Skip to content

@aledbf aledbf released this Feb 27, 2019

Image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.23.0

New Features:

  • NGINX 1.15.9

  • New canary-by-header-value annotation.

  • New debug binary to get runtime information from lua 3686

  • Support for Opentracing with Datadog

  • New kubectl plugin Alpha

    1. Install krew.

    2. Download and install the ingress-nginx plugin

    (
      set -x; cd "$(mktemp -d)" &&
      curl -fsSLO "https://github.com/kubernetes/ingress-nginx/releases/download/nginx-0.23.0/{ingress-nginx.yaml,kubectl-ingress_nginx-$(uname | tr '[:upper:]' '[:lower:]')-amd64.tar.gz}" &&      
      kubectl krew install \
        --manifest=ingress-nginx.yaml --archive=kubectl-ingress_nginx-$(uname | tr '[:upper:]' '[:lower:]')-amd64.tar.gz
    )
    1. Run:
    kubectl ingress-nginx
    A kubectl plugin for inspecting your ingress-nginx deployments
    
    Usage:
    ingress-nginx [command]
    
    Available Commands:
    backends    Inspect the dynamic backend information of an ingress-nginx instance
    certs       Output the certificate data stored in an ingress-nginx pod
    conf        Inspect the generated nginx.conf
    general     Inspect the other dynamic ingress-nginx information
    help        Help about any command
    info        Show information about the ingress-nginx service
    ingresses   Provide a short summary of all of the ingress definitions

Breaking changes:

  • The NGINX server listening in port 18080 was removed. It was replaced by a server using an unix socket as port #3684
    This server was internal to the ingress controller. In case this was being acceded from the outside, you can restore the old server using the http-snipet feature in the configuration configmap like:

    http-snippet: |
      server {
        listen 18080;
    
        location /nginx_status {
          stub_status on;
        }
    
        location / {
          return 404;
        }
      }

Deprecations:

  • The annotation session-cookie-hash is deprecated and will be removed in 0.24.
  • Flag --force-namespace-isolation is deprecated and will be removed in 0.24. Currently, this annotation is being replaced by --watch-namespace
  • The authbind package is deprecated and will be removed in 0.25, using setcap to provide CAP_NET_BIND_SERVICE capability required to bind privileged ports as a user. The reason for this is LD_PRELOAD does not work with Go binaries.
    (this means your docker storage driver must support xattr)
Assets 6
You can’t perform that action at this time.