operator version by @vepatel in #5566
• Docs/update mktplc refs by @vepatel in #5616
• add azure marketplace link by @vepatel in #5621
• cherry-pick NAP link fixes & troubleshooting documentation improvements from main by @ADubhlaoich in #5645

⬆️ Dependencies

• Bump the go group with 2 updates by @github-actions in #5590
• [cherry-pick] Manually apply main go patches by @oseoin in #5631
• [cherry-pick] Bump the go group across 1 directory with 4 updates by @nginx-bot in #5638
• [cherry-pick] Upgrade prometheus exporter to 1.1.2 by @pdabelf5 in #5662
• Docker image update d41d8cd9 by @nginx-bot in #5579
• Cherry pick kind 1.30 by @oseoin in #5642
• Container SHA cherry pick by @oseoin in #5573
• Bump the python group across 1 directory with 4 updates by @github-actions in #5598
• [pre-commit.ci] pre-commit autoupdate by @github-actions in #5600
• Bump golang from f1fe698 to b8ded51 in /build by @nginx-bot in #5623
• [cherry-pick] Bump redhat/ubi8 from 83068ea to a424544 in /build by @nginx-bot in #5630
• Bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 in the actions group by @nginx-bot in #5618
• [cherry-pick] [pre-commit.ci] pre-commit autoupdate by @nginx-bot in #5636
• [cherry-pick] Update debian build stages to use gpg over sq by @pdabelf5 in #5665
• [cherry-pick]NGINX Plus R32 by @vepatel in #5654
• [cherry-pick] Docker image update d41d8cd9 by @nginx-bot in #5673
• [cherry-pick] Bump the python group in /tests with 2 updates by @nginx-bot in #5669

New Contributors

• @github-actions made their first contribution in #5590

Full Changelog: v3.5.1...v3.5.2

Upgrade

• For NGINX, use the v3.5.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.5.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, the Azure Marketplace, or build your own image using the v3.5.2 source code.
• For Helm, use version 1.2.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.2/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

📦 Helm Chart

• Update helm flag in docs for enableWeightChangesDynamicReload (#5313) by @j1m-ryan in #5315

🐛 Bug Fixes

• Don't reload when use-cluster-ip endpoints update by @j1m-ryan in #5463
• Fix status for invalid vs and vsr, for weight changes dynamic reload … by @j1m-ryan in #5464
• Add support for named ports in ingresses which use-cluster-ip (#5456) by @j1m-ryan in #5470

📝 Documentation

• Update docs by @vepatel in #5312
• Remove operator note by @vepatel in #5329
• Fix heading in agent config doc by @vepatel in #5359
• Update doc for waf-dos image by @vepatel in #5369
• Fix link to rbac template by @vepatel in #5412
• Security monitoring docs by @vepatel in #5355

⬆️ Dependencies

• Go updates by @pdabelf5 in #5391
• Bump the go group across 1 directory with 7 updates (#5495) by @pdabelf5 in #5511

Other Changes

• Pin app-protect module version to 4.8.1 by @pdabelf5 in #5490

Full Changelog: v3.5.0...v3.5.1

Upgrade

• For NGINX, use the v3.5.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.5.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.5.1 source code.
• For Helm, use version 1.2.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.1/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

🚀 Features

• Export Telemetry data to XCDF by @shaun-nx & @jjngx in #4896, #5095, #5147, #5155, #5170, #5176, #5217, #5245, #5237, #5256, #5167 & #5261
• Add NIM Security Dashboard integration for App Protect WAF security violations by @oseoin in #5179 & #5051
• Weight changes Dynamic Reload by @j1m-ryan in #5212
• Add use-cluster-ip annotation for ingress resources by @j1m-ryan in #4862
• Add annotations for controlling request rate limiting by @dbaumgarten in #4660
• Allow securityContext and podSecurityContext to be configurable via helm parameters by @vepatel in #5084
• Update default values for keepalive-requests and keepalive-timeout by @AlexFenlon in #5083
• Update zone size for transportserver resource by @AlexFenlon in #5199

🐛 Bug Fixes

• Move set above rewrite to fix uninitialized variable by @AlexFenlon in #5211
• Initialize stopCh channel for ExternalDNS by @shaun-nx in #5175
• Ensure backup server is removed from upstreams when the Backup Service is deleted by @shaun-nx in #5053

📦 Helm Chart

• Refactor volumes and volumeMounts to common helpers by @oseoin in #5159
• Move common pod label definitions to helpers by @oseoin in #5179
• Agent management and helm configuration by @oseoin in #5188

🧪 Tests

• Update vs backup service tests with retries by @shaun-nx in #4797
• Add ingress rate-limit automation tests by @vepatel in #4919
• Add reload and req./resp. perf tests for ing and vs by @vepatel in #5048
• check pod status before getting logs by @vepatel in #5165
• update external-dns version by @vepatel in #5166
• add metrics logic to perf tests by @vepatel in #5224

🔨 Maintenance

• Fix AWS registry by @lucacome in #4825
• Add trigger for GCP Marketplace repo by @lucacome in #4829
• Report User Agent for Alpine and UBI by @lucacome in #4845
• Update UBI string for new images by @lucacome in #4893
• Update search for base image by @lucacome in #4912
• Add annotations to index and manifest by @lucacome in #5014
• Bump Go version to 1.22.1 by @jjngx in #5208

📝 Documentation

• Rewrite NGINX App Protect WAF Integration Section by @ADubhlaoich in #4726
• Fix and update links in VirtualServer port tutorial by @ADubhlaoich in #4792
• Update docs to include CRD upgrade by @vepatel in #4851
• Update to UBI9 by @oseoin in #4854
• Add rate-limit example by @vepatel in #4907
• Add alpine fips image options to installation docs by @pdabelf5 in #4962
• Fix minor documentation issues based on drift and feedback by @ADubhlaoich in #5011
• Add community page for NIC by @oseoin in #5038
• Fixed validation for VSR exact & regex subroutes by @jo-carter in #4744
• Add missing entries to the documentation catalog. by @Jcahilltorre in #5146
• Added few tips for TCP/UDP Load Balancing by @ssrahul96 in #5117
• Update docs for aplogconf by @vepatel in #5251
• Add support for apLogBundle in WAF policy by @oseoin in #5259
• Documentation on what Telemetry Data is collected + how to opt-in/opt-out by @shaun-nx in #5253

⬆️ Dependencies

What's Changed

🐛 Bug Fixes

• Allow waf users to build without dos repo access by @pdabelf5 in #5043
• Fix template file spacing for ssl_protocols directive by @j1m-ryan in #5060
• Remove redundant Prometheus variable labels by @haywoodsh in #5085
• Fix new lines in snippets by @j1m-ryan in #5059
• Fixed validation for VSR exact & regex subroutes by @jo-carter in #5079

📦 Helm Chart

• Helm notes updates by @oseoin in #5071

⬆️ Dependencies

• Bump redhat/ubi8 base image by @dependabot in #5073 & #5029
• Bump redhat/ubi9-minimal base image by @dependabot in #4994
• Bump ubi base image by @dependabot in #4992
• Bump opentracing/nginx-opentracing image @dependabot in #5074) & #4927
• Bump nginx image to 1.25.4 by @dependabot in #5028, #5019, #5012, #5003, #4926 & #5119
• Bump the debian base image by @dependabot in #4925
• Bump golang build image by @dependabot in #5004, #4984 & #4928
• Update kindest/node from v1.29.0 to v1.29.1 by @dependabot in #5033
• Bump the go dependencies by @dependabot in #4909, #4924, #4939, #4949, #4971, #5022, #5034 & #5055

Full Changelog: v3.4.2...v3.4.3

Upgrade

• For NGINX, use the v3.4.3 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.4.3 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.4.3 source code.
• For Helm, use version 1.1.3 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.3/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.3/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

📦 Helm Chart

• Release 3.4.2 by @nginx-bot in #4935

Other Changes

• GCR AWS plus publish fix by @pdabelf5 in #4934

Full Changelog: v3.4.1...v3.4.2

Upgrade

• For NGINX, use the v3.4.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.4.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.4.2 source code.
• For Helm, use version 1.1.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.2/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

🚀 Features

• NGINX Plus R31 support by @pdabelf5 in #4886

📦 Helm Chart

• Release 3.4.1 by @nginx-bot in #4920

🧪 Tests

• Cherry pick 3.4.1 by @pdabelf5 in #4886
• Base image hash (#4871) by @pdabelf5 in #4917

📝 Documentation

• minor docs updates by @pdabelf5 in #4821
• Update operator install document by @vepatel in #4830
• Cherry-pick NGINX App Protect WAF & VirtualServer documentation changes by @ADubhlaoich in #4844
• Update docs to include CRD upgrade by @vepatel in #4852

Full Changelog: v3.4.0...v3.4.1

Upgrade

• For NGINX, use the v3.4.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.4.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.4.1 source code.
• For Helm, use version 1.1.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.1/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

🚀 Features

• Allow default_server listeners to be customised by @shaun-nx in #4464
• Update use of http2 listen directive to align with deprecation by @shaun-nx in #4526
• Use Lease for leader election by @lucacome in #4276
• Remove deprecated preview policy flag by @shaun-nx in #4595
• Generate mainfests automatically from Helm by @lucacome in #4278
• Graduate TransportServer and GlobalConfiguration to v1 by @shaun-nx in #4574
• Delete the DNSEndpoint resource when VS is deleted & Ratelimit requeues on errors. by @ciarams87 in #4504
• Support weights 0 and 100 in traffic splitting by @haywoodsh in #4655
• Add support for backup directive for VS and TS by @jjngx in #4653

🐛 Bug Fixes

• prevent pip to look for dependency during install by @vepatel in #4342
• update dockerfile for debian N+ by @vepatel in #4575
• Don't throw annotation deprication warning when ingressClassName is not used in an Ingress resource by @shaun-nx in #4564
• Update vs backup service tests with retries (#4797) by @jjngx in #4799
• fix retries in tests (#4801) by @jjngx in #4806

📦 Helm Chart

• Refactor Helm Chart location by @lucacome in #4306
• Update helm readme and docs by @vepatel in #4474
• Add HPA Custom Behavior by @saedx1 in #4391
• Update docs for 3.3.1 by @lucacome in #4524
• Add single CRDs files by @lucacome in #4428
• Release 3.3.2 (#4596) by @lucacome in #4600
• Revert "Generate mainfests automatically from Helm (#4278)" by @lucacome in #4618
• Add process namespace sharing for ingress controller by @panzouh in #4559
• Add initContainerResources Helm configuration by @oseoin in #4651
• fix: update release action to use script by @pdabelf5 in #4677
• Allows multiple imagePullSecrets in the helm chart. by @AlessioCasco in #4656
• Helm and function signature refactors by @oseoin in #4758
• update helm k8s schema validation to 1.28.0 by @pdabelf5 in #4763
• Dynamic reload of SSL certificates for NGINX Plus by @oseoin in #4764
• Lazy loading OSS by @oseoin in #4788
• Re-align configurations in helm docs by @shaun-nx in #4790
• Release 3.4.0 by @nginx-bot in #4794

🧪 Tests

• Fix intermittent failing test helper by @jjngx in #4432
• Use httptest server for running healthcheck tests by @jjngx in #4461
• Update python version and test by @vepatel in #4500
• update example certs for grpc tests by @vepatel in #4586
• Update Makefile references to tests/Dockerfile by @oseoin in #4631
• update kind make targets for local & CI use by @pdabelf5 in #4704
• kind test make target to use cluster name by @pdabelf5 in #4706
• fix tls-passthrough-custom-port test cleanup by @pdabelf5 in #4717
• update prometheus exporter to 1.0.0 by @pdabelf5 in #4769
• split appProtect tests to speed up pipeline by @pdabelf5 in #4784
• Vs markers (#4793) by @oseoin in #4807

🔨 Maintenance

• Simplify release script by @lucacome in #4425
• Update NAP build step by @lucacome in #4429
• Use regexp2 pkg for path validation by @jjngx in #4465
• Bump Go to 1.21.3 by @lucacome in #4497
• Remove tests step from Updater workflow by @lucacome in #4553
• Update k8s versions in nightly by @lucacome in #4539
• Move release script to GitHub Action by @lucacome in #4592
• Move static files to scratch image by @lucacome in #4551
• Change busybox variant to musl by @lucacome in #4608
• Install QEMU for s390x by @lucacome in #4610
• realign makefile variable to be more readable by @pdabelf5 in #4783
• Add automatic push to NGINX registry by @lucacome in #4787

📝 Documentation

• Update links to templates by @jjngx in #4435
• Update operator docs for ingressClass by @haywoodsh in #4449
• Update Operator doc by @lucacome in #4459
• Update versions in docs by @lucacome in #4460
• Issue 4471: Update README linking to correct complete example by @mrajagopal in #4472
• Update gc doc with vs listeners by @vepatel in #4492
• Revert "Update gc doc with vs listeners (#4492)" by @vepatel in #4498
• Update gc doc with vs listeners by @vepatel in #4507
• implement issuance of temporary certificate when using VirtualServer cert-manager integration by @svvac in #4409
• Simplify automated changelog by @lucacome in #4525
• update documentation for -ingress-class by @vepatel in #4542
• Add string comparison functions to Go template executors by @ianyong in #4560
• Review, restructure and rewrite documentation for getting started with NGINX Ingress Controller by @ADubhlaoich in #4620
• Fix additional Helm-related chart versioning drift in documentation by @ADubhlaoich in #4645
• Fix additional Helm-related versioning issues by @ADubhlaoich in #4654
• docs: Fix Path Regex link in Advanced Configuration by @sigv in #4696
• Update README links for building NGINX Ingress Controller images by @ADubhlaoich in #4700
• Fix issue [#4679]: Incorrect default value for main-template-path and… by @opencmit2 in #4698
• Document option for installing CRDs from a single remote yaml by @shaun-nx in #4730
• Fix drift in Prometheus documentation related to ServiceMonitor by @ADubhlaoich in #4755
• Add docs for AppProtect waf bundle by @vepatel in #4757

⬆️ Dependencies

What's Changed

🐛 Bug Fixes

• update dockerfile for debian N+ by @vepatel in #4578

🧪 Tests

• update example test certs by @vepatel in #4587

🔨 Maintenance

• Update hack files for release by @lucacome in #4594

📝 Documentation

• Fix Operator version by @lucacome in #4522
• update documentation for -ingress-class by @vepatel in #4549

⬆️ Dependencies

• Bump nginx from 1.25.2 to 1.25.3 by @lucacome in #4572
• Bump Go dependencies by @lucacome in #4569
• Bump github.com/cert-manager/cert-manager from 1.13.1 to 1.13.2 (#4580) by @lucacome in #4591

New Contributors

• @nginx-bot made their first contribution in #4596

Full Changelog: v3.3.1...v3.3.2

Upgrade

• For NGINX, use the v3.3.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.3.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.3.2 source code.
• For Helm, use version 1.0.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.3.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.3.2/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator