upgrade ingress to newest available release - Githubissues

ministryofjustice / cloud-platform

Documentation on the MoJ cloud platform

MIT License

87 stars 44 forks source link

upgrade ingress to newest available release #4132

Closed razvan-moj closed 1 year ago

razvan-moj commented 2 years ago

Background

We have a memory leak (https://github.com/kubernetes/ingress-nginx/issues/8166) that is hard to debug. Two new releases are available, 1.3 and 1.4

1.3 is the safest choice, should be easy to install, only concern is to make sure it doesn't attempt to recreate the Load Balancers
1.4 docs say upstream has deprecated K8s 1.21 (https://github.com/kubernetes/ingress-nginx/releases); test that assertion, suggest further path

Approach

Change in https://github.com/ministryofjustice/cloud-platform-terraform-ingress-controller/blob/main/main.tf#L45

Definition of done

[ ] new release in live
[ ] another team member has reviewed
[ ] smoke tests are green

razvan-moj commented 1 year ago

This blog post (https://www.nginx.com/blog/f5-nginx-modsecurity-waf-transitioning-to-eol/) was just linked from the ingress issue tracker, and I think it is relevant for our issue and worth a careful read, including the Coraza reference

AntonyBishop commented 1 year ago

Superseded