ingress-nginx

ingress-nginx copied to clipboard

Update default backend to add TLS >=1.2 support

20

## What this PR does / why we need it: Security issue with TLS < 1.2 https://github.com/kubernetes/ingress-nginx/issues/9155 ## Types of changes - [X] Bug fix (non-breaking change which fixes an...

JJotah

sensitive file with too large permission

2

ingress-nginx-controller places the key file on the disk and use permission 0o700 for starting the nginx server. https://github.com/kubernetes/ingress-nginx/blob/main/pkg/util/file/filesystem.go i think 0600 shall be enough. ```shell $ ll /etc/ingress-controller/ssl/kube-system-ingress-cert.pem -rwx------ 1...

zzzzoy

Regression when using ExternalName services

23

After upgrade from chart 4.11.3 to 4.12.1 my ingresses using ExternalName services aren't working anymore (http 503 Service Temporarily Unavailable). Logs of the controller shows: ``` 2025/03/25 10:22:17 [error] 26#26:...

philpep

auth-signin annotation fails validation with encoded url characters

14

**What happened**: `auth-signin` annotation validation does not allow url-encoded values. This causes an error when the annotation is being loaded: ``` W0128 14:50:28.714993 7 validators.go:237] validation error on ingress foo/bar:...

jasday

After Helm Chart upgrade 4.10.1 to 4.12.1 Basic Auth is enforced

3

Hello, after upgrading my helm chart from 4.10.1 to 4.12.1, all connections on my deployment require basic-auth. Is this a known issue? Have there been any changes regarding this? Thanks...

r-hempel

Rewrite Rules Not Working in NGINX Ingress Controller v1.9.0+

1

**Description** After upgrading from NGINX Ingress Controller v1.8.5 to v1.9.0+, the configuration-snippet no longer applies rewrite rules or sub_filter modifications. This behavior worked correctly in v1.8.5 and earlier versions, but...

sandeepkumar4-fractal

Canary ingress return 503 (Service Unavailable) when no main pod available

2

**What happened**: We created ingress and ingress-canary with different upstream services. Scaling deployment to 0, which is used for main ingress, cause 503 (Service Unavailable) for canary requests. **What you...

1ovsss

gRPC stream is closed after 60 seconds of idle even with timeout annotations set

14

**What happened**: The gRPC bi-directional stream is interrupted after 60 of idle even after necessary annotations are set. Annotations: ``` apiVersion: networking.k8s.io/v1 kind: Ingress metadata: annotations: nginx.ingress.kubernetes.io/proxy-connect-timeout: "300" nginx.ingress.kubernetes.io/proxy-read-timeout: "300"...

0x113

Failed to install ingress-nginx plugin with krew!

24

Installing ingress-nginx plugin with krew failed with an error download https://github.com/kubernetes/ingress-nginx/releases/download/controller-0.31.0/kubectl-ingress_nginx-linux-amd64.tar.gz 404. I tried my best on the search engines, but couldn't find any relevant information. 

zhumeishuai

NGINX: Correctly determine client IP.

11

## What this PR does / why we need it: This update ensures that the correct client IP address is determined in Ingress NGINX when the PROXY protocol is enabled....

dmeremyanin