TLDR Tech / DevOps
The Death of Ingress-NGINX: A Post-Mortem Nobody Wanted to Write
The community-maintained Kubernetes ingress-nginx controller, used by roughly half of all cloud-native environments, officially died in March after years of being maintained by just one or two volunteers in their spare time—a situation that became untenable after the IngressNightmare vulnerability (CVE-2025-1974, CVSS 9.8) exposed how attackers could achieve remote code execution and read all cluster secrets. The Kubernetes community is now migrating to Gateway API implementations like Envoy Gateway, NGINX Gateway Fabric, or Traefik, while the separate F5/NGINX Inc.-maintained controller remains actively supported and unaffected.
Read the full story