nginx/nginx-ingress

https://api.securityscorecards.dev/projects/github.com/nginx/kubernetes-ingress/badge]([***] https://github.com/nginx/kubernetes-ingress/actions/workflows/regression.yml/badge.svg?event=schedule](https://github.com/nginx/kubernetes-ingress/actions/workflows/regression.yml?query=event%3Aschedule) https://img.shields.io/badge/License-Apache%202.0-blue.svg](https://opensource.org/licenses/Apache-2.0) https://goreportcard.com/badge/github.com/nginx/kubernetes-ingress](https://goreportcard.com/report/github.com/nginx/kubernetes-ingress) https://codecov.io/gh/nginx/kubernetes-ingress/branch/main/graph/badge.svg?token=snCn7Y0zC7](https://codecov.io/gh/nginx/kubernetes-ingress) https://img.shields.io/github/v/release/nginx/kubernetes-ingress?logo=github&sort=semver](https://github.com/nginx/kubernetes-ingress/releases/latest) !https://img.shields.io/github/go-mod/go-version/nginx/kubernetes-ingress?logo=go https://img.shields.io/docker/pulls/nginx/nginx-ingress?logo=docker&logoColor=white](https://hub.docker.com/r/nginx/nginx-ingress) !https://img.shields.io/docker/image-size/nginx/nginx-ingress?logo=docker&logoColor=white&sort=semver https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/nginx-ingress](https://artifacthub.io/packages/container/nginx-ingress/kubernetes-ingress) https://www.repostatus.org/badges/latest/active.svg](https://www.repostatus.org/#active) !https://badgen.net/badge/support/commercial/green?icon=awesome

NGINX Ingress Controller

This repo provides an implementation of an Ingress Controller for NGINX and NGINX Plus from the people behind NGINX.

---

Join The Next Community Call

We value community input and would love to see you at the next community call. At these calls, we discuss PRs by community members as well as issues, discussions and feature requests.

Zoom: https://f5.zoom.us/j/98544055687?pwd=q4sGaaeWM0DawJTePBGbCngtfLJxgq.1&from=addon

Meeting ID: 985 4405 5687

Passcode: 982193

When: 16:00 GMT / Convert to your timezone, every other Monday.

You can also join the https://community.nginx.org to chat about the NGINX Ingress Controller.

---

NGINX Ingress Controller works with both NGINX and NGINX Plus and supports the standard Ingress features - content-based routing and TLS/SSL termination.

Additionally, several NGINX and NGINX Plus features are available as extensions to the Ingress resource via annotations and the ConfigMap resource. In addition to HTTP, NGINX Ingress Controller supports load balancing Websocket, gRPC, TCP and UDP applications. See ConfigMap and Annotations docs to learn more about the supported features and customization options.

As an alternative to the Ingress, NGINX Ingress Controller supports the VirtualServer and VirtualServerRoute resources. They enable use cases not supported with the Ingress resource, such as traffic splitting and advanced content-based routing. See VirtualServer and VirtualServerRoute resources doc.

TCP, UDP and TLS Passthrough load balancing is also supported. See the TransportServer resource doc.

Read this doc to learn more about NGINX Ingress Controller with NGINX Plus.

Note

This project is different from the NGINX Ingress Controller in https://github.com/kubernetes/ingress-nginx repo.

Ingress and Ingress Controller

What is the Ingress?

The Ingress is a Kubernetes resource that lets you configure an HTTP load *** for applications running on Kubernetes, represented by one or more https://kubernetes.io/docs/concepts/services-networking/service/. Such a load *** is necessary to deliver those applications to clients outside of the Kubernetes cluster.

The Ingress resource supports the following features:

• Content-based routing:
  • Host-based routing. For example, routing requests with the host header foo.example.com to one group of services and the host header bar.example.com to another group.
  • Path-based routing. For example, routing requests with the URI that starts with /serviceA to service A and requests with the URI that starts with /serviceB to service B.
• TLS/SSL termination for each hostname, such as foo.example.com.

See the https://kubernetes.io/docs/concepts/services-networking/ingress/ to learn more about the Ingress resource.

What is the Ingress Controller?

The Ingress Controller is an application that runs in a cluster and configures an HTTP load *** according to Ingress resources. The load *** can be a software load *** running in the cluster or a hardware or cloud load *** running externally. Different load ***s require different Ingress Controller implementations.

In the case of NGINX, the Ingress Controller is deployed in a pod along with the load ***.

Getting Started

Note

All documentation should only be used with the latest stable release, indicated on https://github.com/nginx/kubernetes-ingress/releases of the GitHub repository.

1. Install NGINX Ingress Controller using the Helm chart or the Kubernetes manifests.
2. Configure load balancing for a simple web application:
   • Use the Ingress resource. See the https://github.com/nginx/kubernetes-ingress/tree/main/examples/ingress-resources/complete-example.
   • Or the VirtualServer resource. See the https://github.com/nginx/kubernetes-ingress/tree/main/examples/custom-resources/basic-configuration example.
3. See additional configuration https://github.com/nginx/kubernetes-ingress/tree/main/examples.
4. Learn more about all available configuration and customization in the docs.

NGINX Ingress Controller Releases

We publish NGINX Ingress Controller releases on GitHub. See our https://github.com/nginx/kubernetes-ingress/releases.

The latest stable release is https://github.com/nginx/kubernetes-ingress/releases/tag/v5.5.0. For production use, we recommend that you choose the latest stable release.

The edge version is useful for experimenting with new features that are not yet published in a stable release. To use it, choose the edge version built from the https://github.com/nginx/kubernetes-ingress/commits/main from the main branch.

To use NGINX Ingress Controller, you need to have access to:

• An NGINX Ingress Controller image.
• Installation manifests or a Helm chart.
• Documentation and examples.

It is important that the versions of those things above match.

The table below summarizes the options regarding the images, Helm chart, manifests, documentation and examples and gives your links to the correct versions:

SBOM (Software Bill of Materials)

We generate SBOMs for the ***aries and the Docker images.

***aries

The SBOMs for the ***aries are available in the releases page. The SBOMs are generated using https://github.com/anchore/syft and are available in SPDX format.

Docker Images

The SBOMs for the Docker images are available in the https://hub.docker.com/r/nginx/nginx-ingress/, https://github.com/nginx/kubernetes-ingress/pkgs/container/kubernetes-ingress, Amazon ECR Public Gallery or https://quay.io/repository/nginx/nginx-ingress repositories. The SBOMs are generated using https://github.com/anchore/syft and stored as an attestation in the image manifest.

For example to retrieve the SBOM for linux/amd64 from Docker Hub and analyze it using https://github.com/anchore/grype you can run the following command:

console
docker buildx imagetools inspect nginx/nginx-ingress:edge --format '{{ json (index .SBOM "linux/amd64").SPDX }}' | grype

Contacts

We’d like to hear your feedback! If you have any suggestions or experience issues with our Ingress Controller, please create an issue or send a pull request on GitHub.

Contributing

If you'd like to contribute to the project, please read our Contributing guide.

Support

For NGINX Plus customers NGINX Ingress Controller (when used with NGINX Plus) is covered by the support contract.