What's Changed

🚀 Features

• Preserve valid listeners when invalid listeners are present in GlobalConfiguration by @haywoodsh in https://github.com/nginxinc/kubernetes-ingress/pull/5205
• Add proxy-set-headers annotation for ingress by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5366
• Add telemetry data - ingresses by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5406
• add service count metric to telemetry by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5408
• Add Ingress Classes to Telemetry data by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5418
• Add policies count to telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5457
• Add support for headers in action return by @andrew-s in https://github.com/nginxinc/kubernetes-ingress/pull/5204
• Add Granular Policy count for telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5489
• Add Ingress Annotation List to Telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5516
• Add AppProtectVersion to Telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5554
• Add IsPlus to Telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5571
• Add Installation Flags to Telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5586
• Scale ratelimit with ingress pods by @dbaumgarten in https://github.com/nginxinc/kubernetes-ingress/pull/5113
• Add Granular Ingress Counts to Telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5608
• Add Granular Services Counts to Telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5627
• enable external service args by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5736
• Integrate NAP WAF v5 by @shaun-nx in https://github.com/nginxinc/kubernetes-ingress/pull/5698
• Support APIKey authentication by @haywoodsh in https://github.com/nginxinc/kubernetes-ingress/pull/5580

🐛 Bug Fixes

• fix ap-waf flag in error message by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5350
• Don't reload when use-cluster-ip endpoints update, and change the ingress use-cluster-ip implementation to use the cluster ip instead of the fqdn by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5318
• fix status for invalid vs and vsr, for weight changes dynamic reload by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5375
• pin ap compiler by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5433
• Add support for named ports in ingresses which use-cluster-ip by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5456
• Fix nginx breaking & remove unused code for ProxySetHeaders annotation by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5426
• Fix error messages by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5542
• Fix incorrect errors showing in Telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5561
• Don't count Custom Resources if not enabled at NIC startup by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5749
• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5786
• fix api key policy undefined routes by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5838

📦 Helm Chart

• Remove the before NGINX Ingress Controller in some cases by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5274
• Version Bump for 3.6.0 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5285
• correct helm version in docs by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5287
• update helm flag in docs for enableWeightChangesDynamicReload by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5313
• docs version update to 3.5.0 by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5327
• Collect count of secrets by @shaun-nx in https://github.com/nginxinc/kubernetes-ingress/pull/5404
• add local helm schema validation by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5493
• 3.5.1 docs update by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5520
• Revert "add local helm schema validation" by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5528
• Release 3.5.2 by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5678
• helm: add knob to control cluster level rbac rendering by @hafe in https://github.com/nginxinc/kubernetes-ingress/pull/5229
• update values schema from 1.29 to 1.30 by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5772
• Version Bump for 3.7.0 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5828

🧪 Tests

• Wait before assertion in weight changes dynamic reload test by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5302
• simplify smoke-test action by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5311
• enable logging in tests by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5499
• Revert "enable logging in tests" by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5543
• Bump kindest/node from v1.29.2 to v1.30.0 in /tests in the docker-tests group across 1 directory by @dependabot in https://github.com/nginxinc/kubernetes-ingress/pull/5549
• add files for upgrade tests by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5553
• Docker image update d41d8cd9 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5570
• exclude upgrade files from nightly regression tests by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5581
• add wait to dos test by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5656
• skip dos log test by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5658
• Fix test_dos_sec_logs_on by @pasmant in https://github.com/nginxinc/kubernetes-ingress/pull/5725
• Mount config and deployments dirs to smoke containers by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5740
• Docker image update d41d8cd9 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5743
• replace skopeo action with skopeo image by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5760
• add functional tests for rate-limit scaling by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5758
• check pod readiness in ingress scale test by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5774
• Workflow refactor by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5766
• add docker scout scan to pipelines by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5759
• Docker image update d41d8cd9 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5822
• check for non 50x 404 response by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5851

🔨 Maintenance

📝 Documentation

• Fix incorrect example versions by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5300
• Security monitoring docs by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5301
• Documentation maintenance: tooling update and metadata fixes. by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/5328
• Fix heading in agent config doc by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5356
• update doc for waf-dos image by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5360
• Update community call dates by @danielnginx in https://github.com/nginxinc/kubernetes-ingress/pull/5367
• use inclusive language by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5396
• fix link to rbac template by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5410
• fix example path by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5414
• Add docs for proxy-set-header annotation in Ingress by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5413
• Collect usage of GlobalConfiguration resources by @shaun-nx in https://github.com/nginxinc/kubernetes-ingress/pull/5415
• Remove community call time column by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5424
• Add examples for ProxySetHeaders Annotation by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5431
• Remove bank holiday from community call dates by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5477
• Added replaceAll support for go templates by @fabriziofiorucci in https://github.com/nginxinc/kubernetes-ingress/pull/5468
• Rewrite "Security recommendations" page. by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/5342
• update operator version by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5564
• Fix codeblock languages, prefix instances by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/5604
• NAP link fixes & improvements to troubleshooting documentation by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/5605
• update google marketplace links by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5615
• Added missing "cd" command by @fabriziofiorucci in https://github.com/nginxinc/kubernetes-ingress/pull/5614
• add azure marketplace link by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5619
• Update Community Call Dates by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5639
• update release 3.5.2 docs by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5684
• Add grpc example by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5699
• Add F5 prefix to configuration opening paragraphs, style consistency by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/5737
• Update top level documentation pages for style consistency by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/5754
• API Key Auth Policy Docs by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5752
• Add examples for app protect waf v5 by @shaun-nx in https://github.com/nginxinc/kubernetes-ingress/pull/5784
• WAF v5 docs update by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5719
• fix path by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5847
• change telemetry to telemetryReporting in docs by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5855

⬆️ Dependencies

Other Changes

• allow to choose previous nic/chart version by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5276
• correct docs PR workflow variable by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5279
• add merge queue support to workflows by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5278
• remove gcr marketplace publish step by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5309
• add build_tag variables by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5316
• disable telemetry in helm tests by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5336
• codecov v4 needs a token to upload results by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5338
• remove unused variable from Dockerfile target by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5341
• add script/config for tagging & pushing images by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5343
• add image release workflows by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5348
• recalculate forked_workflow variable by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5352
• add release workflows by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5346
• remove labeler config workaround by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5382
• only apply test label to test file changes by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5386
• Remove redundant import in telemetry package by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5423
• update nap logconf CRD by @galitskiy in https://github.com/nginxinc/kubernetes-ingress/pull/5273
• Add unit tests for replaceAll by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5481
• Remove unused var by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5541
• Remove deprecated Go code by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5559
• Fix error msg to comply with a Go linter by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5582
• Docker image update d41d8cd9 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5637
• NGINX Plus R32 by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5649
• Update debian build stages to use gpg over sq by @shaun-nx in https://github.com/nginxinc/kubernetes-ingress/pull/5664
• update opentracing images to 1.27.0 by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5674
• Test reducing size of UBI NAP images by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5613
• Fix ratelimit-scaling for mergable ingresses #5727 by @dbaumgarten in https://github.com/nginxinc/kubernetes-ingress/pull/5728
• update debian nap waf/dos image to debian:12 by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5780
• Re-add docs string to telemetry schema file by @shaun-nx in https://github.com/nginxinc/kubernetes-ingress/pull/5775
• Docker image update d41d8cd9 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5808
• Fix build arg for templates by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5844

New Contributors

• @andrew-s made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/5204

Full Changelog: https://github.com/nginxinc/kubernetes-ingress/compare/v3.5.2...v3.6.0

Upgrade

• For NGINX, use the 3.6.0 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the 3.6.0 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.6.0 source code.
• For Helm, use version 1.3.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/3.6.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/3.6.0/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator