What's Changed

⚠️ NGINX App Protect

• Bundles compiled on NAP WAF versions <= v4.8.x are not compatible with NAP WAF versions >= 4.9.x, this release of NIC includes NAP WAF v4.10 so recompilation of policy bundles is required. JSON based WAF Policies aren’t affected with this change.

📦 Helm Chart

• Version Bump for 3.5.2 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5641

🧪 Tests

• skip dos log test (#5658) by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5660

🔨 Maintenance

• [cherry-pick] remove cert-gen script by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5632

📝 Documentation

• update operator version by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5566
• Docs/update mktplc refs by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5616
• add azure marketplace link by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5621
• cherry-pick NAP link fixes & troubleshooting documentation improvements from main by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/5645

⬆️ Dependencies

• Bump the go group with 2 updates by @github-actions in https://github.com/nginxinc/kubernetes-ingress/pull/5590
• [cherry-pick] Manually apply main go patches by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5631
• [cherry-pick] Bump the go group across 1 directory with 4 updates by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5638
• [cherry-pick] Upgrade prometheus exporter to 1.1.2 by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5662
• Docker image update d41d8cd9 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5579
• Cherry pick kind 1.30 by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5642
• Container SHA cherry pick by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5573
• Bump the python group across 1 directory with 4 updates by @github-actions in https://github.com/nginxinc/kubernetes-ingress/pull/5598
• [pre-commit.ci] pre-commit autoupdate by @github-actions in https://github.com/nginxinc/kubernetes-ingress/pull/5600
• Bump golang from f1fe698 to b8ded51 in /build by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5623
• [cherry-pick] Bump redhat/ubi8 from 83068ea to a424544 in /build by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5630
• Bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 in the actions group by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5618
• [cherry-pick] [pre-commit.ci] pre-commit autoupdate by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5636
• [cherry-pick] Update debian build stages to use gpg over sq by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5665
• [cherry-pick]NGINX Plus R32 by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5654
• [cherry-pick] Docker image update d41d8cd9 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5673
• [cherry-pick] Bump the python group in /tests with 2 updates by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/5669

New Contributors

• @github-actions made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/5590

Full Changelog: https://github.com/nginxinc/kubernetes-ingress/compare/v3.5.1...v3.5.2

Upgrade

• For NGINX, use the v3.5.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.5.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, the Azure Marketplace, or build your own image using the v3.5.2 source code.
• For Helm, use version 1.2.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.2/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator