search

rancher / rke2

https://docs.rke2.io/
Apache License 2.0
1.5k stars 261 forks source link

Modsecurity does not work in new releases (nginx-ingress-controller:v1.10.1) #6411

Closed kfkawalec closed 2 weeks ago

kfkawalec commented 1 month ago

Environmental Info: RKE2 Version: v1.27.15+rke2r1

Describe the bug: Unable to user ModSecurity in "nginx-ingress-controller:v1.10.1-hardened1", error:

dlopen() "/etc/nginx/modules/ngx_http_modsecurity_module.so" failed (liblua5.4.so.5: cannot open shared object file: No such file or directory)

Version "nginx-ingress-controller:v1.9.6-hardened1" works without any issue.

I tried to downgrade helm chart to 4.9.101 but the server automatically installed 4.10.101. Maybe there is a way to do a permanent downgrade?

Steps To Reproduce: Upgrade cluster to v1.27.15+rke2r1

dereknola commented 1 month ago

Can you give more information on your nginx config and setup. This will help me in reproducing this issue. I overhauled the base image that we ship with ingress-nginx to SLES 15.6 base and likely didn't include all the libraries from 1.9.6.

kfkawalec commented 1 month ago

I am using Ubuntu 22.04.3 LTS on the nodes. I have installed liblua5: liblua5.4-0 is already the newest version (5.4.4-1)

What other information is required?

aganesh-suse commented 2 weeks ago

Newer ingress-nginx controller bump: https://github.com/rancher/rke2-charts/pull/502/

aganesh-suse commented 2 weeks ago

Closing based on release-1.30 results: https://github.com/rancher/rke2/issues/6475