Ingress-nginx release 1.12.0 Beta

30 views
Skip to first unread message

James Strong

unread,
Oct 15, 2024, 8:07:23 AM10/15/24
to ingress-nginx-dev
Ingress-nginx Dev,

We have released a beta of 1.12 because it contains many changes. Below is a high-level overview of the changes; please read the release notes to understand the full extent of the changes.


Security Updates
  • --enable-annotation-validation gets enabled by default.
  • allow-cross-namespace-resources gets disabled by default.
  •  annotations-risk-level gets lowered to "High" by default.
  • strict-validate-path-type gets enabled by default.
Deprecations
  • Remove 3rd party Lua plugin support (#11821)
  • It also removes support for user-provided Lua plugins in the `/etc/nginx/lua/plugins` directory.
  • This removes Pod Security Policies and related resources from the chart.
  • Global-rate-limit removed
      • This removes the following configuration options:
        • global-rate-limit-memcached-host
        • global-rate-limit-memcached-port
        • global-rate-limit-memcached-connect-timeout
        • global-rate-limit-memcached-max-idle-timeout
        • global-rate-limit-memcached-pool-size
        • global-rate-limit-status-code
      •   It also removes the following annotations:
        • global-rate-limit
        • global-rate-limit-window
        • global-rate-limit-key
        • global-rate-limit-ignored-cidrs
  • Metrics: Remove ingress_upstream_latency_seconds`
Changes:
--enable-metrics gets disabled by default.

If you have questions, please join our community meeting on Thursdays at 11 Eastern and the ingress-nginx dev Slack.

Thank you,
James
Reply all
Reply to author
Forward
0 new messages