Skip to content

Helm Chart release notes for Citrix Ingress Controller 1.21.9

Compare
Choose a tag to compare
@priyankash-citrix priyankash-citrix released this 16 Dec 12:28
· 99 commits to master since this release
9cfbef1

This release note contains information about the Helm chart related changes for the Citrix ingress controller version 1.21.9.

Enhancements

  • Citrix ingress controller now supports WAF features such as request side streaming, configuring RFC profile, and grammar based SQL injection detection support.
  • Previously Ingress status was updated with an external IP address only when Citrix ingress Controller is started with the –update-ingress-status argument configured as yes. Now, Ingress status is updated with an external IP address by default for tier-1 deployments. This argument –update-ingress-status configured as yes is required for tier-2 deployments with Citrix ADC CPX for updating the ingress status with external IP addresses.
  • For multi-cluster Ingress, Citrix ingress controller now supports HTTPS monitors with SNI enabled by default during the TLS handshake.
  • For multi-cluster Ingress, Citrix ingress controller now supports source IP persistence.
  • Citrix ingress controller feature-node-watch now supports OpenShift OVN CNI.

Fixed issues

  • Earlier, OpenShift feature-node-watch was not configuring the correct routes on the Citrix ADC after the node modify event for OpenShift-SDN CNI. This issue is now fixed.
  • Sometimes Listener CRD was failing to create cipher groups due to the name size limit of 39 characters. This issue is fixed by using the hash to limit the name size to 39 characters.
  • The ingress.citrix.com/csvserver annotation was getting applied only when the first ingress belonging to the content switching virtual server is created. Now, this annotation gets applied regardless of the order of ingresses.
  • In the Citrix ADC CPX BGP deployment, service of type LoadBalancer status was not getting updated with external IP sometimes. This issue is fixed.
  • Citrix ingress controller now supports the modification of service of type LoadBalancer by clearing the stale entries in Citrix ADC. This modification includes any port group and annotation modifications.
  • While adding domain name servers through ConfigMap for tier 1 Citrix ADC, the existing domain name server configuration on Citrix ADC VPX was getting deleted if the existing configuration was not specified as part of the ConfigMap. Now, this issue is fixed.
  • Earlier, When Citrix ingress controller was configuring existing alternate backend routes on OpenShift during boot-up, an error keyError: 'weighted_abpol' may occur. Now, it is fixed.