Connectivity
Added
- Add monitoring label so Kong is scraped by monitoring infrastructure.
Changed
- Internal change: Stop publishing nginx-ingress-controller-app to default catalog. (#235)
- Disallow the controller Ingress to parse and add *-snippet annotations created by the user. This can be changed by setting
controller.allowSnippetAnnotations to true.
We recommend enabling this option only if you TRUST users with permission to create Ingress objects, as this may allow a user to add restricted configurations to the final nginx.conf file.
This is a mitigation against CVE-2021-25742.
(#238)
Changed
- Disallow the controller Ingress to parse and add *-snippet annotations/directives created by the user. This can be changed by setting
controller.enableSnippetDirectives to true.
We recommend enabling this option only if you TRUST users with permission to create Ingress objects, as this may allow a user to add restricted configurations to the final nginx.conf file.
This is a mitigation against CVE-2021-25742.
(#237)
Changed
- Update controller container image to
v1.0.4 which disables ssl_session_cache due to possible memory fragmentation. (#231)
Changed
- Update controller container image to
v1.0.3 which resolves issues related to lua modules used in the controller. (#225)
Added
- Option to specify Min Ready Seconds to kong deployment to mitigate kong dropping traffic during upgrades.
Fixed
- Fix lookup for CA secret for admission webhook.
Changed
- Breaking change Update controller container image to
v1.0.0. From this version on, only clusters with kubernetes >= 1.19 are supported. Please make sure to read the upgrading notes. (#218).
