v2.3.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Make endpoint picker connection flags configurable by @salonichf5 in #4105
• Update GatewayAPI to v1.4.1 by @ciarams87 in #4166
• Adding nginx_proxy access_log format ability by @tataruty in #4102
• Add SupportedFeatures to GatewayClassStatus by @ciarams87 in #4236
• Add support for backend tls config for Gateways by @salonichf5 in #3900
• Allow RegularExpression for path match be RE2/PCRE friendly. by @salonichf5 in #4450
• Add support for multiple InferencePool backends by @bjee19 in #4439

🐛 Bug Fixes

• Add the goreleaser fix from release branch by @ciarams87 in #4147
• Fix production pipeline by @ciarams87 in #4148
• Support mixed externalname and local services in single route by @ciarams87 in #4188
• Fix bug where user mounted files were being removed by agent by @bjee19 in #4178
• Preserve external controller state during reconciliation by @ciarams87 in #4182
• Fix HPA race condition by reading deployment replicas instead of HPA status by @ciarams87 in #4214
• Allow HPA to work when Inference is enabled by @sjberman in #4247
• Deduplicate route status entries by @sjberman in #4250
• Fix empty pod owner name when connecting to agent by @sjberman in #4367
• Remove k8s API access from NGINX pod by @sjberman in #4368
• fix: pass IPv6 DNS resolvers correctly by @sjberman in #4378
• Truncate long resource names when provisioning by @sjberman in #4387
• Retry NGINX provisioning on all errors by @sjberman in #4399
• Update permissions of gateway binary for UBI by @shaun-nx in #4404
• Use UUID instead of IP address for tracking agent (#4470) by @sjberman in #4472
• Preserve external controller annotations for deployment and daemonSet (#4468) by @salonichf5 in #4473
• Fix hostNetwork data plane pod connection issue (#4481) by @sjberman in #4483

📦 Helm Chart

• Update CHANGELOG and README for 2.2.0 by @ciarams87 in #4138
• Allow disabling cert-generator with a Helm value by @fabian4 in #4186
• Update docs for 2.2.1 release by @sjberman in #4283
• Update NGF chart logo to official branded logo by @sjberman in #4292
• Add clarifying comment to service template by @sjberman in #4321
• Release 2.3.0 by @github-actions[bot] in #4474

🧪 Tests

• NFR Test Results for NGF version 2.2.0 (#4124) by @ciarams87 in #4127
• Update Helm release opentelemetry-collector to v0.141.0 by @renovate[bot] in #4129, #4197, #4243, #4332, #4412
• Fix IPv6 tests and reduce logging noise in test suite by @ciarams87 in #4163
• NFR Test Results for NGF version edge by @github-actions[bot] in #4202
• Update curlimages/curl Docker tag to v8.17.0 by @renovate[bot] in #4225
• Update ghcr.io/nginx/kic-test-grpc-server Docker tag to v0.2.6 by @renovate[bot] in #4240
• Update docker/dockerfile Docker tag to v1.20 by @renovate[bot] in #4276
• Functional test logging/startup fixes by @sjberman in #4302
• Fix NFR upgrade tests by @sjberman in #4371
• NFR Test Results for NGF version edge by @github-actions[bot] in #4389
• NFR Test Results for NGF version v2.3.0 by @github-actions[bot] in #4453

📝 Documentation

• Move release logic to CI by @ciarams87 in #4137
• Update NGINX Agent to v3.4.2 by @renovate[bot] in #4162
• Update bundle for v1.0.0/v2.2.0 by @ciarams87 in #4157
• Design Session Persistence - Part 1 by @salonichf5 in #4158
• Enhancement Proposal: Authentication Filter by @shaun-nx in #4136
• Provisional ProxySettingsPolicy proposal by @ciarams87 in #4237
• Design for session persistence - Part II by @salonichf5 in #4221
• Implementable ProxySettingsPolicy proposal by @ciarams87 in #4256
• Provisional RateLimitPolicy proposal by @bjee19 in #4324
• Update session persistence design by @salonichf5 in #4314
• Enhancement Proposal: Authentication Filter by @shaun-nx in #4235
• Update DavidAnson/markdownlint-cli2-action action to v21 by @renovate[bot] in #4300
• Update NGINX Plus to R36 by @sjberman in #4365
• Update NGINX Agent to v3.5.1 by @sjberman in #4372
• Add examples for secure backend traffic guide by @salonichf5 in #4341
• Update Gateway API version to 1.4.1 by @sjberman in #4397
• Fix typo in proposal header by @shaun-nx in #4364
• Update dependency nginx/agent to v3.6.0 by @renovate[bot] in #4425

🔨 Maintenance

• Fix helm tests in release pipeline by @ciarams87 in #4126
• Fix prod workflow permissions by @ciarams87 in #4132
• Add docker login step to avoid rate limiting by @ciarams87 in #4140
• Reduce renovate noise by @ciarams87 in #4217
• Remove observability from alpha1 by @tataruty in #4215
• Alignment for Conditions messages format by @tataruty in #4253
• Update operator bundle for v1.0.1 (#4285) by @ciarams87 in #4287
• Upload conformance profiles to the correct release by @ciarams87 in #4289
• Fix provisioning logs by @sjberman in #4428
• Update docs and chart for 2.2.2 by @sjberman in #4438
• Update dockerfile packages by @sjberman in #4448
• Update bundle output for Operator by @shaun-nx in #4449

⬆️ Dependencies

58 changes

• Update dependency goreleaser/goreleaser to v2.13.1 by @renovate[bot] in #4128, #4168, #4360, #4410
• Update vitest monorepo to ^4.0.7 by @renovate[bot] in #4155, #4161, #4181, #4199, #4210
• Update ghcr.io/nginx/dependencies/nginx-ubi:ubi9 Docker digest to 68964f6 by @renovate[bot] in #4152, https://github.com/nginx/nginx-ga...

v2.2.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Update permissions of gateway binary for UBI (#4404) by @shaun-nx in #4416

🔨 Maintenance

• Update operator bundle for v1.0.1 by @ciarams87 in #4285
• Release 2.2.2 by @github-actions[bot] in #4417

⬆️ Dependencies

• Update dependency nginx/agent to v3.6.0 (#4425) by @sjberman in #4427

Full Changelog: v2.2.1...v2.2.2

v2.2.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Make EPP flags configurable by @salonichf5 in #4189

🐛 Bug Fixes

• Support mixed externalname and local services in single route (#4188) by @ciarams87 in #4218
• Fix HPA race condition by reading deployment replicas instead of HPA … by @ciarams87 in #4239
• Preserve external controller annotations on Services (#4182) by @ciarams87 in #4238
• Fix bug where user mounted files were being removed by agent (#4178) by @bjee19 in #4246
• Allow HPA to work when Inference is enabled (#4247) by @sjberman in #4248

📦 Helm Chart

• Allow disabling cert-generator with a Helm value (#4186) by @sjberman in #4280
• Release 2.2.1 by @github-actions[bot] in #4274

📝 Documentation

• Update bundle for v1.0.0/v2.2.0 (#4157) by @ciarams87 in #4165

⬆️ Dependencies

• Update redhat/ubi9-minimal Docker tag to v9.7-1762180032 (#4268) by @sjberman in #4271
• Update dependency nginx/agent to v3.5.0 (#4267) by @sjberman in #4272
• Update quay.io/operator-framework/helm-operator Docker tag to v1.42.0… by @sjberman in #4281

Other Changes

• Fix production pipeline (#4148) by @ciarams87 in #4164

Full Changelog: v2.2.0...v2.3.0

v2.2.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Add nginx one console connection telemetry field by @salonichf5 in #3717
• Add local nginx dev env by @sarthyparty in #3752
• feat: Support ExternalName Services by @ciarams87 in #3759
• Add support for Port in ParentReference by @sarthyparty in #3778
• Align with BackendTLSPolicy validation by @ciarams87 in #3871
• Add regex for path matching by @fabian4 in #3874
• NGINX Plus: support enforce_initial_report field by @tataruty in #3899
• Add support for gateway addresses field by @bjee19 in #3896
• Add First Class OpenShift support by @ciarams87 in #4001
• Warnings for unsupported Gateway and Routes fields by @tataruty in #4036
• Implement Inference Extension by @ciarams87 in #4091
• OpenShift Support: Product Telemetry by @shaun-nx in #4038

🐛 Bug Fixes

23 changes

• Handle duplicate kinds in listener allowed kinds by @fabian4 in #3810
• Fix events block crash by @sarthyparty in #3730
• Fix policy attachment when ancestors slice is full by @sarthyparty in #3698
• fix: remove patch label/ annotation cross contamination by @ciarams87 in #3754
• fix: host readiness probe on ipv6 in addition to ipv4 by @lucasl0st in #3765
• Fix SnippetsFilter Functional test by @bjee19 in #3751
• Prevent policy includes duplication in advanced routing configuration by @shaun-nx in #3799
• Adjust nginx agent backoff settings and revert request timeout by @bjee19 in #3820
• Set NGINX Plus default image by @sjberman in #3919
• Improve connection reset handling during ServiceAccountToken rotation by @ciarams87 in #3905
• Remove false condition on Routes when nginx reload fails by @salonichf5 in #3936
• add nginx image version validation during agent connections by @ciarams87 in #3928
• Move certs job service account token by @sjberman in #3951
• Add plus secrets for image building in tests by @ciarams87 in #4020
• Update operator controller name & add annotation by @ciarams87 in #4026
• Update operator base libraries by @ciarams87 in #4048
• Use download artifact instead by @ciarams87 in #4033
• Remove azure upload from release pipeline by @ciarams87 in #4049
• Modify schedule by @ciarams87 in #4053
• Add conditional on listing inference pools for status by @bjee19 in #4104
• Try more permissions by @ciarams87 in #4134
• Move permissions to higher context by @ciarams87 in #4135
• Fix update draft and goreleaser on release by @ciarams87 in #4143
• Fix goreleaser by @ciarams87 in #4146

📦 Helm Chart

• Release 2.1.0 docs by @bjee19 in #3741
• Add patches to helm chart spec by @salonichf5 in #3773
• Update READMEs by @sjberman in #3788
• Release 2.1.1 docs (#3833) by @ciarams87 in #3834
• Update docs for Release 2.1.2 by @salonichf5 in #3965
• Update main docs for release 2.1.3 by @bjee19 in #3990
• Update main docs for release 2.1.4 by @bjee19 in #3997
• Release 2.2.0 by @github-actions[bot] in #4123
• Fix helm tests in release pipeline (#4126) by @ciarams87 in #4130

🧪 Tests

24 changes

• Fix NFR tests by @bjee19 in #3722
• Add CEL validation tests for NginxProxy by @shaun-nx in #3701
• add test for missing numerator case by @tataruty in #3715
• Update Helm release opentelemetry-collector to v0.137.0 by @renovate[bot] in #3725, #3770, #3803, #3879, #3924, #3948, #3967, #4120
• (Cherry-pick) NFR Test Results for NGF version 2.1.0 (#3727) by @bjee19 in #3739
• Update golang Docker tag to v1.25 by @renovate[bot] in #3747
• Add readiness probes to deployments in functional tests by @sarthyparty in #3740
• Add cel tests for upstreamsettingspolicy by @sarthyparty in #3742
• Add CEL validation tests for ObservabilityPolicy CRD by @shaun-nx in #3735
• Add CEL tests for snippetsFilter API by @salonichf5 in #3750
• Update tests instructions for common troubleshooting by @salonichf5 in #3802
• Update docker/dockerfile Docker tag to v1.19 by @renovate[bot] in #3847, #4000
• Fix some of the NFR tests to reduce error logs and pipeline failures by @salonichf5 in #3827
• Adding logging to functional tests by @tataruty in #3781
• Fix failing unit tests by @salonichf5 in #3901
• Update curlimages/curl Docker tag to v8.16.0 by @renovate[bot] in #3897
• Tests/improve nfr logging by @tataruty in #3872
• NFR Test Results for NGF version edge by @github-actions[bot] in #3921
• Update dependency golangci/golangci-lint to v2.5.0 by @renovate[bot] in #3940
• Add IPv6 testing script for use in release process by @shaun-nx in #3931
• NFR Test Results for NGF version edge by @github-actions[bot] in #3991
• Run nightly on production runners, ignore .git for vm sync by @ciarams87 in #4087
• Upload NFR test results even if test fails by @ciarams87 in #4112
• NFR Test Results for NGF version 2.2.0 by @github-actions[bot] in #4124

📝 Documentation

• Update NGINX Plus version to R35 by @salonichf5 in #3726
• Update NGINX and NGINX Agent by @sjberman in #3737
• Provisional: Proposal for Inference Extension by @sjberman in #3789
• Update NGINX Agent to v3.3.2 by @renovate[bot] in #3817, #3955
• Chore: Use F5 artifactory GOPROXY and self-hosted runners by @ciarams87 in #3718
• Proposal: Gateway API Inference Extension by @sjberman in #3800
• Update inference design by @sjberman in #3902
• Update diagram in inference doc by @sjberman in http...

v2.1.4

What's Changed

📦 Helm Chart

• Release 2.1.4 docs by @bjee19 in #3996

🔨 Maintenance

• Fix cves for libcrpyto3 and libssl3 (#3993) by @bjee19 in #3995

Full Changelog: v2.1.3...v2.1.4

v2.1.3

What's Changed

📦 Helm Chart

• Release 2.1.3 docs by @bjee19 in #3988

🔨 Maintenance

• Update Dockerfile alpine packages for cve fixes (#3973) by @bjee19 in #3983

Full Changelog: v2.1.2...v2.1.3

v2.1.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Improve connection reset handling during ServiceAccountToken rotation… by @ciarams87 in #3932
• Remove not programmed condition from Routes when nginx reload fails by @salonichf5 in #3938
• Move certs job service account token (#3951) by @sjberman in #3952
• Add nginx image version validation during agent connections by @salonichf5 in #3953

📦 Helm Chart

• Release 2.1.2 docs by @salonichf5 in #3963

🔨 Maintenance

• Update dependency nginx/agent to v3.3.1 (#3934) by @ciarams87 in #3935
• Revert agent reload backoff settings (#3937) by @bjee19 in #3939
• Remove azblob for release by @sjberman in #3964

Full Changelog: v2.1.1...v2.1.2

v2.1.1

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• fix: remove patch label/ annotation cross contamination (#3754) by @sjberman in #3766
• fix: host readiness probe on ipv6 in addition to ipv4 (#3765) by @sjberman in #3767
• Prevent policy includes duplication in advanced routing configuration by @shaun-nx in #3819
• Adjust nginx agent backoff settings (#3820) by @bjee19 in #3828

📦 Helm Chart

• Add patches to Helm chart spec by @salonichf5 in #3777
• Release 2.1.1 docs by @ciarams87 in #3833

Full Changelog: v2.1.0...v2.1.1

v2.1.0

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🚀 Features

• Apply PolicyAffected status for target refs by @salonichf5 in #3535
• Add support for backendref service appProtocol by @bjee19 in #3511
• Support configurable hostPort in helm chart by @Gasoid in #3321
• Add worker connections field to NginxProxy by @sarthyparty in #3611
• Add workerConnections field to helm chart by @sarthyparty in #3616
• Add support for percentage based request mirroring by @bjee19 in #3627
• Add readiness probe for NGINX on pod startup by @salonichf5 in #3629
• feat: Add ability to patch dataplane Service, Deployment, and DaemonSet in NginxProxy by @ciarams87 in #3630
• Add ability to disable SNI host validation by @ciarams87 in #3659
• Add connection to NGINX One Console by @bjee19 in #3676
• Add control/data plane HPA by @sjberman in #3702
• Add OverlappingTLSConfig condition by @ciarams87 in #3709
• Add nginx one console telemetry field by @salonichf5 in #3731

🐛 Bug Fixes

• Set proper IP family policy on NGINX LB Service by @sjberman in #3475
• Fix crash when BackendRef filter is specified by @sjberman in #3508
• Fix index out of bounds error when building status by @sjberman in #3513
• Move automountServiceAccountToken to Pod by @sjberman in #3573
• Fix port binding with reduced privileges by @sjberman in #3574
• Only include relevant snippets by @ciarams87 in #3586
• Validate agent token for duplicate IP addresses by @sjberman in #3673
• Fix events block crash (#3730) by @sarthyparty in #3733

📦 Helm Chart

• Use proper internal GKE service annotation by @sjberman in #3431
• Release 2.0 docs by @sjberman in #3466
• Feat: Add helm values for cert-generator Job pod placement by @baburciu in #3493
• gives enough time for argocd to verify job has finished by @ab-andresc in #3487
• Feat: Add user-provided helm values for additional control plane service labels by @michasHL in #3499
• Release 2.0.1 (#3502) by @salonichf5 in #3504
• Add nginxGateway.name usage in case of its presence instead of nameOverride by @tataruty in #3528
• Remove omitted comment by @tataruty in #3572
• fix: removes Extra keyword from volumeMounts and Volumes for the data… by @vazkarvishal in #3588
• Use server side apply for NGF CRDs by @bjee19 in #3589
• Release 2.1.0 by @bjee19 in #3734

🧪 Tests

23 changes

• Add 2.0 longevity results by @sjberman in #3429
• NFR Test Results for NGF version 2.0.0 (#3436) by @sjberman in #3438
• Fix functional tests pipeline failures by @salonichf5 in #3446
• Re-enable upgrade NFR test by @sjberman in #3482
• Update docker/dockerfile Docker tag to v1.17 by @renovate[bot] in #3524
• Update curlimages/curl Docker tag to v8.14.1 by @renovate[bot] in #3523
• Update Helm release opentelemetry-collector to v0.127.1 by @renovate[bot] in #3529
• Update Helm release opentelemetry-collector to v0.127.2 by @renovate[bot] in #3543
• Enable GatewayAddressEmpty conformance test by @sjberman in #3602
• Update Helm release opentelemetry-collector to v0.127.3 by @renovate[bot] in #3617
• Run functional and NFR tests with --race by @sjberman in #3614
• Graceful recovery test improvements by @sjberman in #3628
• Update curlimages/curl Docker tag to v8.15.0 by @renovate[bot] in #3635
• Update Helm release opentelemetry-collector to v0.129.0 by @renovate[bot] in #3636
• Update dependency golangci/golangci-lint to v2.3.0 by @renovate[bot] in #3649
• Update Helm release opentelemetry-collector to v0.130.0 by @renovate[bot] in #3675
• Add CEL validation test for targetRef in ClientSettingsPolicy by @shaun-nx in #3623
• Add CEL validation test for timeout in ClientSettingsPolicy by @shaun-nx in #3695
• Update Helm release opentelemetry-collector to v0.130.1 by @renovate[bot] in #3700
• Add mirroring fraction edge case test by @tataruty in #3708
• Update remaining server side apply for crds by @bjee19 in #3711
• (Cherry-pick) Fix NFR tests (#3722) by @bjee19 in #3723
• NFR Test Results for NGF version 2.1.0 by @bjee19 in #3727

📝 Documentation

• Add agent version to CHANGELOG template by @sjberman in #3467
• Add missing note from CHANGELOG by @sjberman in #3469
• Add enhancement proposal for NAP WAF integration by @ciarams87 in #3398
• Add API doc generation to release process by @sjberman in #3495
• Update release doc with more information by @salonichf5 in #3506
• Update module github.com/nginx/agent/v3 to v3.0.2 by @renovate[bot] in #3521
• Update dependency nginx/agent to v3.0.3 by @renovate[bot] in #3558
• Update community forum link by @sjberman in #3601
• Add simplified architecture diagrams for traffic flow and config changes by @sarthyparty in #3557
• Update dependency nginx/agent to v3.2.0 by @renovate[bot] in #3674
• Update NGINX and NGINX Agent (#3737) by @sjberman in #3738

🔨 Maintenance

• Update to agent v3 release packages by @sjberman in #3450
• Update scorecard workflow to use GITHUB_TOKEN by @ciarams87 in #3564
• Group NGINX Agent updates with Renovate by @sjberman in #3597
• Remove fixed dependency by @sjberman in #3615
• Fix intermitent lint error on types package by @bjee19 in #3652
• Update go module to v2 by @sjberman in #3660
• Update missed version path in previous commit by @sjberman in #3664
• Add logging for endpoint discovery issues by @sjberman in #3667
• Adjust logging when resolving endpoints by @bjee19 in #3690
• Update NGINX Plus version to R35 by @salonichf5 in #3729

⬆️ Dependencies

76 changes

• Update ossf/scorecard-action action to v2.4.2 by @renovate[bot] in #3424
• Update pre-commit hook gitleaks/gitleaks to v8.27.0 by @renovate[bot] in #3428
• Update github/codeql-action action to v3.28.19 by @renovate[bot] in #3441
• Update vitest...

v2.0.2

Below is the auto-generated changelog, which includes all PRs that went into the release.
For a shorter version that highlights only important changes, see CHANGELOG.md.

What's Changed

🐛 Bug Fixes

• Fix crash when BackendRef filter is specified (#3508) by @sjberman in #3575
• Fix index out of bounds error when building status (#3513) by @sjberman in #3576
• Move automountServiceAccountToken to Pod (#3573) by @sjberman in #3580
• Fix port binding with reduced privileges (#3574) by @sjberman in #3590
• Only include relevant snippets (#3586) by @ciarams87 in #3591

📦 Helm Chart

• fix: removes Extra keyword from volumeMounts and Volumes for the data… by @sjberman in #3592

Full Changelog: v2.0.1...v2.0.2