[!IMPORTANT]
FIPS compliant images are currently impacted by compatibility issues with a dependent library. We recommend against:

1. Patching older FIPS images, which could re-introduce the incompatible dependency.
2. Building new custom FIPS images.

What's Changed

🚀 Features

• Add BUILD_OS to Telemetry by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/5968
• Sync oidc repo by @haywoodsh in https://github.com/nginxinc/kubernetes-ingress/pull/6014
• Support End Session Endpoint for OIDC and allow customizable Post-logout Redirect URI by @haywoodsh and @llomgui in https://github.com/nginxinc/kubernetes-ingress/pull/6092
• Make access_log in http context configurable by @hafe in https://github.com/nginxinc/kubernetes-ingress/pull/5648
• Add ip as an option to listeners for VirtualServer by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/6180
• Add ip as an option to listeners for TransportServer by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/6367

🐛 Bug Fixes

• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5786
• Fix api key policy undefined routes by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5838
• Add default telemetry endpoint by @shaun-nx in https://github.com/nginxinc/kubernetes-ingress/pull/5885
• GRPC healthcheck should not have keepalive time by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5899
• Don't log errors for not implemented grpc metrics by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6125
• Fix panic when creating VirtualServer by @hafe in https://github.com/nginxinc/kubernetes-ingress/pull/6232
• Create unique lease obj for each NIC installed via Helm by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6372
• Fix udp/http listener validation logic by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/6406
• Disable batch reload when batch finishes by @dareste in https://github.com/nginxinc/kubernetes-ingress/pull/6446
• grafana template update that works with grafana v11.2.0 (#6511) by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6526

📦 Helm Chart

• Remove include-year and includeYear flag by @harsha-mangena in https://github.com/nginxinc/kubernetes-ingress/pull/5817
• Choose NodePort values for controller.service.type = LoadBalancer by @Falltrades in https://github.com/nginxinc/kubernetes-ingress/pull/5335
• Update helm docs by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6235
• [cherry-pick] WAFv5 update to 5.3/alpine update by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/6510
• Release 3.7.0 by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/6480

🧪 Tests

• Check for non 50x 404 response by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5851
• Chore/python clean up, and unused variable check to pre commit by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5866
• Split VSR matrix in 3 by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5883
• Move some python tests from vs1 to vs2 by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5888
• Pod logs in tests when startup fails by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5901
• Make markers strict, and add project.toml to local python tests, by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5911
• Add flaky label to some flaky tests by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5955
• Dos - Allow list by @pasmant in https://github.com/nginxinc/kubernetes-ingress/pull/5824
• Reduce NAP CI time by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5999
• Add test to check for agent by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6111
• Move test to correct directory by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6114
• Assert version from log and chart by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6307
• Add NIC+WAFv5 tests by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6456
• Add retry to version check in logs by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/6504

🔨 Maintenance

📝 Documentation

• WAF v5 docs update by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/5719
• fix path by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5847
• change telemetry to telemetryReporting in docs by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5855
• Remove enable preview policies flag from docs by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5891
• Add transportserver-template config by @ssrahul96 in https://github.com/nginxinc/kubernetes-ingress/pull/5194
• remove reference to auth_request off by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5925
• add scc and update deployment by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/5934
• Update readme to show the regression workflow results by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5966
• change supported version order by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/5989
• update WAF v5 documentation by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6018
• Fix: Add security note about JWT and passwords in shell history by @mjang in https://github.com/nginxinc/kubernetes-ingress/pull/6011
• Update custom http listener example readme by @AlexFenlon in https://github.com/nginxinc/kubernetes-ingress/pull/6036
• Update plain Markdown callouts to Hugo callouts by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/6038
• bump versions of alpine fips modules by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/5905
• update keycloak version in OIDC example by @haywoodsh in https://github.com/nginxinc/kubernetes-ingress/pull/6049
• remove link to ingress example by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6101
• Documentation style changes for the "Installation" section by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/6015
• Add WAF policy compile instructions by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/5886
• Update to v0.14.2 of externaldns in examples & docs by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6127
• Change ExternalDNS link to be non-versioned by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/6140
• Fixed broken link by @fabriziofiorucci in https://github.com/nginxinc/kubernetes-ingress/pull/6149
• Docs/wafv5 cfgmgr enfrcr by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6169
• update example for WAF v5 by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6188
• Fix manifest CRD documentation by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/6197
• Fix: broken links by @mjang in https://github.com/nginxinc/kubernetes-ingress/pull/6216
• remove extended body from curl examples by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6238
• add ap wafv5 options in docs by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6241
• move fips note to top of release notes by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6252
• Chore: Fix broken links in docs by @nginx-aoife in https://github.com/nginxinc/kubernetes-ingress/pull/6248
• fix wafv5 docs by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6261
• Update max_message_size to reflect nap behavior change - https://docs.nginx.com/nginx-app-protect-waf/releases/release-notes-4.7/#resolved-issues by @jnewfield in https://github.com/nginxinc/kubernetes-ingress/pull/5209
• Remove deprecated use cases from Helm installation documentation by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/6279
• Add docs for proxy-set-header by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6317
• Fix NAP WAF v5 example link, minor style issues by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/6294
• Update documentation Makefile and README by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/6339
• remove extra endifs by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6352
• update waf v5 docs by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6407
• Fix typo, feedback by @mjang in https://github.com/nginxinc/kubernetes-ingress/pull/6419
• Change dos doc for dosAccessLogDest and dosSecurityLog.dosLogDest by @pasmant in https://github.com/nginxinc/kubernetes-ingress/pull/6429
• Aws mktpl docs updates by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6444
• update aws deployment docs with helm instructions by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6457
• update release description by @vepatel in https://github.com/nginxinc/kubernetes-ingress/pull/6461
• Docs: Update broken URL is docs by @nginx-aoife in https://github.com/nginxinc/kubernetes-ingress/pull/6462
• [cherry-pick] Update community call dates by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/6508
• Docs: Added Support page (#6467) by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6515

⬆️ Dependencies

Other Changes

• Fix build arg for templates by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5844
• Initial test data for ingress NAP and VS DOS templates by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5922
• Change OpenTracing dependency to local image by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5956
• Move common UBI tasks to script by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/5997
• Align OSS and Plus UBI images by @oseoin in https://github.com/nginxinc/kubernetes-ingress/pull/6008
• allow nginx ubi mainline or stable to build by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6113
• Communicate clearly func intent by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6135
• Communicate clearly func intent by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6136
• Fix staticcheck linter complains by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6159
• Remove unused code by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6160
• Add missing tests for template executor and helpers by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6182
• re-order mounting debian apt source file by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6223
• refactor App Protect DoS controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6212
• refactor App Protect WAF controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6263
• Chore/refactor transport server listens by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/6315
• refactor ConfigMap controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6321
• refactor EndpointSlice controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6323
• Bump documentation theme version by @ADubhlaoich in https://github.com/nginxinc/kubernetes-ingress/pull/6320
• refactor GlobalConfiguration controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6327
• move mounted code to fix /tmp file permissions by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6354
• refactor Leader controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6349
• refactor IngressLink controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6348
• Reduce cyclomatic complexity in controller.go by @j1m-ryan in https://github.com/nginxinc/kubernetes-ingress/pull/6373
• Listener directive refactor by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6377
• refactor TransportServer controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6389
• refactor Policy controller by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6388
• Use Go v1.23 alpine as golang_builder by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6392
• move Namespace Controller to it's own file by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6396
• refactor Service Controller to it's own file by @pdabelf5 in https://github.com/nginxinc/kubernetes-ingress/pull/6395
• Fix issues reported by staticcheck by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6415
• Remove double imports by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6416
• Fix error message to comply with staticcheck by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6421
• Remove double import by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6420
• Add benchmark tests for configurator by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6423
• Add initial benchmark tests for NIC by @jjngx in https://github.com/nginxinc/kubernetes-ingress/pull/6422
• [cherry-pick] Docker image update c30328bf by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/6486
• [cherry-pick] Docker image update e58c873f by @nginx-bot in https://github.com/nginxinc/kubernetes-ingress/pull/6500

New Contributors

• @harsha-mangena made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/5817
• @mjang made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/6011
• @Falltrades made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/5335
• @danielledeleo made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/6027
• @defanator made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/5057
• @puneetsarna made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/6230
• @dareste made their first contribution in https://github.com/nginxinc/kubernetes-ingress/pull/6446

Full Changelog: https://github.com/nginxinc/kubernetes-ingress/compare/v3.6.2...v3.7.0

Upgrade

• For NGINX, use the v3.7.0 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.7.0 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.7.0 source code.
• For Helm, use version 1.4.0 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.0/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.0/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator