migration

SIG Network ships the stable release of its migration tool two weeks before Ingress-NGINX was archived, expanding annotation coverage tenfold and introducing behavioral equivalence testing against live clusters.

The community-maintained Ingress NGINX controller goes read-only in March 2026. With no future security patches and four new CVEs disclosed in February, organizations running roughly half of all Kubernetes ingress traffic must now choose between Gateway API and alternative controllers.