What's Changed

🚀 Features

• Add BUILD_OS to Telemetry by @AlexFenlon in #5968
• Sync oidc repo by @haywoodsh in #6014
• Support End Session Endpoint for OIDC and allow customizable Post-logout Redirect URI by @haywoodsh and @llomgui in #6092
• Make access_log in http context configurable by @hafe in #5648
• Add ip as an option to listeners for VirtualServer by @AlexFenlon in #6180
• Add ip as an option to listeners for TransportServer by @j1m-ryan in #6367

🐛 Bug Fixes

• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• Fix api key policy undefined routes by @j1m-ryan in #5838
• Add default telemetry endpoint by @shaun-nx in #5885
• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5899
• Don't log errors for not implemented grpc metrics by @jjngx in #6125
• Fix panic when creating VirtualServer by @hafe in #6232
• Create unique lease obj for each NIC installed via Helm by @jjngx in #6372
• Fix udp/http listener validation logic by @j1m-ryan in #6406
• Disable batch reload when batch finishes by @dareste in #6446
• grafana template update that works with grafana v11.2.0 (#6511) by @jjngx in #6526

📦 Helm Chart

• Remove include-year and includeYear flag by @harsha-mangena in #5817
• Choose NodePort values for controller.service.type = LoadBalancer by @Falltrades in #5335
• Update helm docs by @vepatel in #6235
• [cherry-pick] WAFv5 update to 5.3/alpine update by @nginx-bot in #6510
• Release 3.7.0 by @nginx-bot in #6480

🧪 Tests

• Check for non 50x 404 response by @vepatel in #5851
• Chore/python clean up, and unused variable check to pre commit by @j1m-ryan in #5866
• Split VSR matrix in 3 by @j1m-ryan in #5883
• Move some python tests from vs1 to vs2 by @j1m-ryan in #5888
• Pod logs in tests when startup fails by @oseoin in #5901
• Make markers strict, and add project.toml to local python tests, by @j1m-ryan in #5911
• Add flaky label to some flaky tests by @j1m-ryan in #5955
• Dos - Allow list by @pasmant in #5824
• Reduce NAP CI time by @j1m-ryan in #5999
• Add test to check for agent by @vepatel in #6111
• Move test to correct directory by @vepatel in #6114
• Assert version from log and chart by @vepatel in #6307
• Add NIC+WAFv5 tests by @vepatel in #6456
• Add retry to version check in logs by @nginx-bot in #6504

🔨 Maintenance

What's Changed

🐛 Bug Fixes

• Don't log errors for not implemented grpc metrics (#6125) by @jjngx in #6150
• re-order mounting debian apt source file by @nginx-bot in #6225

📦 Helm Chart

• Update helm docs by @nginx-bot in #6236
• Release 3.6.2 by @nginx-bot in #6220

🧪 Tests

• add agent test by @vepatel in #6115

🔨 Maintenance

• Shortcode for NIC version in docs by @nginx-bot in #5975
• replace promlog with go-kit by @nginx-bot in #6053
• pin wafv5 module by @vepatel in #6170
• update example for WAF v5 by @nginx-bot in #6189
• Bump kindest/node from v1.30.2 to v1.31.0 in /tests in the docker-tests group by @nginx-bot in #6206
• update kubernetes version to v1.31.0 in helm schema by @nginx-bot in #6219

📝 Documentation

• fips compatibility issue by @oseoin in #5973
• update k8s compatibility order in tech specs by @j1m-ryan in #5991
• update WAF v5 documentation by @nginx-bot in #6019
• remove link to ingress example by @nginx-bot in #6102
• App Protect WAFv5 compatibility matrix by @nginx-bot in #6178
• update README.md by @vepatel in #6190
• Fix manifest CRD documentation by @ADubhlaoich in #6208

⬆️ Dependencies

• Bump the go group with 1 update by @nginx-bot in #5967
• Docker image update d41d8cd9 by @nginx-bot in #5974
• Docker image update d41d8cd9 by @nginx-bot in #6013
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #6021
• Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in the go_modules group by @nginx-bot in #5998
• Docker image update d41d8cd9 by @nginx-bot in #6070
• Bump the go group across 1 directory with 6 updates by @nginx-bot in #6081
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6120
• Docker image update d41d8cd9 by @nginx-bot in #6098
• Docker image update d41d8cd9 by @nginx-bot in #6126
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6141
• Docker image update d41d8cd9 by @nginx-bot in #6158
• Docker image update d41d8cd9 by @nginx-bot in #6179
• Docker image update d41d8cd9 by @nginx-bot in #6191
• Bump the go group across 1 directory with 11 updates by @nginx-bot in #6196
• update telemetry exporter to v0.1.1 by @nginx-bot in #6204
• Bump the go group across 1 directory with 2 updates by @nginx-bot in #6211
• Bump github.com/nginxinc/nginx-plus-go-client from 1.2.2 to 1.3.0 in the go group by @nginx-bot in #6222
• nginx 1.27.1 dependencies by @pdabelf5 in #6226
• Docker image update d41d8cd9 by @nginx-bot in #6233
• Bump the go group with 3 updates by @nginx-bot in #6234

Full Changelog: v3.6.1...v3.6.2

Upgrade

• For NGINX, use the v3.6.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.6.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, Azure Marketplace or build your own image using the v3.6.2 source code.
• For Helm, use version 1.3.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.2/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

🐛 Bug Fixes

• GRPC healthcheck should not have keepalive time by @j1m-ryan in #5921
• Add default telemetry endpoint by @shaun-nx in #5889

🔨 Maintenance

• Add permissions for gcr login to base image build (#5860) by @oseoin in #5862
• release pipeline fixes by @pdabelf5 in #5863
• terminate milestone api call by @pdabelf5 in #5864
• Update release skip job logic by @pdabelf5 in #5865
• aws marketplace id token by @pdabelf5 in #5867
• add v prefix to github version by @pdabelf5 in #5868
• skip closing already closed milestone by @pdabelf5 in #5869
• remove fips from tests & image publishing by @pdabelf5 in #5918
• ensure example versions are updated by @pdabelf5 in #5897
• Mount pyproject.toml in smoke tests by @nginx-bot in #5935
• Add missing write permission for release draft by @nginx-bot in #5946
• Image matrix by @oseoin in #5950
• Version Bump for 3.6.1 by @nginx-bot in #5895

📝 Documentation

• remove reference to auth_request off by @j1m-ryan in #5937
• add scc and update deployment by @vepatel in #5940

⬆️ Dependencies

• Bump the go group with 1 update by @nginx-bot in #5877
• Bump the go group with 2 updates by @nginx-bot in #5884
• Bump Go version - fix vulnerability in the std lib by @nginx-bot in #5930
• Bump the go group across 1 directory with 3 updates by @nginx-bot in #5933
• Bump the go group with 2 updates by @nginx-bot in #5951
• Bump kindest/node from v1.30.0 to v1.30.2 in /tests in the docker-tests group by @nginx-bot in #5941
• Docker image update d41d8cd9 by @nginx-bot in #5923
• Bump the python group in /tests with 2 updates by @nginx-bot in #5926
• Docker image update d41d8cd9 by @nginx-bot in #5882
• Docker image update d41d8cd9 by @nginx-bot in #5939
• Docker image update d41d8cd9 by @nginx-bot in #5943
• Docker image update d41d8cd9 by @nginx-bot in #5947
• Bump the actions group across 1 directory with 2 updates by @nginx-bot in #5931

Full Changelog: v3.6.0...v3.6.1

Upgrade

• For NGINX, use the v3.6.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.6.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, the Azure Marketplace or build your own image using the v3.6.1 source code.
• For Helm, use version 1.3.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.6.1/deployments/helm-chart
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

🚀 Features

• Preserve valid listeners when invalid listeners are present in GlobalConfiguration by @haywoodsh in #5205
• Add proxy-set-headers annotation for ingress by @AlexFenlon in #5366
• Add telemetry data - ingresses by @jjngx in #5406
• add service count metric to telemetry by @j1m-ryan in #5408
• Add Ingress Classes to Telemetry data by @jjngx in #5418
• Add policies count to telemetry by @AlexFenlon in #5457
• Add support for headers in action return by @andrew-s in #5204
• Add Granular Policy count for telemetry by @AlexFenlon in #5489
• Add Ingress Annotation List to Telemetry by @AlexFenlon in #5516
• Add AppProtectVersion to Telemetry by @AlexFenlon in #5554
• Add IsPlus to Telemetry by @AlexFenlon in #5571
• Add Installation Flags to Telemetry by @AlexFenlon in #5586
• Scale ratelimit with ingress pods by @dbaumgarten in #5113
• Add Granular Ingress Counts to Telemetry by @AlexFenlon in #5608
• Add Granular Services Counts to Telemetry by @AlexFenlon in #5627
• enable external service args by @vepatel in #5736
• Integrate NAP WAF v5 by @shaun-nx in #5698
• Support APIKey authentication by @haywoodsh in #5580

🐛 Bug Fixes

• fix ap-waf flag in error message by @vepatel in #5350
• Don't reload when use-cluster-ip endpoints update, and change the ingress use-cluster-ip implementation to use the cluster ip instead of the fqdn by @j1m-ryan in #5318
• fix status for invalid vs and vsr, for weight changes dynamic reload by @j1m-ryan in #5375
• pin ap compiler by @vepatel in #5433
• Add support for named ports in ingresses which use-cluster-ip by @j1m-ryan in #5456
• Fix nginx breaking & remove unused code for ProxySetHeaders annotation by @AlexFenlon in #5426
• Fix error messages by @jjngx in #5542
• Fix incorrect errors showing in Telemetry by @AlexFenlon in #5561
• Don't count Custom Resources if not enabled at NIC startup by @jjngx in #5749
• Change log level, to Info and above, before calling prometheus exporter functions by @j1m-ryan in #5786
• fix api key policy undefined routes by @j1m-ryan in #5838

📦 Helm Chart

• Remove the before NGINX Ingress Controller in some cases by @j1m-ryan in #5274
• Version Bump for 3.6.0 by @nginx-bot in #5285
• correct helm version in docs by @pdabelf5 in #5287
• update helm flag in docs for enableWeightChangesDynamicReload by @j1m-ryan in #5313
• docs version update to 3.5.0 by @pdabelf5 in #5327
• Collect count of secrets by @shaun-nx in #5404
• add local helm schema validation by @pdabelf5 in #5493
• 3.5.1 docs update by @pdabelf5 in #5520
• Revert "add local helm schema validation" by @oseoin in #5528
• Release 3.5.2 by @pdabelf5 in #5678
• helm: add knob to control cluster level rbac rendering by @hafe in #5229
• update values schema from 1.29 to 1.30 by @j1m-ryan in #5772
• Version Bump for 3.7.0 by @nginx-bot in #5828

🧪 Tests

• Wait before assertion in weight changes dynamic reload test by @j1m-ryan in #5302
• simplify smoke-test action by @pdabelf5 in #5311
• enable logging in tests by @vepatel in #5499
• Revert "enable logging in tests" by @oseoin in #5543
• Bump kindest/node from v1.29.2 to v1.30.0 in /tests in the docker-tests group across 1 directory by @dependabot in #5549
• add files for upgrade tests by @vepatel in #5553
• Docker image update d41d8cd9 by @nginx-bot in #5570
• exclude upgrade files from nightly regression tests by @vepatel in #5581
• add wait to dos test by @vepatel in #5656
• skip dos log test by @vepatel in #5658
• Fix test_dos_sec_logs_on by @pasmant in #5725
• Mount config and deployments dirs to smoke containers by @oseoin in #5740
• Docker image update d41d8cd9 by @nginx-bot in #5743
• replace skopeo action with skopeo image by @pdabelf5 in #5760
• add functional tests for rate-limit scaling by @vepatel in #5758
• check pod readiness in ingress scale test by @vepatel in #5774
• Workflow refactor by @pdabelf5 in #5766
• add docker scout scan to pipelines by @pdabelf5 in #5759
• Docker image update d41d8cd9 by @nginx-bot in #5822
• check for non 50x 404 response by @vepatel in #5851

🔨 Maintenance

What's Changed

⚠️ NGINX App Protect

• Bundles compiled on NAP WAF versions <= v4.8.x are not compatible with NAP WAF versions >= 4.9.x, this release of NIC includes NAP WAF v4.10 so recompilation of policy bundles is required. JSON based WAF Policies aren’t affected with this change.

📦 Helm Chart

• Version Bump for 3.5.2 by @nginx-bot in #5641

🧪 Tests

• skip dos log test (#5658) by @oseoin in #5660

🔨 Maintenance

• [cherry-pick] remove cert-gen script by @vepatel in #5632

📝 Documentation

• update operator version by @vepatel in #5566
• Docs/update mktplc refs by @vepatel in #5616
• add azure marketplace link by @vepatel in #5621
• cherry-pick NAP link fixes & troubleshooting documentation improvements from main by @ADubhlaoich in #5645

⬆️ Dependencies

• Bump the go group with 2 updates by @github-actions in #5590
• [cherry-pick] Manually apply main go patches by @oseoin in #5631
• [cherry-pick] Bump the go group across 1 directory with 4 updates by @nginx-bot in #5638
• [cherry-pick] Upgrade prometheus exporter to 1.1.2 by @pdabelf5 in #5662
• Docker image update d41d8cd9 by @nginx-bot in #5579
• Cherry pick kind 1.30 by @oseoin in #5642
• Container SHA cherry pick by @oseoin in #5573
• Bump the python group across 1 directory with 4 updates by @github-actions in #5598
• [pre-commit.ci] pre-commit autoupdate by @github-actions in #5600
• Bump golang from f1fe698 to b8ded51 in /build by @nginx-bot in #5623
• [cherry-pick] Bump redhat/ubi8 from 83068ea to a424544 in /build by @nginx-bot in #5630
• Bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 in the actions group by @nginx-bot in #5618
• [cherry-pick] [pre-commit.ci] pre-commit autoupdate by @nginx-bot in #5636
• [cherry-pick] Update debian build stages to use gpg over sq by @pdabelf5 in #5665
• [cherry-pick]NGINX Plus R32 by @vepatel in #5654
• [cherry-pick] Docker image update d41d8cd9 by @nginx-bot in #5673
• [cherry-pick] Bump the python group in /tests with 2 updates by @nginx-bot in #5669

New Contributors

• @github-actions made their first contribution in #5590

Full Changelog: v3.5.1...v3.5.2

Upgrade

• For NGINX, use the v3.5.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.5.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace, the Azure Marketplace, or build your own image using the v3.5.2 source code.
• For Helm, use version 1.2.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.2/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

📦 Helm Chart

• Update helm flag in docs for enableWeightChangesDynamicReload (#5313) by @j1m-ryan in #5315

🐛 Bug Fixes

• Don't reload when use-cluster-ip endpoints update by @j1m-ryan in #5463
• Fix status for invalid vs and vsr, for weight changes dynamic reload … by @j1m-ryan in #5464
• Add support for named ports in ingresses which use-cluster-ip (#5456) by @j1m-ryan in #5470

📝 Documentation

• Update docs by @vepatel in #5312
• Remove operator note by @vepatel in #5329
• Fix heading in agent config doc by @vepatel in #5359
• Update doc for waf-dos image by @vepatel in #5369
• Fix link to rbac template by @vepatel in #5412
• Security monitoring docs by @vepatel in #5355

⬆️ Dependencies

• Go updates by @pdabelf5 in #5391
• Bump the go group across 1 directory with 7 updates (#5495) by @pdabelf5 in #5511

Other Changes

• Pin app-protect module version to 4.8.1 by @pdabelf5 in #5490

Full Changelog: v3.5.0...v3.5.1

Upgrade

• For NGINX, use the v3.5.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.5.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.5.1 source code.
• For Helm, use version 1.2.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.5.1/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

🚀 Features

• Export Telemetry data to XCDF by @shaun-nx & @jjngx in #4896, #5095, #5147, #5155, #5170, #5176, #5217, #5245, #5237, #5256, #5167 & #5261
• Add NIM Security Dashboard integration for App Protect WAF security violations by @oseoin in #5179 & #5051
• Weight changes Dynamic Reload by @j1m-ryan in #5212
• Add use-cluster-ip annotation for ingress resources by @j1m-ryan in #4862
• Add annotations for controlling request rate limiting by @dbaumgarten in #4660
• Allow securityContext and podSecurityContext to be configurable via helm parameters by @vepatel in #5084
• Update default values for keepalive-requests and keepalive-timeout by @AlexFenlon in #5083
• Update zone size for transportserver resource by @AlexFenlon in #5199

🐛 Bug Fixes

• Move set above rewrite to fix uninitialized variable by @AlexFenlon in #5211
• Initialize stopCh channel for ExternalDNS by @shaun-nx in #5175
• Ensure backup server is removed from upstreams when the Backup Service is deleted by @shaun-nx in #5053

📦 Helm Chart

• Refactor volumes and volumeMounts to common helpers by @oseoin in #5159
• Move common pod label definitions to helpers by @oseoin in #5179
• Agent management and helm configuration by @oseoin in #5188

🧪 Tests

• Update vs backup service tests with retries by @shaun-nx in #4797
• Add ingress rate-limit automation tests by @vepatel in #4919
• Add reload and req./resp. perf tests for ing and vs by @vepatel in #5048
• check pod status before getting logs by @vepatel in #5165
• update external-dns version by @vepatel in #5166
• add metrics logic to perf tests by @vepatel in #5224

🔨 Maintenance

• Fix AWS registry by @lucacome in #4825
• Add trigger for GCP Marketplace repo by @lucacome in #4829
• Report User Agent for Alpine and UBI by @lucacome in #4845
• Update UBI string for new images by @lucacome in #4893
• Update search for base image by @lucacome in #4912
• Add annotations to index and manifest by @lucacome in #5014
• Bump Go version to 1.22.1 by @jjngx in #5208

📝 Documentation

• Rewrite NGINX App Protect WAF Integration Section by @ADubhlaoich in #4726
• Fix and update links in VirtualServer port tutorial by @ADubhlaoich in #4792
• Update docs to include CRD upgrade by @vepatel in #4851
• Update to UBI9 by @oseoin in #4854
• Add rate-limit example by @vepatel in #4907
• Add alpine fips image options to installation docs by @pdabelf5 in #4962
• Fix minor documentation issues based on drift and feedback by @ADubhlaoich in #5011
• Add community page for NIC by @oseoin in #5038
• Fixed validation for VSR exact & regex subroutes by @jo-carter in #4744
• Add missing entries to the documentation catalog. by @Jcahilltorre in #5146
• Added few tips for TCP/UDP Load Balancing by @ssrahul96 in #5117
• Update docs for aplogconf by @vepatel in #5251
• Add support for apLogBundle in WAF policy by @oseoin in #5259
• Documentation on what Telemetry Data is collected + how to opt-in/opt-out by @shaun-nx in #5253

⬆️ Dependencies

What's Changed

🐛 Bug Fixes

• Allow waf users to build without dos repo access by @pdabelf5 in #5043
• Fix template file spacing for ssl_protocols directive by @j1m-ryan in #5060
• Remove redundant Prometheus variable labels by @haywoodsh in #5085
• Fix new lines in snippets by @j1m-ryan in #5059
• Fixed validation for VSR exact & regex subroutes by @jo-carter in #5079

📦 Helm Chart

• Helm notes updates by @oseoin in #5071

⬆️ Dependencies

• Bump redhat/ubi8 base image by @dependabot in #5073 & #5029
• Bump redhat/ubi9-minimal base image by @dependabot in #4994
• Bump ubi base image by @dependabot in #4992
• Bump opentracing/nginx-opentracing image @dependabot in #5074) & #4927
• Bump nginx image to 1.25.4 by @dependabot in #5028, #5019, #5012, #5003, #4926 & #5119
• Bump the debian base image by @dependabot in #4925
• Bump golang build image by @dependabot in #5004, #4984 & #4928
• Update kindest/node from v1.29.0 to v1.29.1 by @dependabot in #5033
• Bump the go dependencies by @dependabot in #4909, #4924, #4939, #4949, #4971, #5022, #5034 & #5055

Full Changelog: v3.4.2...v3.4.3

Upgrade

• For NGINX, use the v3.4.3 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.4.3 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.4.3 source code.
• For Helm, use version 1.1.3 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.3/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.3/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

📦 Helm Chart

• Release 3.4.2 by @nginx-bot in #4935

Other Changes

• GCR AWS plus publish fix by @pdabelf5 in #4934

Full Changelog: v3.4.1...v3.4.2

Upgrade

• For NGINX, use the v3.4.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.4.2 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.4.2 source code.
• For Helm, use version 1.1.2 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.2/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.2/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator

What's Changed

🚀 Features

• NGINX Plus R31 support by @pdabelf5 in #4886

📦 Helm Chart

• Release 3.4.1 by @nginx-bot in #4920

🧪 Tests

• Cherry pick 3.4.1 by @pdabelf5 in #4886
• Base image hash (#4871) by @pdabelf5 in #4917

📝 Documentation

• minor docs updates by @pdabelf5 in #4821
• Update operator install document by @vepatel in #4830
• Cherry-pick NGINX App Protect WAF & VirtualServer documentation changes by @ADubhlaoich in #4844
• Update docs to include CRD upgrade by @vepatel in #4852

Full Changelog: v3.4.0...v3.4.1

Upgrade

• For NGINX, use the v3.4.1 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
• For NGINX Plus, use the v3.4.1 images from the F5 Container registry, the AWS Marketplace, the GCP Marketplace or build your own image using the v3.4.1 source code.
• For Helm, use version 1.1.1 of the chart.

Resources

• Documentation -- https://docs.nginx.com/nginx-ingress-controller/
• Configuration examples -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.1/examples
• Helm Chart -- https://github.com/nginxinc/kubernetes-ingress/tree/v3.4.1/charts/nginx-ingress
• Operator -- https://github.com/nginxinc/nginx-ingress-helm-operator