From 77af7e4dea220c440737fc2d52d717d6f97b1874 Mon Sep 17 00:00:00 2001 From: Kevin Pollet Date: Thu, 15 Jan 2026 18:58:07 +0100 Subject: [PATCH] Add configmaps right to Ingress NGINX RBAC --- docs/content/migrate/v3.md | 22 +++++++++++++++++++ .../kubernetes-ingress-nginx-rbac.yml | 1 + 2 files changed, 23 insertions(+) diff --git a/docs/content/migrate/v3.md b/docs/content/migrate/v3.md index 46fc08ffd..9ac137559 100644 --- a/docs/content/migrate/v3.md +++ b/docs/content/migrate/v3.md @@ -576,3 +576,25 @@ Here is the list of the encoded characters that are rejected by default, along w | `%23` | `#` (hash) | `entryPoints..`
`.http.encodedCharacters`
`.allowEncodedHash` | Please check out the entrypoint [encodedCharacters option](../reference/install-configuration/entrypoints.md#opt-http-encodedCharacters) documentation for more details. + +## v3.7.0 + +### Ingress NGINX Provider + +Starting with `v3.7.0`, the Ingress NGINX provider now supports the `nginx.ingress.kubernetes.io/custom-headers` annotation to add custom headers to the response forwarded to the client. + +Therefore, in the corresponding RBACs (see [KubernetesIngressNGINX](../reference/dynamic-configuration/kubernetes-ingress-nginx-rbac.yml) provider RBACs) the `configmaps` right has been added. + +**Required RBAC Updates:** + +```yaml + ... + - apiGroups: + - "" + resources: + - configmaps + verbs: + - list + - watch + ... +``` diff --git a/docs/content/reference/dynamic-configuration/kubernetes-ingress-nginx-rbac.yml b/docs/content/reference/dynamic-configuration/kubernetes-ingress-nginx-rbac.yml index ca36e2f41..559700ac6 100644 --- a/docs/content/reference/dynamic-configuration/kubernetes-ingress-nginx-rbac.yml +++ b/docs/content/reference/dynamic-configuration/kubernetes-ingress-nginx-rbac.yml @@ -8,6 +8,7 @@ rules: resources: - services - secrets + - configmaps verbs: - list - watch