Ingress-nginx release 1.12.0 Beta

[James Strong]

Ingress-nginx Dev,

We have released a beta of 1.12 because it contains many changes. Below is a high-level overview of the changes; please read the release notes to understand the full extent of the changes.

1.12.0 Beta Controller Release

4.12.0 Beta Helm Chart

Security Updates

• --enable-annotation-validation gets enabled by default.
• allow-cross-namespace-resources gets disabled by default.
•  annotations-risk-level gets lowered to "High" by default.
• strict-validate-path-type gets enabled by default.

Deprecations

• Remove 3rd party Lua plugin support (#11821)
• It also removes support for user-provided Lua plugins in the `/etc/nginx/lua/plugins` directory.
• This removes Pod Security Policies and related resources from the chart.
• Global-rate-limit removed
  • • This removes the following configuration options:
      • global-rate-limit-memcached-host
      • global-rate-limit-memcached-port
      • global-rate-limit-memcached-connect-timeout
      • global-rate-limit-memcached-max-idle-timeout
      • global-rate-limit-memcached-pool-size
      • global-rate-limit-status-code
    •   It also removes the following annotations:
      • global-rate-limit
      • global-rate-limit-window
      • global-rate-limit-key
      • global-rate-limit-ignored-cidrs
• Metrics: Remove ingress_upstream_latency_seconds`

Changes:
--enable-metrics gets disabled by default.

If you have questions, please join our community meeting on Thursdays at 11 Eastern and the ingress-nginx dev Slack.

Thank you,

James