Previously, the Ingress Controller used dgrijalva/jwt-go, which has a vulnerability CVE-2020-26160.

2074 Update JWT library to golang-jwt/jwt.

Update NGINX Plus version to R25 in NGINX App Protect enabled images.

Update NGINX App Protect version to 3.6.

For Helm, use version 0.10.3 of the chart.

For NGINX Plus, please build your own image using the 1.12.3 source code.

For NGINX, use the 1.12.3 image from our DockerHub: nginx/nginx-ingress:1.12.3, nginx/nginx-ingress:1.12.3-alpine or nginx/nginx-ingress:1.12.3-ubi.

The version of the Helm chart is now 0.10.3.

Previously, the argument only applied to VirtualServer, VirtualServerRoute and TransportServer resources. If snippets are not enabled, the Ingress Controller will reject any Ingress resources with snippets annotations. This PR extends the existing -enable-snippets cli argument to apply to Ingress resources.

2134 Apply -enable-snippets cli arg to Ingresses.

The bug first appeared when NGINX App Protect version 3.6 was released on 13 October 2021. This fixes an error when building Debian-based images with NGINX Plus with App Protect: previously, building an image would fail with the error nginx-plus-module-appprotect : Depends: app-protect-plugin (= 3.639.0-1~buster) but 3.671.0-1~buster is to be installed.

2133 Use release specific repo for the App Protect packages on Debian.

Because the default value of -enable-snippets is false, if you are using snippets in Ingress resources, you must explicitly set the -enable-snippets to true before upgrading the Ingress Controller, so that the new version of the Ingress Controller doesn’t reject Ingresses with snippets annotations.

We changed the behaviour of snippets in Ingress resources by extending the existing -enable-snippets cli argument to apply to Ingress resources as well as VirtualServer, VirtualServerRoute and TransportServer resources.

For Helm, use version 0.11.3 of the chart.

For NGINX Plus, please build your own image using the 2.0.3 source code.

For NGINX, use the 2.0.3 image from our DockerHub: nginx/nginx-ingress:2.0.3, nginx/nginx-ingress:2.0.3-alpine or nginx/nginx-ingress:2.0.3-ubi.

The version of the Helm chart is now 0.11.3.

2132 Install libcurl on OpenTracing for NGINX Plus.

2124 Apply -enable-snippets cli arg to Ingresses.

New ingress apk